Posts tagged: homelab Archive

💭 DDR5 Prices are Crashing... Kind Of. - YouTube

2026-04-08T08:41:16Z

THIS is the future of homelab, excited to see someone who knows so much more about hardware than I do get excited about this.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 paynepride dot com outage on vacation

2026-03-26T08:20:22Z

paynepride dot com outage on vacation | Nic Payne

The day after I leave for vacation I start getting SSL errors on every homelab service I host for myself and others. The culprit was my Cloudflare API token exp

pype.dev

oof, outage on the homelab during vacation, brutal. I can think of a couple of similar solutions to what @pype.dev has done to tailscale in, but I’m not sure that I could do this remotely. On one hand I’m so glad that cloudflared just takes care of certs on the other hand this really brings a gap in my understanding of what the heck I would do if it were broken.

An untested DR plan is not a DR plan.

An untested backup does not exist.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

The Right Reasons To Run Kubernetes In Your Homelab

2025-12-10T09:48:14Z

Running kubernetes in your homelab is a fantastic way to learn, explore, express yourself, and run services that you use.

The Right Reasons To Run Kubernetes In Your Homelab #

There are not many

You want to learn kubernetes
You like kubernetes
You want to learn to scale

There are also The Wrong Reasons To Run Kubernetes In Your Homelab

You want to learn kubernetes #

Homelabbing is a such a great way to learn new skills, deploy real apps that you use. Create new custom apps for your specific use cases that no one else has. You should absolutely run kubernetes in your homelab if you want to learn it.

I would recommend to start locally, pull up kind, minikube, or k3d and start from your local machine before putting it on a server.

When you decide you are ready for a server, you probably don’t need any crazy hardware. You can probably run on some old retired Dell Optiplex or an old desktop someone is throwing out as it no longer runs windows.

You like kubernetes #

Hell Yeah Brother, 100% no better reason to run kubernetes at home than because you enjoy it. I’m with you. There’s nothing quite like having git ops kick in and deploy new services, updates, watching deployments rollover with zero downtime. Watching your cluster heal itself when a node goes down. Never ssh-ing in to do deployments. Still owning your entire hardware.

You want to learn to scale #

This is probably a stretch reason, maybe not a good one, there are probably better ways, but here we go.

Don’t claim that you need scale in your homelab, you don’t. But it sure is fun to run a cluster of nodes, and load balancing services that run across them. Solving these hard problems to scale across machines is hard. There’s no way around it, there’s a lot to think about. Doing so in a low stakes environment that you have skin in the game is a great way to learn.

I run kubernetes in my homelab #

I run it and I really like it

What flavor of autism did you guys get, I got the kind where I run kubernetes in my basement.

Here are some things I really like about it, and Yes I know you can achieve most of these without kubernetes.

I don’t have to ssh, hardly ever.
I can see everything I’m running, and its defined in a manifest
k9s is amazing, and I use it all the time.
- shell into running pods
- restart deployments
- scale deployments
- trigger cronjobs
- watch logs
- I can scale our minecraft server to 0 in seconds if we are in a different season of life
ArgoCD is amazing
- I ❤️ gitops
Ingress just works
Longhorn
- makes snapshots and backups easy
- makes multi node easy
zero-downtime deployments
self healing health checks

I mostly do very simple things, deployments with a container, a volume and ingress. Probably things that you could easily run on fly.io. Theres nothing really fancy. I just like how easy this setup works for me.

minecraft server memory

2025-12-10T08:46:36Z

I learned to today that setting MEMORY on your minecraft server causes the JVM to egregiously allocate all of that memory. Not setting it causes slow downs and potential crashes, but setting INIT_MEMORY and MAX_MEMORY gives us the best of both worlds. It is allowed to use more, but does not gobble it all up on startup.

In this economy we need to save all the memory we can!

Here is a non-working snippet for a minecraft server deployment in kubernetes.

      containers:
        - name: dungeon
          image: itzg/minecraft-server
          env:
            - name: EULA
              value: "true"
            - name: INIT_MEMORY
              value: "512M"
            - name: MAX_MEMORY
              value: "3G"

and in docker compose

  dungeon:
    image: itzg/minecraft-server
    environment:
      EULA: "true"
      INIT_MEMORY: "512M"
      MAX_MEMORY: "3G"

The Wrong Reasons To Run Kubernetes In Your Homelab

2025-12-06T09:46:47Z

Running kubernetes in your homelab is complex, time consuming, there are almost no docs to help you (homelab focused docs for things you want to install), and nothing is copy paste. You have to make everything happen yourself.

The Wrong Reasons To Run Kubernetes In Your Homelab #

I run compose and think kubernetes is the next logical step
Techno Tim runs it
I heard it’s what cool kids do
Kubernetes BTW
Talos Linux looks cool
I found a cool helm chart on GitHub
I need scale

There are also The Right Reasons To Run Kubernetes In Your Homelab.

I run compose and think kubernetes is the next logical step #

No it’s not. It’s much different than running docker, compose, swarm. It’s meant for scale, it’s complex, it’s made for enterprise, not your local development or your homelab. It can do these things, it can do them quite well, but it’s not the target audience.

Techno Tim runs it #

I heard it’s what cool kids do

You need to rethink who the cool kids are, touch some grass. Tim also does it for his job, he likes it, he knows it, he wants to lean on it and learn more.

Kubernetes BTW #

Kubernetes does not make you look cool, it makes you look like you are trying to over optimize and over engineer your life. It’s not worth it, in fact nothing in life is worth worrying about what everyone else thinks of you.

Talos Linux looks cool #

Talos is an S tier OS wherever you deploy it. It is a secure, minimal, kubernetes first OS. They also have some really great people working there putting Talos in some really cool places like backpack or Apple Power Mac

I found a cool helm chart on GitHub #

No you didn’t. Everything in homelab is compose first. A few things have a k8s option, but almost nothing is k8s first.

I need scale #

No. You’re homelab does not need scale. If you think it does, you have some real shit hardware, some bad optimizations, or somehow you have a startup you need to launch cause you got more users than most.

Don't copy your gitignore to stignore

2025-10-21T18:43:00Z

Today I learned that while .stignore and .gitignore look very similar they are not. My obsidian directory had been locked up for a few weeks and I had no idea why until I logged into the web ui and saw errors. The errors were some confusing regex validator not matching. I don’t know what the exact error was, but I went in and only ignored the files I cared about instead of the entire gitignore. Primarily I was getting conflicts in my .git directory.

tar over ssh

2025-09-13T10:50:42Z

Today I learned how to use tar over ssh to save hours in file transfers. I keep all of my projects in ~/git (very creative I know, I’ve done it for years and haven’t changed). I just swapped out my main desktop from bazzite to hyprland, and wanted to get all of my projects back. Before killing my bazzite install I moved everything over (16GB of many small files), it took over 14 hours, maybe longer. I had started in the morning and just let it churn.

