Crumb
c/homelab · by jax@lemmy.cloudhub.social · 2y

Teachings from years of HomeLab

https://blog.cloudhub.social/teachings-from-years-of-homelab/

Starting a new Cloud/HomeLab blog at this domain - let me know if you want a contributor invite!

22 points · 10 comments · view on lemmy.world

10 Comments

notfromhere@lemmy.ml · 2 pts · 2y (9 replies)

I get what the author is talking about with losing trust in your services when they are unavailable. I have found that a Raspberry Pi 3/4 cluster running k3s utilizing NAS storage has very good uptime and honestly I think my internet service goes down more than my homelab services.

jax@lemmy.cloudhub.social · 2 pts · 2y (8 replies)

Thanks! I find most of the issues occur during upgrades to services, but that is to be expected.

My internet service is usually more of an issue than most services I run. Though some things take longer to get tweaked and running well and that can cause issues.

notfromhere@lemmy.ml · 1 pts · 2y (7 replies)

Upgrades to services - that’s why I run dev namespaces and copy over my production shares to dev and utilize zfs snapshotting.

I haven’t set up testing yet and only just started with prometheus monitoring but so far things run pretty well.

jax@lemmy.cloudhub.social · 2 pts · 2y (6 replies)

Oh, dev namespaces are a good idea. Do you have a dev domain then too?

notfromhere@lemmy.ml · 1 pts · 2y (5 replies)

I toyed with dev domain but ended up using namespace.tld and postfixing -dev to my namespace so it works out to service.tld and service-dev.tld.

jax@lemmy.cloudhub.social · 2 pts · 2y (4 replies)

Ah okay that makes sense, you’re using the internal cluster domain to route to services

notfromhere@lemmy.ml · 1 pts · 2y (3 replies)

I have automated traefik to route the traffic, it sets the dns and ingress route. I’m also doing as you suggested for service to service connections.

jax@lemmy.cloudhub.social · 2 pts · 2y

That makes sense!

Have you played with anything like Istio to secure in-cluster communications? I think Hashicorp Consul can do something similar to encrypt service to service communications.