← zabolotny.de
DEENRUUA

Home / Notes

Proxmox · LXC · Homelab

Proxmox & LXC in a homelab: which containers I run and why

Four containers, four roles: how my home server is built, which programs run where and how I laid out the storage.

Serge Zabolotny ·

The hardware

An HP EliteDesk 800 G3 Mini with 16 GB RAM, Proxmox VE as the hypervisor. Not a server room, just a quiet box under the desk – that still carries 15+ services.

Why LXC instead of virtual machines?

Split by role

CTNameRoleServices
100dev-serverDevelopmentProjects, PostgreSQL
101home-mediaData & mediaNextcloud, Immich, Jellyfin, Paperless-ngx, AdGuard, Fail2ban
102smarthomeHome automationHome Assistant, Frigate, MQTT
103network-gatewayAccess & monitoringTailscale, Uptime Kuma, Homepage

Why not put everything in one container? Three reasons: if something breaks, the damage stays within one role. Backups and restores work per container. And every role gets its own resources and network rules.

The storage layout

Moving later from the SATA SSD to the NVMe worked without a reinstall: the root disks can be moved in an existing setup.

pct move-volume <CTID> rootfs <target-storage>

Tip for used SSDs: check their health first. My “new” NVMe already had 33 TB written – healthy, but not new.

smartctl -a /dev/nvme0n1

How to get started

  1. Install Proxmox VE on the mini PC.
  2. Create one container for data and media and install Docker in it.
  3. Give containers static IP addresses – otherwise DNS and routing will break at some point.
  4. Add one service at a time, not ten at once.
  5. Set up backups before the data becomes important.

Keep reading

Self-hosting · Homelab · Privacy

Leaving the cloud: a home server instead of Google, iCloud & co.

At home I run a Proxmox server with 15+ services. Here is which cloud services it replaces for me, what it costs – in time – and where you are better off staying in the cloud.

Access · Security · Backup

Reaching and protecting a home server: Tailscale, Cloudflare Tunnel, vzdump

A home server is only as good as its access and its backups. My principle: no port forwarding, every access path a conscious decision, a backup every day.

Homelab · Backup · Proxmox

Backup the 3-2-1 way and the restore test: a backup only counts once it has been restored

Most backup stories end at the same point: the backup ran – but nobody ever tested whether it can be restored. Here is how I back up my Proxmox host and how I test the restore without endangering anything running.

DevOps · Cloudflare · Zero Trust

Zero Trust for the homelab: Cloudflare Tunnel and Access instead of open dashboards

An internal dashboard was publicly reachable via a subdomain. Here is how I locked it down with Cloudflare Tunnel, Cloudflare Access and Tailscale.

Comments

Join the discussion: comments run on GitHub Discussions (sign in with a GitHub account). Content from GitHub/giscus is only loaded after you click. Privacy

More from my homelab

Find the whole series, more notes and case studies here.

All notes Case study MeisterMeld Case study PflegeOasis Case study Kernbohr-Expert Back to the homepage