This was not going to happen for re-seeding all of my projects on my new system, I knew there had to be a better way, I looked at rsync, but for seeding I ran into this tar over ssh technique and it only took me 6m51s to pull all of my projects off of my remote server.

ssh user@192.168.1.100 'tar -C /tank/git -cpf - .' \
  | tar -C "$HOME/git" -xpf -

trying forgejo

2025-08-12T11:57:42Z

WIP

networks:
  forgejo:
    external: false
services:
  server:
    image: codeberg.org/forgejo/forgejo:11
    container_name: forgejo
    environment:
      - USER_UID=1000
      - USER_GID=1000
    restart: always
    networks:
      - forgejo
    volumes:
      - ./forgejo:/data
    ports:
      - '3000:3000'
      - '2222:22'
  docker-in-docker:
    image: docker:dind
    container_name: docker_dind
    privileged: true
    command: ["dockerd", "-H", "tcp://0.0.0.0:2375", "--tls=false"]
    restart: unless-stopped
    networks: [forgejo]
  runner:
    image: data.forgejo.org/forgejo/runner:4.0.0
    container_name: forgejo-runner
    user: "1001:1001"
    depends_on:
      - docker-in-docker
    environment:
      DOCKER_HOST: tcp://docker-in-docker:2375
    volumes:
      - ./runner-data:/data:Z,U # will hold .runner + cache
    command: /bin/sh -c "while :; do sleep 1; done"
    restart: unless-stopped
    networks: [forgejo]

💭 GitHub Ensloppification – David Bushell – Web Dev (UK)

2025-08-12T02:29:16Z

GitHub Ensloppification

The one where I say goodbye to GitHub

dbushell.com · dbushell.com

David’s got me looking at Forgejo. I’ve seen a lot of GitHub jumpers just this week, and I’ve been tempted for a long time to self host one anyways, so it might be time. I don’t have hard issues with anything, I just like self hosting my own personal stuff.

On the flipside, I hope this does not turn yet another thing to shit. I lived through the download software from sourceforge and hope you get the right download now button and not the one from the virus ad. I’m not putting my really public/useful projects on a self hosted platform… well not as the only source, I see how that comes off edgy. I like having some trust in the platform. Currently theres a lot of issues with M$ and GitHub using you for your data, but I don’t think injecting virus, malware, bitcoin miners is a worry I have coming from a GitHub release, unless it was put there by the author.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Should I kubernetes My Homelab

2025-08-11T09:28:16Z

Yes

Ok we should probably dive deeper into this, but good chance if you are here and have made it this far you it would probably be a fine choice. The choice is quite time and skill dependant.

Time #

First thing up, if you like copy pasting thing into your homelab, changing a few config options, but mostly running it as the docs instructed, kubernetes is not for you. The homelab/self hosting space is heavily reliant on docker compose, 90% of the things you want to run will likely have a docker command, and likely a docker compose example that you can copy paste and get running right away. Maybe 5% of projects have something for kubernetes, you Will have to do it yourself.

Kubernetes is very DIY in the self hosting space, and not very plug and play.

Skill #

💭 csi-driver-smb/deploy/example/smb-provisioner at master · kube...

2025-08-01T19:50:39Z

csi-driver-smb/deploy/example/smb-provisioner at master · kubernetes-csi/csi-driver-smb

This driver allows Kubernetes to access SMB Server on both Linux and Windows nodes. - kubernetes-csi/csi-driver-smb

GitHub · github.com

Great guide to setting up a samba server right in kubernetes. I tried it out after too long of playing with trying to get connected to a samba share on ucore, no idea what was wrong, but this just works, and will live in my homelab no matter what distro I’m on, no playbook required to set it up, just good ol k8s manifest. TBH I cheated and haven’t set up the secrets yet, so its not quite in argocd or in my github repo, but POC is there and it works as advertised without issue.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Homelab Update Jul 2025

2025-07-28T08:19:37Z

Basement shelf with 3 computers, a network switch, an uninterubptable power supply, one monitor underneath, and a wifi access point to the right.

💭 Lab Update | Cloudy with a Chance of Tech

2025-07-12T02:16:40Z

Lab Update

Update on the lab setup and what I’ve been working on recently.

Cloudy with a Chance of Tech · blog.thomaswimprine.com

Always enjoy a good read through someone elses setup. I appreciate the desire for pi clusters they are cute, they seem cheap, but feel a bit overrated (at least for those of us with relatively cheap electricity). I love seeing the refurb “tiny desktops” getting a second useful life in a homelab after they have serve their useful life in the corporate world sitting behind the monitor of some reception desk. These things rock, they are underrated, x86_64, not ARM, so they just work. Until ARM becomes more normalized in the datacenter this is where its at.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Backups interrupted by full disk usage

2025-06-06T15:53:41Z

Backups interrupted by full disk usage | Nic Payne

I just got a message from HCIO that my primary backup script is late... This happens every now and then but I decided to check on it... Quickly `ssh` in and I n

pype.dev

I’m way behind on my notification game and need to pick it up. maybe I’ll look into hcio as well. maybe I’ll look into something that goes straight to signal or just get things working on ntfy. An 80GB log file is massive and the kind of thing id like to see notifications more.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Helm - Postiz Docs

2025-04-30T21:44:17Z

Helm - Postiz Documentation

Install Postiz using Kubernetes and Helm

Postiz Documentation · docs.postiz.com

I didn’t realize that postiz had a helm chart, I just hand rolled mine based on the compose file they provide. I went from running the compose stack locally to running in my homelab with kubernetes. I am using cnpg rather than a postgres container which I really like the workflow of as far as backup and restore. The one hiccup I ran into was changing the domain from localhost to my homelab domain killed all of my integrations and they needed the redirect url updated.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Self-Hosted 29: Perils of Self-Hosting

2025-04-15T13:18:51Z

Perils of Self-Hosting

We speak to Kevin and Patricia from Traefik, discuss Alex's recent ZFS snafu and we wonder if the new Chromecasts can match up to the Nvidia Shield.

Self-Hosted · selfhosted.show

Interesting takes on Diun here. I agree that I like to be in control of updates and pinning not to latest. both seemed like they weren’t going to run it because they can look up the latest version. Maybe I need to be less aggressive on keeping things up to date and its a me problem. I just got diun setup and hooked into ntfy, and I kinda like the automated checklist of new images that I can review and update.

To be a bit more clear, having control over changes coming in from others, even if I dont care to see the changelog, it is nice to roll out an update, have it in your git history, watch it deploy and work like before, if not roll back and read the changelog. For internal applications I’m down for automated releases like argo image updater give you, this thing has already gone through review, launch the damn thing at least to a dev space.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Changing k8s Storage Class - Migration Job

2025-04-04T09:57:50Z

I’m setting up longhorn in my homelab, and I ran into an issue where I initially setup some pvcs under longhorn, and later realized that to get longhorn to snapshot and backup I needed to hand edit volumes after the fact or change storage class. I’m all in on gitops so option 1 was not an option. So changing storageclass it is.

