Server Project

[TopHatProductions115]

More news on the Docker front:

• https://forums.docker.com/t/docker-daemon-failed-to-start/116007

Also considering dropping Redis from the Nextcloud compose file, due to a suggestion...

 

[TopHatProductions115]

Yeah, the Nextcloud instance needs more work. Docker now appears to be doing fine, surprisingly (L1T project mirror):

• https://help.nextcloud.com/t/unable-to-login-after-installation-and-restart/124586

 

[TopHatProductions115]

The real test begins now:







Need to try spinning up Nextcloud, to see if that error still shows up after this...

 

[TopHatProductions115]

On a side note, Portainer made me pacman -Syu tonight. Couldn't access it until I caved and did the system upgrade. Was worried that something may break.

 

[TopHatProductions115]

If you setup your ESXi and vCenter with just IP addresses initially, and added domain names after-the-fact, this may be of interest to you:

• https://docs.vmware.com/en/VMware-v...UID-F46DBE63-F04E-42A1-B940-63A8F5B86ACF.html
• https://kb.vmware.com/s/article/2112283

For setting that, and redoing your server's certs.

 

[TopHatProductions115]

 

[TopHatProductions115]

https://www.reddit.com/r/vmware/comments/q86wdw
Light mode BURNS XD

 

[TopHatProductions115]

It has been a long month since the last update, and a lot has changed. Here's what has been completed thus far:

• activated EaseUS Todo Backup Server for easier backups of Windows Server 2016
• created AD integration/query users for Nextcloud, ejabberd, and FreePBX
• initiated AD integration config for ejabberd
• updated, broke, and revived the Artix VM
• kicked F@H from the Artix VM, to re-add it as a container later on
• initial planning for the move to ZFS (the entire Artix VM)
• purchase the MikroTik RB4011iGS+RM
• initiated Samba setup for the Artix VM

And now I'm preparing to move ejabberd to a Docker container. Gonna have to change the OP once the dust settles. Still more to announce, once things get under way...

 

[TopHatProductions115]

Just received a MikroTik RB4011iGS+RM in the mail, purchased a MikroTik CCR2004-1G-12S+2XS, and put in an offer for a MikroTik Audience RBD25GR-5HPac, to act as the wireless gateway to my serverside network. Also purchased 50x 12-24 rack screws+cage nuts and 50x 10-32 rack screws+cage nuts. That should be able to mount most of my upcoming equipment...

 

[repman244]

Any particular reason why you chose a 580 and not a DL380?

 

[TopHatProductions115]

Any particular reason why you chose a 580 and not a DL380?

Needed the PCIe slots and space for multiple GPUs and other add-in cards. I don't remember the 380 being as spacious The DL560 would be closer, but still not quite big enough.

 

[repman244]

Needed the PCIe slots and space for multiple GPUs and other add-in cards. I don't remember the 380 being as spacious The DL560 would be closer, but still not quite big enough.

Makes sense, yes the 380 does not have that much space, I guess an alternative would be an ML350p G8 but if you need the processing power it's not in the same class.

 

[TopHatProductions115]

Just joined the Artix OpenRC VM to the Windows Server AD, with Samba. We're one step closer to getting the Artix VM ready for production use.

Now I need an automated way to assign the following to existing AD objects, and new ones on-the-fly:

• GID (primary group ID)
• UID (user's ID number)
• LSH (user login shell)
• UHD (users *nix home)

These RFC 2307 attributes are going to be required for single identity across the setup in the future if I go with Samba. With this, I will be able to enhance the user experience further...

 

[ThaiTaffy]

Just joined the Artix OpenRC VM to the Windows Server AD, with Samba. We're one step closer to getting the Artix VM ready for production use.

Now I need an automated way to assign the following to existing AD objects, and new ones on-the-fly:

• GID (primary group ID)
• UID (user's ID number)
• LSH (user login shell)
• UHD (users *nix home)

These RFC 2307 attributes are going to be required for single identity across the setup in the future if I go with Samba. With this, I will be able to enhance the user experience further...

https://docs.cyberark.com/Product-D...counts|Classic Interface|Accounts Feed|_____5
might be worth looking at.

 

[TopHatProductions115]

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ConfigureAutomaticProvisioning.htm?TocPath=End User|Privileged Accounts|Classic Interface|Accounts Feed|_____5
might be worth looking at.

Need to find the downloads page for the CyberArk Vault and PSM, so I can test them out over the next few weeks.

EDIT: Need to request a demo and a quote.

 

[ThaiTaffy]

Not sure what is your running but https://www.jumpserver.org/index-en.html is an opensource alternative, personally as I only run a few users I use basic Pam on my lan and then do all my external access through zerotier.

 

[TopHatProductions115]

Not sure what is your running but https://www.jumpserver.org/index-en.html is an opensource alternative, personally as I only run a few users I use basic Pam on my lan and then do all my external access through zerotier.

Currently trying to stay on-prem if possible for most of my infrastructure. Will that be something I can host myself, or will I be using an external cloud service with my AD instance?

 

[TopHatProductions115]

https://www.reddit.com/r/mikrotik/comments/qt5rij
More networking coming soon

 

[TopHatProductions115]

 

[TopHatProductions115]

I got AD/LDAP integration working in Nextcloud, and got NGINX Reverse Proxy Manager working (had to use built-in DB). HTTPS and Asterisk coming next...

 

[ThaiTaffy]

Https is normally pretty high on my to do list but I'm stupid and onece I move onto ngix I tend to lock myself out with some setting or other. I've just moved over to a pfsense router and home assistant running on proxmox for my 24/7 sever then Nas and anything else is on demand through wol hopefully with a more in-depth router I'll have better luck.

 

[TopHatProductions115]

More networking equipment added to the rack last night. Waiting for one more piece to arrive. Then, Verizon needs to get my service activated next month.

 

[Solaris17]

If you can go with 3cx, it was leaps ahead of asterisk. I was happy to switch to it.

 

[TopHatProductions115]

A decent PDU never hurts...

 

[TopHatProductions115]

The disk shelf is now connected to the PDU as well. PDU now handles Networking and Storage. Only items directly connected to the UPS are servers. Titan Xp will go in the DL580 G7 once the rest of the VMs are ready for 24/7. Also, Threadripper + Titan V: