Proxmox

Prove that a recovery node can restore and boot a VM from the off-site datastore using credentials and keys kept outside the primary site.

Protect the routing boundary before opening services: inventory firewall ownership, apply a deliberately scoped IPv4 forwarding and NAT lab, test negative paths, and keep a verified rollback.

Build the host before the routers: choose a storage layout, preserve provider WAN connectivity, prepare isolated bridges, and prove emergency recovery.

Before deploying routers and VMs, define trust boundaries, IP ownership, management recovery, and a testable rollout plan.

A staged, console-first tutorial for a Hetzner Proxmox host with two routed CHR transit networks and a separate NATed private VM LAN.

A practical Intel AMT SOL login setup for a Proxmox host, with device discovery, a systemd serial getty, troubleshooting, rollback, and a clear explanation of disconnecting.

Enable TCP BBR congestion control on your Proxmox host, Docker containers, and LXC guests. Step-by-step sysctl config, kernel module loading, and iperf3 benchmarks showing real-world throughput gains for homelab and remote streaming.

Harden Proxmox VE with datacenter firewalls, dynamic IPSets for trusted management networks, cluster-wide security, fail2ban for web UI brute-force protection, and firewall log auditing.

Learn to secure Proxmox API access using API tokens and fine-grained RBAC. Covers token creation, role-based permission separation, Terraform/Ansible integration, and audit logging — all without exposing root credentials.

Run Samba inside a Proxmox LXC with direct ZFS dataset access for a sub-1GB RAM NAS. Covers privileged LXC setup, ZFS passthrough, user configuration, and Samba performance tuning for homelab file sharing.