Now the issue is that you CANNOT mutate storageclass on a provisioned pvc, it is an immutable attribute.

Migration Job #

This migration job will create a new pvc with the new storageclass and move the data from the old pvc to the new pvc.

Existing Pods

 This migration job will not work if you have a pod using the old pvc.  You

will need to shutdown the pod and delete it.

# old pvc with longhorn storageclass
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: site-pvc-longhorn
  namespace: waylonwalker-com
spec:
  storageClassName: longhorn-backup
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 5Gi
# new pvc with longhorn-backup storageclass
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: site-pvc-longhorn-backup
  namespace: waylonwalker-com
spec:
  storageClassName: longhorn-backup
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 5Gi
---
# migration job to move the data to the new pvc
apiVersion: batch/v1
kind: Job
metadata:
  name: pvc-migration
  namespace: waylonwalker-com
spec:
  template:
    spec:
      containers:
      - name: pvc-migration
        image: ubuntu:22.04
        command: ["/bin/bash", "-c"]
        args:
          - |
            echo "Starting migration..."
            cd /data
            cp -av source/. destination/
            echo "Migration complete!"
        volumeMounts:
        - name: source-vol
          mountPath: /data/source
        - name: dest-vol
          mountPath: /data/destination
      restartPolicy: Never
      volumes:
      - name: source-vol
        persistentVolumeClaim:
          claimName: site-pvc-longhorn
      - name: dest-vol
        persistentVolumeClaim:
          claimName: site-pvc-longhorn-backup

Apply the manifests and wait for the job to complete.

kubectl apply -f pvc-migration.yaml

Cleanup #

I had chatgpt create me a script to help me find what is using the pvc so that it can be deleted.

#!/bin/bash

NAMESPACE="waylonwalker-com"
PVC_NAME="site-pvc-longhorn-new"

echo "⏳ Checking if PVC exists..."
kubectl get pvc "$PVC_NAME" -n "$NAMESPACE" || {
  echo "✅ PVC already deleted."
  exit 0
}

echo "🔍 Describe PVC..."
kubectl describe pvc "$PVC_NAME" -n "$NAMESPACE"

echo -e "\n🔗 Checking if any pod is using this PVC..."
kubectl get pods -n "$NAMESPACE" -o json | jq -r \
  --arg PVC "$PVC_NAME" \
  '.items[] | select(.spec.volumes[].persistentVolumeClaim.claimName == $PVC) | .metadata.name'

echo -e "\n🧹 Checking finalizers..."
kubectl get pvc "$PVC_NAME" -n "$NAMESPACE" -o json | jq '.metadata.finalizers'

echo -e "\n🔎 Checking associated VolumeAttachment..."
PV_NAME=$(kubectl get pvc "$PVC_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.volumeName}')
echo "🔗 PVC is bound to PV: $PV_NAME"

kubectl get volumeattachment -A -o json | jq \
  --arg PV "$PV_NAME" \
  '.items[] | select(.spec.source.persistentVolumeName == $PV) | {name: .metadata.name, node: .spec.nodeName, attached: .status.attached}'

echo -e "\n🚀 Done."

I had still had cronjob pods completed, so I had to delete them first.

🔗 Checking if any pod is using this PVC...
pvc-migration-ndv92
waylonwalker-com-cronjob-29057840-8s92p
waylonwalker-com-cronjob-29057850-4rvm9
waylonwalker-com-cronjob-29057860-6g89j

kubectl delete pod pvc-migration-ndv92 -n waylonwalker-com
kubectl delete pod waylonwalker-com-cronjob-29057840-8s92p -n waylonwalker-com
kubectl delete pod waylonwalker-com-cronjob-29057850-4rvm9 -n waylonwalker-com
kubectl delete pod waylonwalker-com-cronjob-29057860-6g89j -n waylonwalker-com

homelab drive ids

2025-03-26T11:22:07Z

ls -l /dev/disk/by-id/

Drive Bay 1 ata-ST4000VN008-2DR166_ZDHBZSWZ

+————————————————————————-+ | [ Power] [ Reset ] | +————————————————————————-+ | [ BAY 5 ] 3TB WD30EFRX WMC4N0D3J9R7 ext4 /mnt/sdf4 | +————————————————————————-+ | [ BAY 4 ] 14TB EXOS ZTM09R9N zfs main pool mirror /mnt/main | +————————————————————————-+ | [ BAY 3 ] 14TB EXOS ZTM0AALS zfs main pool mirror /mnt/main | +——————————————-+ | [ BAY 2 ] 4TB IRONWOLF ZDHBZV3N zfs tank pool mirror /mnt/tank | +————————————————————————-+ | [ BAY 1 ] 4TB IRONWOLF ZDHBZSWZ zfs tank pool mirror /mnt/tank | +————————————————————————-+

💭 Resetting a lost admin password — Nextcloud latest Administrat...

2025-03-24T00:26:45Z

This is a handy line to reset your admin password in nextcloud.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

2025-nas

2025-03-04T15:13:06Z

Current inventory #

Silverstone micro-atx case
- 5 3.5" hot swap drive drive bays
- 2 3.5" 3.5" drive bays
2 Seagate 4TB 3.5" drive (trust worthy drives)
1 WD 3TB 3.5" (could be a trash drive for stuff that does not matter)
ryzen 3300G
16gb Gskill Trident Z rgb ram
500GB nvme ssd - I have this installed in a machine I would like to keep there, but not hurt if I pulled it

Dream Build #

$169 seagate exos x16
$79 motherboard ASUS Prime B450M-A II - has 6 sata ports
~~$79 motherboard ASROCK B450M PRO4 R2.0~~ only has 4 sata ports
$85 power supply CORSAIR RM650
$89 Crucial 64GB ram
$89 2TB nvme

4 16TB drive option #

169*4 + 79 + 85 + 89 + 89 = $1018

2 16TB drive option #

169*2 + 79 + 85 + 89 + 89 = $680

only 2 4TB drive #

79 + 85 + 89 + 89 = $342

2 16TB drive - 16GB RAM #

I think this is my option I’m leaning towards, good modular power supply, 500GB nvme from budget list.

