Hello everyone,
I would like to get started with selfhost with two projects.
Project A (for me): A NUC with Proxmox installed on it, two VMs including a Home Assistant and a NAS system that I haven't chosen yet.
The only question I have with this project is:
- how to access the NAS and HA separately from the outside knowing that my access provider does not offer a static IP and that access to each VM must be differentiated from Proxmox.
~~Project B (for my uncle):~~ ~~A NUC (with Proxmox or not, I don't know yet, perhaps simpler for making backups), with HA but especially Frigate.~~ ~~The goal is to use Google Coral to do recognition on 3 video surveillance cameras.~~
~~My questions are:~~
- ~~is Coral really useful with 3 cameras?~~
- ~~do you need a Coral in USB or M.2 version?~~
- ~~are there affordable NUCs with free M.2 slots?~~
- ~~won't proxmox add a layer of complexity with Coral/Frigate/a Zigbee dongle?~~
Thank you in advance for your help and sorry if my post is long.
~~PS: if you have recommendations for cameras that work with Frigate and are self-powered with solar panels, I'll take them!~~
Edit : 8 april 2024
A little update. Thank you everyone for your super quick responses!
Regarding my uncle's project and after big discussions, he is going to buy Reolink cameras and that's it. This will be much simpler for maintenance than building a server.
Regarding my project: I chose a Beelink Mini S12 pro with an N100 processor (for its low consumption) with a 2.5 bay for an SSD for my Nextcloud.
I wondered if I wouldn't take the opportunity to add pihole and that's where new questions arise...
I see a lot of people installing Pihole on Docker, should I put it on Docker? Or create a VM?
Should Docker be installed on Proxmox or on a VM?
Is Proxmox really useful, shouldn't I better install HA/Nextcloud/Pihole under Docker directly?
Should I use LXC or Docker?
Thanks for your help!
I can't figure out how access from outside is going to happen. I will have multiple addresses that correspond to my different VMs?
Nah it sounds far too simple to "just install Tailscale and you're good" doesn't it? But it really is kinda that easy.
Install the Tailscale add on for Home Assistant, sign in and set up an "exit node" (it's a menu item, easy) then install Tailscale on your phone.
Switch it on on your phone outside your network. 3 dots in the app and select "Use exit node" and select the one you set up.
Now on your browser on your phone just type in the IP address of the self hosted service (I just have my home page address set to Homarr which has them all) and you're done.
Really damn easy, and free
Edit: That exit node you set.up is inside your network. Tailscale tunnels to that exit node inside your network without open ports, so when you do as above, you're essentially inside your network.
I use work WiFi. Work block WhatsApp. When I connect through Tailscale via work WiFi, my WhatsApp works fine, because I'm using my own home network to send/receive messages
Tailscale is great, but it's not something that should be shouted from the rooftops.
I use tailscale with nginx / pihole for my home services BUT there will be a point where the "free" tier of their service will be gutted / monetized and your once so free, private service won't be so free.
Tailscale are SAAS (software as a service), once their venture capital funds look like their running dry, the funds will be coming from your data, limiting the service with a push to subscription models or a combination.
Nebula is one such alternative, headscale is another. Wire guard (which tailscale is based on) again is another.
I'm hesitant about it too for the same reason but not sure if I'm being unreasonable given that I rely on so many other free services. However, this is one that would potentially have access to everything I do.
I'm watching headscale with interest until its safe enough for me to try breaking it!
I still use it, the service is very handy (and passes the wife test for ease of use)
Probably some tinfoil hat level of paranoia, but it's one of those situations where you aren't in control of a major component of your network.