Came here to say this. Cloudflare tunnels ar3 amazing

Once youbuave cloudflared installed on a host, it created an inbound tunnel to whatever IP you configure. This server, and a bunch of other servers i have running, are running across a single clodludflare tunnel. It allows me to keep everything separate and automatically fixes when my public ip changes.

It also masks your public IP from prying eyes.

So I ahve filesystem backups of the entire thing (using proxmox backup server) and a replicated image of the docker-volume and all subvolumes that’s both snapped locally and replicated to a NAS at my condo about 200 miles away.

I think I’m covered. I even tried brinigng up the server on the Truenas there and it worked like a champ…All I ahve to do is fail my cloudflared over and everything would automatically come up on the remote location without me even having to muck about with DNS.

I don’t mess with Git…I should…but that’s a new set of lessons. :)

Nope, if I have to upload an ID, that’s a dealbreaker.

Most people don’t. in the event of a total failure you reinstall Proxmox, you configure your networks, then you restore your backups into it.

Honestly it’s the same method I’ve used countless times on VMware / Rubrik.

Yeah, a good enclosure will have accoustically isolated drives (rubber bumpers at the drive mount points)

I run rack-mount servers, so drive noise is the least of my issues (fans are always the loudest part of any server) but I used to run in a Nanoxia DeepSilence 6 tower, and it was amazing. 1mm thick superstructure, insulation, accustically isolated drive mounts, etc. Couldn’t hear that even when the fans were running at full steam.

RAID is for continuous of operations, backup is for restoration after a failure.

I have both, but run Raid-6 on my array due to the size of the drives. As has been observed here, if one drive fails and then another drive fails during the rebuild, you’ve lost everything.

Then to add to that I’ve got backups of everything I can’t replace. Plex library will come back automatically (though it will take a while). But my documents, digital filing cabinet, pictures, videos of my kids, those are all protected by raid, backup, AND off-site replication.

If you don’t have backups, consider multiple drives in a RAID configuration.

instead of the 12T, consider 3 8T drives in a Raid-5 array. That way if one fails, you’ve not lost everything, and have time to repalce it and rebuild it - with ZFS (most NAS systems use ZFS) the rebuild is simple and online.

It’s just Debian, no surprises.

Truenas is hardened enough that it’s pretty hard to screw it up… you can’t install packages or anything like that… My goal was to have one server that’s “Production” so that I can nuke the lab from time to time as needed. (I have a proxmox server, a VMWare server, and one that bounces back and forth between nutanix and whatever else I want to play with at the time…

Also have another R730XD that I use for proxmox backup server, 6x 12TB drives (that were my nas drives before I got the 22TB upgrades) PBS is an amazing application, even when I’m not using the proxmox VM’s, the filesystem backups work like a champ, and it replicates backups to an NFS datastore in my other house (running on Truenas on a T630 under my desk)

Saw an article that says proxmox backup client can be set up to be ZFS aware…will have to do more reading… (for backups)

Replication is always a point in time, and I keep two weeks worth of dailies.

Well that worked… Amaze! I copied the lemmy directory to my user directory, made the necessary changes in docker-compose, and boom, it came up. If I were to script the changes using sed, I could even have a full DR failover.

Not a bad idea…I’ll have to make some network changes in the docker compose and build a new macvlan for it…but it should be easily addressable by IP address. I did to a test startup of my mastodon DB and that did seem to work…

And I should probably block outbound traffic just to be sure it’s not trying to update the fediverse…

Cool, now I know what I’m playing with tonight. :)

I’m just running docker-compose on the truenas itself… bonus points is docker ps shows me the truenas apps as well as the ones I’ve created… Downside is, no GUI indication of the docker-compose stuff.

I have a similar setup. 2x 250G hardware mirrored for boot, 4x 2TB SSD’s ZFS mirrored for apps, 12x 22TB Raid-Z2 for mostly static data (plex, etc) All in a single Dell PowerEdge R730 with 256G of ram and an RTX3050 in it, so I have plenty of room for apps and such.

By today’s standards it’s an expensive setup, but I only paid $189/each for the 22T drives back when I built it, so it wasn’t so bad then.

I have another container running the proxmox backup client that does a filesystem dump daily… Not bad, but I think postgres may not recover from that…

Right now 2 weeks of daily replicated snapshots are probably as good as I’m going to get…

Most of us are here to not be force-fed adverts…read the room.

To keep the errors out and provide just the result.

OOhh ouch, that sucks ass… If I didn’t have Gigabit synchronous at the source there is no way I would even attempt replciation…I’d be carrying spare drives with me every time I go down to visit my grandson. ;-)

I brought the two into the same room for the initial sync…then drove the T630 to the condo and hooked up, and it’s all incremental updates over the 1G VPN. :)

I just use OpenVPN on Ubiquiti to get in front the outside myself, and “public” sites (like this one) come in through a cloudflare tunnel to a walled-off DMZ lan…

Reading about it, seems a bit like reinventing the wheel.

I have 120TB in a dell T630 at a condo i rent on the other side of the state… I replicate some Truenas volumes and proxmox backups to over VPN…an “in case the house burns down” kind of thing…