169*2 + 79 + 85 + 30 = $532

using my existing 500Gb nvme drive

169*2 + 79 + 85 = $502

using only existing 4TB drives

79 + 85 = $164

Budget friendly build #

$169 seagate exos x16
$79 motherboard ASUS Prime B450M-A II - has 6 sata ports
~~$79 motherboard ASROCK B450M PRO4 R2.0~~ only has 4 sata ports
$60 power supply CORSAIR CX550 - non modular
$50 Crucial 32GB ram
$30 512GB nvme
$29 cooler master 212 Black

2 16TB drive option #

169*2 + 79 + 60 + 30 + 50 + 29 = $586

only 2 4TB drive #

79 + 60 + 30 + 50 + 29 = $248

💭 I Made My Own JBOD Enclosure For CHEAP - YouTube

2025-02-23T22:30:42Z

I really like this idea for a homelab jbod. Hardware Haven builds out Just a Bunch Of Disks using some pretty affordable hardware and has up to 16 disks added to his homelab with the os having full access to use with zfs.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Setting up 4G Backup with Google Fi and Netgear LM1200

2025-02-12T13:23:35Z

I connected my home network to have 4G bakcup with Google Fi and Netgear LM1200. Goodle Fi offers free data-only sim cards that you can order from their service. It takes a couple of days, and a new sim arrives in the mail free of charge. It does pull data from your account, so if you are not on an unlimited plan be careful of how much you let go through the sim.

I’ve owned this for a few years now, but it’s been disconnected for a good six months or so. I’m not s[e what happened, but it stopped recognizing the old sim card. no need to point out the coffee stains at the end, its definitely not related

Follow the provided instuctions #

Activating the sim asked for a confirmation code shipped with the sim card, then brought me to this page.

Clicking Have a Different Device? brought up instructions to set up the APN in the LM1200.

Restart #

First thing for me was that the sim was not recognized, restarting the LM1200 did the trick to recognize it as a Google Fi sim, and I started setting up by adding the APN as instructed from Google.

Setup LM1200 #

Once restarted the LM1200 was recognize the sim right away and I was able to add the APN details.

Connected #

After Saving these I was immediately connected as a backup.

Testing Failover #

Backups do not exist without testing. I pulled the WAN cable from the LM1200 and after a few seconds it swapped over to the backup.

The dashboard shows fully connected, and it popped up that it sent an alert to my phone, but that did not work for me. I might hae something misconfigured.

I ran a speed test and got a pretty respectable 38 Mbit/s up and 12 Mbit/s down.

I reconnected the WAN cable and it went back to the primary, and it sat at orange for about 10 seconds before switching back to wired connection.

Fully back on wired.

Now its all back up and running giving me a super cheap 4G backup with pretty low effort. Hopefully its reliable, I’ve upgraded about everything else on my network since last running this, I think it will behave much better. I think some other issues were actually causing me to think I was not getting connection and this fully got pulled from the network to try to fix it.

Why not 5G? #

The devices are way more expensive and this gives me all I need for a backup.

Make MinIO Access Key

2025-02-02T19:18:05Z

Today in my homelab I wanted to setup a new service that needed a MinIO access key. So I created a new user and a new access key with the MinIO CLI rather than poking through the ui like I have before.

Global Level vs User Level #

The MinIO CLI has two levels of access, global and user level. Most of the commands in this post will have several ways to do similar tasks that would potentially work. We are going to prefer to use the user level commands for more control. For some commands such as listing Keys it is handy to use the global level.

The Policy #

First we are going to make a new policy file named mypages_rw_policy.json.

{
"Version": "2012-10-17",
"Statement": [
    {
    "Action": [
        "s3:GetBucketLocation",
        "s3:ListBucket"
    ],
    "Effect": "Allow",
    "Resource": [
        "arn:aws:s3:::mybucket"
    ]
    },
    {
    "Action": [
        "s3:GetObject",
        "s3:PutObject",
        "s3:DeleteObject",
        "s3:ListMultipartUploadParts",
        "s3:AbortMultipartUpload"
    ],
    "Effect": "Allow",
    "Resource": [
        "arn:aws:s3:::mybucket/*"
    ]
    }
]
}

Set the Minio Alias #

Before we can create new access keys we will need to start by settin up an alias in minio that has admin rights to the minio server.

# default values
export MINIO_ACCESS_KEY=minioadmin
export MINIO_SECRET_KEY=minioadmin

mc alias set myminio https://myminio.example.com $MINIO_ACCESS_KEY $MINIO_SECRET_KEY

Check to see if your alias exists.

mc alias list

The Script #

Now we are going to pick a SECRETKEY and a NEWUSERNAME, create the policy, create the user, attach the policy to the user and add the user to the alias.

#!/bin/bash
NEWUSERNAME=MYPAGESUSER
NEWPASSWORD=mysupersecretkey
echo USERNAME: $NEWUSERNAME
echo PASSWORD: $NEWPASSWORD

# create a new policy for read/write to the bucket
mc admin policy create myminio mybucket-readwrite mypages_rw_policy.json

# create a new user
mc admin user add myminio $NEWUSERNAME $NEWPASSWORD

# attach the policy to the user, giving them read/write to the bucket
mc admin policy attach myminio mybucket-readwrite --user $NEWUSERNAME

# add the user to the alias
mc config host add myminio https://minio.wayl.one $NEWUSERNAME $NEWPASSWORD

# create a new access key for the user with thier permissions
mc admin user svcacct add                       \
myminio MYPAGESUSER                     \
--name mypagesRWKey                       \
--description "MYPAGESUSER Key for myminio" \
--expiry 2025-03-01

NEWSECRETKEY
3e11************************************************************
Access Key: IL4*****************
Secret Key: M3D*************************************
Expiration: 2025-03-01 06:00:00 +0000 UTC

Attention

* This is the secret key, do not share it with anyone.

This secret key will only be displayed once here, make sure you copy it to a secure location now.

Give it a test #

Now we can test that it works, by creating a file and copying it into the bucket.

# set up to work with the aws cli
export AWS_DEFAULT_REGION=us-east-1
export AWS_ACCESS_KEY_ID=IL4*****************
export AWS_SECRET_ACCESS_KEY=M3D*************************************
export AWS_ENDPOINT_URL=https://myminio.example.com

# create a test file
echo "You How" > hi-hello.txt
# upload the file
aws s3 cp hi-hello.txt s3://mybucket/hi-hello.txt
# test the file exists
aws s3 ls s3://mybucket
# output
# 2025-02-02 19:25:02          8 hi-hello.txt

Note

I am using the aws cli to test, I installed it with pip.

pipx install awscli

Managing Access Keys #

You can list all of the access keys for a user, or all users.

# for one user
mc admin accesskey ls myminio/ MYPAGESUSER

# for all users
mc admin accesskey ls myminio/ --all

The output will show you all of the access keys for each user.

User: MYPAGESUSER
  Access Keys:
    IL4*****************, expires: 3 weeks from now, sts: false

You can also get a list of the service accounts for a user with this command.

mc admin user svcacct ls myminio/ MYPAGESUSER

   Access Key        | Expiry
IL4***************** | 2025-03-01 06:00:00 +0000 UTC

Note

You cannot see all of these keys from the web ui, the cli seems to be the

only way to display all access keys, including access keys for other users.

Creating an RO Access Key #

I ran into errors when trying to create a new key with exactly the same permissions as the user, I’m not sure if adding a policy that does not match the user is allowed or not.

I made a new policy that has read only access to the bucket as mypages_ro_policy.json

{
"Version": "2012-10-17",
"Statement": [
    {
    "Action": [
        "s3:GetBucketLocation",
        "s3:ListBucket"
    ],
    "Effect": "Allow",
    "Resource": [
        "arn:aws:s3:::mypages"
    ]
    },
    {
    "Action": [
        "s3:GetObject",
        "s3:ListMultipartUploadParts"
    ],
    "Effect": "Allow",
    "Resource": [
        "arn:aws:s3:::mypages/*"
    ]
    }
]
}

This command will use the above policy to create a new read only access key.

mc admin user svcacct add \
  myminio MYPAGESUSER \
  --name mypagesRWKey \
  --description "MYPAGESUSER READ ONLY Key for myminio" \
  --expiry 2025-03-01 \
  --policy mypages_ro_policy.json

The output will show you the access key and secret key.

Access Key: KDM*****************
Secret Key: 8Ww*************************************
Expiration: 2025-03-01 06:00:00 +0000 UTC

Attention

* This is the secret key, do not share it with anyone.

This secret key will only be displayed once here, make sure you copy it to a secure location now.

Removing a service account #

If you want to remove a service account, you can use the rm command to remove the Access Key, by alias and Access Key.

mc admin user svcacct rm myminio/ QH6*****************

Getting info #

You can get the info for a user or service accounts using the info subcommands.

⬢ [devtainer] ❯ mc admin user info minio-wayl-one/ MYPAGESUSER
AccessKey: MYPAGESUSER
Status: enabled
PolicyName: mypages-readwrite
MemberOf: []

⬢ [devtainer] ❯ mc admin user svcacct ls minio-wayl-one/ MYPAGESUSER
   Access Key        | Expiry
KDM***************** | 2025-03-01 06:00:00 +0000 UTC
IL4***************** | 2025-03-01 06:00:00 +0000 UTC

⬢ [devtainer] ❯ mc admin user svcacct info myminio/ IL4*****************
AccessKey: IL4*****************
ParentUser: MYPAGESUSER
Status: on
Name: mypagesRWKey
Description: MYPAGESUSER Key for myminio
Policy: implied
Expiration: 3 weeks from now

⬢ [devtainer] ❯ mc admin user svcacct info myminio/ KDM*****************
AccessKey: KDM*****************
ParentUser: MYPAGESUSER
Status: on
Name: mypagesRWKey
Description: MYPAGESUSER READ ONLY Key for myminio
Policy: embedded
Expiration: 3 weeks from now

💭 Manufacturer Recertified Drives | Enterprise Grade — ServerPar...

2025-01-19T19:11:47Z

Manufacturer Recertified Drives | Enterprise Grade

Manufacturer Recertified enterprise drives work and look like new. Rebuilt by the manufacturer and quality tested to ensure they function as new, our recertified drives save on cost. Shop now!

ServerPartDeals.com · serverpartdeals.com

For my next drive upgrade in my homelab I am gong to be using one of these factory recertified drives from serverpartdeals.com. Found them on an LTT video awhile back. They are some lightly used and recertified, fully burnt in drives.

Shop for drives that are certified once again by the manufacturer to work like new. Factory ReCertified drives are cost-effective alternatives compared to factory-sealed new counter parts. Additionally, unlike in mass production, the re-certification process involves closer attention to the overall operation of the hardware so that the re-certification will not have to happen a 2nd time

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 imagegenius/docker-immich: Monolithic (Single) Docker Containe...

2025-01-06T14:44:08Z

GitHub - imagegenius/docker-immich: Monolithic (Single) Docker Container for Immich

Monolithic (Single) Docker Container for Immich. Contribute to imagegenius/docker-immich development by creating an account on GitHub.

GitHub · github.com

imagegenius has made an immich all in one setup that looks much easier to use than immich.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 gitroomhq/postiz-helmchart: Helm for Postiz

2025-01-04T15:36:10Z

GitHub - gitroomhq/postiz-helmchart: Helm for Postiz

Helm for Postiz. Contribute to gitroomhq/postiz-helmchart development by creating an account on GitHub.

GitHub · github.com

Reminder to myself, look into self hosting postiz with this helm chart later.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 linkding | linkding

2025-01-02T02:51:03Z

linkding

A self-hosted bookmarking service that is designed to be minimal, fast and easy to set up.

linkding · linkding.link

linkding looks like an interesting alternative to thoughts. Thoughts is focused on the note being a value add tweet length blog post that you share to the public. This seems more focused on fire and forget with some note taking and search ability. I should definitely level up the search and tag discovery in thoughts.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

debug cloudflared tunnel

2024-12-03T15:36:37Z

I’ve been debugging a cloudflared tunnel issue in my homelab all day today, and getting really frustrated. My issue ended up being that it was running twice, once without the correct config file and another with it. I believe that cacheing may have compounded the issue.

In yesterday’s post I setup a cloudflared tunnel on my ubuntu server to expose applications running on the server to the internet. I’m setting up a new server and running cloudflared in its own vm.

setup cloudflared tunnel on ubuntu

Check that dns is pointing to the correct tunnel #

dig subdomain.example.com
traceroute subdomain.example.com

Check that the tunnel is running #

export CLOUDFLARED_TUNNEL_ID = "my-tunnel-id"

cloudflared tunnel list
cloudflared tunnel info $CLOUDFLARED_TUNNEL_ID

setup cloudflared tunnel on ubuntu

2024-12-02T15:43:45Z

I run a cloudflared tunnel on my ubuntu server to expose applications running on the server to the internet. I’m setting up a new server and running cloudflared in its own vm.

Get the cloudflared binary #

sudo wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -O /usr/local/bin/cloudflared

sudo chmod +x /usr/local/bin/cloudflared

#

Now setup the config directory. For the systemd service to work, the config file needs to be in /etc/cloudflared. I like to give my user rights to edit the config file without being sudo, we will do that here by creating a group cloudflared, add ourselves to the group, give ownership of /etc/cloudflared to the group, give group write access to the directory, and refresh groups.

sudo mkdir -p /etc/cloudflared
sudo groupadd cloudflared
sudo usermod -aG cloudflared $USER
sudo chown -R root:cloudflared /etc/cloudflared
sudo chmod g+w /etc/cloudflared
newgrp cloudflared

Now we can log into the domain zone with cloudflared.

cloudflared tunnel login

This will give a url, follow it in a browser to log in.

cloudflared tunnel create <NAME>
mv ~/.cloudflared/cert.pem /etc/cloudflared/cert.pem
mv ~/.cloudflared/<tunnel-id>.json /etc/cloudflared/<tunnel-id>.json

config #

Now setup config. For the systemd service to work, the config file needs to be in /etc/cloudflared. The config that I have provided below will expose localhost:8000 to tester.example.com

export CLOUDFLARED_TUNNEL_ID=$(ls /etc/cloudflared/*.json | xargs -n 1 basename | sed 's/\.json$//')
mv ~/.cloudflared/${CLOUDFLARED_TUNNEL_ID}.json /etc/cloudflared/${CLOUDFLARED_TUNNEL_ID}.json
mv ~/.cloudflared/cert.pem /etc/cloudflared/cert.pem
echo "
tunnel: $(CLOUDFLARED_TUNNEL_ID)
credentials-file: /etc/cloudflared/$(CLOUDFLARED_TUNNEL_ID).json
ingress:
  - hostname: tester.example.com
    service: http://localhost:8000
  - service: 'http_status:404'
" >> /etc/cloudflared/config.yaml

dns #

Now to get a dns record for tester.example.com to point to the cloudflared tunnel.

cloudflared tunnel route dns $(CLOUDFLARED_TUNNEL_ID) tester.example.com

systemd #

Now install the systemd service.

sudo cloudflared service install

sudo systemctl status cloudflared.service
# if its not running
sudo systemctl start cloudflared.service

💭 Fitting two hard drives and an SSD in a Dell OptiPlex 7010 SFF

2024-11-27T16:53:53Z

Fitting two hard drives and an SSD in a Dell OptiPlex 7010 SFF

The Dell OptiPlex 7010 SFF officially only has room for one 2.5" hard drive internally, I fitted two 3.25" hard drives and a 2.5" SSD in one.

willj.net

This guy fit 2 3.5" drives and an sdd in a dell 7050 SFF. It looks tight, and there it probably not much airflow running in it, but its an impressive project.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Why You Should Build Your Homelab Now - YouTube

2024-06-14T22:58:22Z

Homelab Now" playlabel="Play: Why You Should Build Your Homelab Now">

Homelabbers have been some of the best co-workers I have ever had. Typically have a get shit done, If there’s a way I will find it kind of mentality. If you are struggling to get a job in tech right now its tough. Starting a homelab on a pc you pull out of the trash is a good way to get some experience that you can talk about in interview questions.

Linked video has some great points!

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Looking for a Heroku replacement, What I found was shocking!

2023-12-04T20:29:46Z

Your browser does not support the audio element.

I’ve long hosted my personal blog as a static site on waylonwalker.com. It’s all markdown, converted to html, and shipped as is. It’s been great, I’ve moved it from GitHub Pages, to Netlify, tried Vercel for a minute, and have landed on Cloudflare Pages. Each migration has not really been that hard, it’s just pointing ci to a different host after the site has built.

What about server side #

Now the part that I have struggled with is how to cheaply host a server rendered application that can just live on forever without me paying for it. This is a harder problem as it costs more to keep servers spinning, memory, and disk all ready for you to use at a moments notice.

Honestly #

I never really deployed anything that useful on heroku, but it seems like the klenex of the bunch that’s why they are in the title. I’ve moved between digital ocean and fly.io, and have had some great experiences with both. I just don’t want to build something that is going perpetually cost money, I’m cheap and dont want to feel the burden of paying for something that I might not be using all the time.

fly.io #

fly is absolutely amazing to get off the ground. Their cli is top notch. They have servers all over the place and have a great interface to get your application deployed close to your users. You just can’t run all that much on it before you end up off the free tier.

serverless #

These platforms so far have just not felt right for me, again, I have to pay for them, many of them I have to worry about how hard they would get hit, and often they are focused on javascript.

What I am looking for #

easy to deploy
cheap to host
free to use
generous free tier
no chance of big bills
reliable, not 9 9’s, but mostly up.
allows me to run a bunch of stuff that I lightly use
that buttery smooth cli that I get out of fly.io
runs containers

The last one is probably the most important. I don’t get tons of time to work on side projects, and they are mostly ideas I just want to get out there and play with, the idea may flop quickly, but I want that DX to be easy to go from nothing to publically deployed.

What about going back to self hosting?? #

I have a Gateway FX6860 built in 2011, and was gifted to me around 2016. She doesn’t have much power to her, but she does have more than free tier power. I have 8 dedicated cpu, 16GB RAM, 500GB boot disk, and a 4TB hard disk.

Cloudflare tunnels #

Cloudflare Tunnels allow me to route traffic to my own server sitting right next to me and have it publically accessible. They take care of ssl certs, they support wildcard routes, and configuration is pretty easy. I can map addresses to a port on the machine, wildcard to a reverse_proxy, and end with a 404.

I’m missing that buttery smooth cli #

At this point I’m hosting a few things that I use frequently, but I don’t have that buttery smooth deploy experience that I get from fly.io. I have to log into the machine, edit some files, and docker compose up every time I want to deploy.

I was certain there was a better way #

I knew there was something better out there that was not a complex pain in the ass to setup. I know small companies run their own infra with a small team. There has to be tools that don’t take an enterprise to manage.

What about kubernetes #

In my search I keep seeing kubernetes as the solution, just run k8s, k3s, k0s, minikube, or kind. But EVERYTHING I have heard about kubernetes is that its a pain in the ass to deploy, takes a team to manage, and if you don’t have a $1M problem to solve don’t bother cause k8s will create a $1M problem for you. For this reason alone I turned my nose up to k8’s and nearly didn’t even give it a chance. Everyone jokes about blogs and simple sites running on k8s, and how rediculous that must be.

If you don’t have a $1M problem to solve don’t bother cause k8s will create a $1M problem for you.

Let’s jump on k3s #

I’ve never ran kubernetes myself, but after seeing it so many times in my searches for a fly.io replacement, I decided to give it a shot. I chose k3s as it seems like a nice balance of easy to setup, maintain, and feature complete kubernetes service.

# install and start k3s
curl -sfL https://get.k3s.io | sh -
# check to see if your nodes are started
sudo kubectl get nodes

My main hiccup so far was the machine I am running on runs a fairly new ubuntu install with zfs on root, and it would not start the master node. Rather than figuring out how to make zfs play nice I just pointed k3s to a drive that is not zfs.

# manuallly
sudo k3s server -d /mnt/vault/.rancher/k3s
# without editing systemd service
sudo ln -s /mnt/vault/.rancher/k3s /var/lib/rancher/k3s

Next I needed to be able to completely manage my k3s cluster form my main machine while this one sits far away in a closet.

# from the server
sudo cp /etc/rancher/k3s/k3s.yaml ~/.config/kube

# from my local machine
scp falcon@falcon:~/.config/kube/k3s.yaml ~/.config/kube/falcon-k3s.yaml
sudo cp /etc/rancher/k3s/k3s.yaml /home/waylon/.config/kube
sudo chown -R waylon:waylon ~/.config/kube
export KUBECONFIG=~/.config/kube/k3s.yaml

kompose #

Since everything I was running prior was in docker compose, I found kompose.io to be a fantastic tool to help me start converting my docker deployments into kubernetes.

A Month Later #

I started this post a month ago, and I am still enjoying k3s. For clarity, I did have a bit of k8’s experience going in, but zero experience running it by myself. k3’s seems to have made it pretty straightforward so far. My worst issues have been with ingress. Docker registries were a bit of a pain due to their large blob sizes, and a service I wanted to try to self host (sshx) required grpc, which is not supported by cloudflare tunnels.

TLDR #

Don’t believe everyone’s pre-conceived notions about tech you have never tried. Most of these things come from the echo chamber that is twitter anyways. Create your own opinions by trying new things, learning for yourself, and forming your own opnions.

💭 Uptime Kuma

2023-11-11T02:46:12Z

Uptime Kuma

A self-hosted monitoring tool

uptime.kuma.pet

Uptime kuma is a fantastic self hosted monitoring tool. One docker run command and you are up and running. Once you are in you have full control over checking status of urls, frequency, allowed timeouts, and a HUGE list of notification providers

docker run -d --restart=always -p 3001:3001 -v uptime-kuma:/app/data --name uptime-kuma louislam/uptime-kuma:1

I deployed it in my homelab today.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Creating k8s jobs with python

2023-10-28T00:52:24Z

External Link

thoughts.waylonwalker.com

I was looking to add running kubernetes jobs to a python cli I am creating, and I found this solution, mostly thanks to ollama run mistral:7b-instruct-q4_K_M and my loose understanding of what the yaml syntax is supposed to look like for a kubernetes job. This will let me create a job in the cluster, choose the image that runs, the command that is called, and how long until the job expires and is cleaned up. While the job still exists I can go in and look at the logs, but once its ttl has expired they are gone.

from kubernetes import client, config

# Load the default kubeconfig
config.load_kube_config()

# Define the API client for batch jobs
api_instance = client.BatchV1Api()

# Create a new job object
job = client.V1Job(
    api_version="batch/v1",
    kind="Job",
    metadata=client.V1ObjectMeta(name="myjob"),
    spec=client.V1JobSpec(
        ttl_seconds_after_finished=100,
        template=client.V1PodTemplateSpec(
            metadata=client.V1ObjectMeta(labels={"app": "myjob"}),
            spec=client.V1PodSpec(
                containers=[
                    client.V1Container(
                        name="myjobcontainer",
                        image="busybox",
                        command=["ls", "/"],
                    ),
                ],
                restart_policy="Never",
            ),
        ),
        backoff_limit=1,
    ),
)

# Call the Kubernetes API to create the job
api_instance.create_namespaced_job(namespace="default", body=job)

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 mkimuram/k8sviz: Generate Kubernetes architecture diagrams fro...

2023-10-22T21:07:26Z

GitHub - mkimuram/k8sviz: Generate Kubernetes architecture diagrams from the actual state in a namespace

Generate Kubernetes architecture diagrams from the actual state in a namespace - mkimuram/k8sviz

GitHub · github.com

This is a sick kubernetes architecture diagran generation tool.

Here is an example

installation #

$ curl -LO https://raw.githubusercontent.com/mkimuram/k8sviz/master/k8sviz.sh
$ chmod u+x k8sviz.sh

Usage #

./k8sviz.sh --kubeconfig ~/.config/kube/falcon-k3s.yaml -t png -o k8sviz.png

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Translate a Docker Compose File to Kubernetes Resources | Kube...

2023-10-22T02:04:18Z

Translate a Docker Compose File to Kubernetes Resources

What

Kubernetes · kubernetes.io

kompose is a sick cli to convert docker-compose.yml to kubernetes manifest.

# install

curl -L https://github.com/kubernetes/kompose/releases/download/v1.26.0/kompose-linux-amd64 -o kompose

kompose convert
kompose convert -o deployment.yaml

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Daniel Nashed's Blog

2023-10-21T01:49:41Z

Running your own docker registry in one line

podman run -d -p 5000:5000 --restart=always --name registry registry:latest

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Kubernetes Persistent Volumes with Deployment and StatefulSet

2023-10-21T01:47:58Z

Kubernetes Persistent Volumes with Deployment and StatefulSet

How to use Kubernetes persistent volumes with deployment and stateful set and also when you should use one or another.

Alen Komljen · akomljen.com

Example of how to add a pvc to a deployment.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Inspect a Kubernetes PersistentVolumeClaim | Frank Sauerburger

2023-10-21T01:34:08Z

I was curious to see what was going on inside of my minio object storage. Great technique here by Frank to create an inspector pod, then you can do as you wish with the data.

I created the manifest as pvc-inspector.yml

apiVersion: v1
kind: Pod
metadata:
  name: pvc-inspector
spec:
  containers:
  - image: busybox
    name: pvc-inspector
    command: ["tail"]
    args: ["-f", "/dev/null"]
    volumeMounts:
    - mountPath: /pvc
      name: pvc-mount
  volumes:
  - name: pvc-mount
    persistentVolumeClaim:
      claimName: pvc-name

Then used it like this.

# create pvc-inspector pod
kubectl apply -f pvc-inspector.yml
# exec into inspector
kubectl exec -it pvc-inspector -- sh
# explore data
ls /pvc
# cleanup
kubectl delete -f pvc-inspector.yml

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Can't create Secret in Kubernetes: illegal base64 data at inpu...

2023-10-21T00:49:39Z

External Link

stackoverflow.com

In order to use k8s secrets manifest you first need to encode the data values.

echo -n 'mega_secret_key' | openssl base64

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Can I access k3s using just kubectl (no sudo and no k3s comman...

2023-10-20T22:52:00Z

Can I access k3s using just kubectl (no sudo and no k3s command)

Reddit · reddit.com

Right after installing k3s you are going to need to use sudo to use any kubectl command. The reason for this is that the default config is owned by root. To get around this you will need to make your own config and set the KUBECONFIG environment variable

To do this I used sudo one last time to copy the k3s.yaml file into my own directory and take ownership of it.

sudo cp /etc/rancher/k3s/k3s.yaml /home/waylon/.config/kube

sudo chown -R waylon:waylon ~/.config/kube

export KUBECONFIG=~/.config/kube/k3s.yaml

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Quick-Start Guide | K3s

2023-10-20T21:32:03Z

Quick-Start Guide | K3s

This guide will help you quickly launch a cluster with default options. Make sure your nodes meet the requirements before proceeding.

docs.k3s.io

I recently spun up k3s in my homelab. I’m trying to offload some work off of my free tier fly.io app in order to keep it free tier without crashing.

# install and start k3s
curl -sfL https://get.k3s.io | sh -
# check to see if your nodes are started
sudo kubectl get nodes

My main hiccup so far was the machine I am running on runs zfs on root, and it would not start the master node. Rather than figuring out how to make zfs play nice I just pointed k3s to a drive that is not zfs.

# manuallly
sudo k3s server -d /mnt/vault/.rancher/k3s
# without editing systemd service
sudo ln -s /mnt/vault/.rancher/k3s /var/lib/rancher/k3s

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Modded Minecraft in Docker

2022-02-16T14:44:38Z

In my adventure to put more homelab in docker, I moved our modded minecraft setup to docker.

Getting Mods #

So far I have found all of our mods from curse forge. modpacks make getting multiple mods working together much easier, someone else has already vetted a pack of often times 100+ mods that all play well together. I have yet to get these working in docker, I will, but for not I just have individual mods.

download file #

under the hood docker is using wget to get the mod. The link you click on from curseforge will block wget. What I do is pop open the devtools (f12 in chrome), click on the network tab, click the download link on the web page, and watch the real link show up.

Docker-compose #

I am using docker compose, it makes the command much easier to start, and all the things needed stored in a file. I am not using compose to run multiple things, just for the simple start command.

Create a directory for your server and add the following to a docker-compose.yml file.

version: "3.8"

services:
  mc:
    container_name: walkercraft
    image: itzg/minecraft-server
    ports:
      - 25565:25565
    environment:
      EULA: "TRUE"
      TYPE: "FORGE"
      VERSION: 1.16.5
      MODS_FILE: /extras/mods.txt
      REMOVE_OLD_MODS: "true"
    tty: true
    stdin_open: true
    restart: unless-stopped
    ports:
      - 25565:25565
    volumes:
      - ./minecraft-data:/data
      - ./mods.txt:/extras/mods.txt:ro

volumes:
  data:

mods.txt #

Once you have your mod file link from the network tab add them to a mods.txt file next to your docker-compose file.

https://media.forgecdn.net/files/3620/189/engineersdecor-1.16.5-1.1.16.jar

start your server #

Once you have made it this far starting the server is pretty simple.

docker compose up -d

kill your server #

If your still in the same directory, taking down the server should be pretty easy as well.

docker compose down

# if that does not work you can kill it
docker ps
# copy the id of your container
docker kill <id>

Running a Minecraft Server in Docker

2022-02-07T02:35:21Z

I’ve ran a Minecraft server at home since December 2017 for me and my son to play on. We start a brand new one somewhere between every day and every week. The older he gets the longer the server lasts.

In all these years, I’ve been popping open the command line and running the server manually, and even inside of Digital Ocean occasionally to play a more public server with a friend.

My buddy Nic has been sharing me some of his homelab setup, and it’s really got me to thinking about what I can run at home, and Dockerizing all the things. Today I found a really sweet github repo that had a minecraft server running in docker with a pretty incredible setup.

I ended up running the first thing in the Readme that included a volume mount. If you are going to run this container, I HIGHLY reccomend that you make sure that you have your world volume mounted, otherwise it will die with your docker container.

Docker Compose #

With the following stored as my docker-compose.yml in a brand new and otherwise empty directory I was ready to start the server for the night.

version: "3"

services:
  mc:
    container_name: walkercraft
    image: itzg/minecraft-server
    ports:
      - 25565:25565
    environment:
      EULA: "TRUE"
    tty: true
    stdin_open: true
    restart: unless-stopped
    volumes:
      # attach a directory relative to the directory containing this compose file
      - ./minecraft-data:/data

To start the server we open up the terminal in this directory and run the follwing command.

docker compose up -d

Once its up and running we can run commands on the server simply by attaching to it.

docker attach walkercraft

A few common commands we run in the server #

We play very casually most of the time so we will set keepInventory to true so that we do not loose our inventory when we die. Sometimes we also op ourselve so that we can toggle gamemode into creative.

# set the game to keep your inventory when you die.
/gamrule keepInventory true

# give everyone operater priveledges to they can run commands
/op @a

# give playername op
/op playername

Posts tagged: homelab Archive

💭 DDR5 Prices are Crashing... Kind Of. - YouTube

💭 paynepride dot com outage on vacation

The Right Reasons To Run Kubernetes In Your Homelab

The Right Reasons To Run Kubernetes In Your Homelab #

You want to learn kubernetes #

You like kubernetes #

You want to learn to scale #

I run kubernetes in my homelab #

minecraft server memory

The Wrong Reasons To Run Kubernetes In Your Homelab

The Wrong Reasons To Run Kubernetes In Your Homelab #

I run compose and think kubernetes is the next logical step #

Techno Tim runs it #

Kubernetes BTW #

Talos Linux looks cool #

I found a cool helm chart on GitHub #

I need scale #

Don't copy your gitignore to stignore

tar over ssh

trying forgejo

💭 GitHub Ensloppification – David Bushell – Web Dev (UK)

Should I kubernetes My Homelab

Time #

Skill #

💭 csi-driver-smb/deploy/example/smb-provisioner at master · kube...

Homelab Update Jul 2025

💭 Lab Update | Cloudy with a Chance of Tech

💭 Backups interrupted by full disk usage

💭 Helm - Postiz Docs

💭 Self-Hosted 29: Perils of Self-Hosting

Changing k8s Storage Class - Migration Job

Migration Job #

Cleanup #

homelab drive ids

💭 Resetting a lost admin password — Nextcloud latest Administrat...

2025-nas

Current inventory #

Dream Build #

4 16TB drive option #

2 16TB drive option #

only 2 4TB drive #

2 16TB drive - 16GB RAM #

Budget friendly build #

2 16TB drive option #

only 2 4TB drive #

💭 I Made My Own JBOD Enclosure For CHEAP - YouTube

Setting up 4G Backup with Google Fi and Netgear LM1200

Follow the provided instuctions #

Restart #

Setup LM1200 #

Connected #

Testing Failover #

Why not 5G? #

Make MinIO Access Key

Global Level vs User Level #

The Policy #

Set the Minio Alias #

The Script #

Give it a test #

Managing Access Keys #

Creating an RO Access Key #

Removing a service account #

Getting info #

💭 Manufacturer Recertified Drives | Enterprise Grade — ServerPar...

💭 imagegenius/docker-immich: Monolithic (Single) Docker Containe...

💭 gitroomhq/postiz-helmchart: Helm for Postiz

💭 linkding | linkding

debug cloudflared tunnel

Check that dns is pointing to the correct tunnel #

Check that the tunnel is running #

setup cloudflared tunnel on ubuntu

Get the cloudflared binary #

#

login #

config #

dns #

systemd #

💭 Fitting two hard drives and an SSD in a Dell OptiPlex 7010 SFF

💭 Why You Should Build Your Homelab Now - YouTube