Hosted with Jellyfin, for clients I use Symfonium on Android and Feishin on desktop.

ansible can seem like just a fancy way to run shell scripts with extra syntax, but the real power shows up when you start managing more than one machine or need repeatable, “idempotent” (i love this word) setups. ansible handles state rather than just running commands, so you can describe what you want instead of how to do it step by step. it’s also easier to maintain over time, especially if your setup grows or changes. just add that new vm to the inventory list.

if you’re already comfortable with shell scripts and just want to get a few vms going, you could totally get by without ansible. but if you’re planning to do this more than once, or want to be able to rebuild things cleanly, it’s worth it, imo. it could save you a lot of headaches later on.

i use it at work, i manage about 40 vms in our pre-production environment with ansible. if i need to install a new package on all, it’s one line and one command (ran in a pipeline). if i need to change the settings for unattended-upgrades on the debian machines only, same thing.

however, our “production” environment is k8s and a handful of external services, and we use terraform to manage all that.

i guess it all depends on your needs.

brânză

brânză

Not exactly answering your dilemma, but I was watching a cooking channel yesterday (Sorted), and they were talking about seaweed - it’s wild (heh). You can use it to make straws, bags, packaging and all sorts of stuff that’s foodsafe and biodegradable. And apparently, even if we replaced all the plastic used for that kind of thing with seaweed, we’d barely make a dent in the ocean’s seaweed supply - we’d use less than 1% of it.

Be honest, and when there is something you don’t know, just say so. I am hiring right now, and many people adjust their CVs to match the job description, but then don’t actually know some of the technologies mentioned there…

Also, the line between confidence and arrogance can be very slim. Try to be confident, but don’t overdo it.

Oversimplifying it, Ansible playbooks are nothing more than some commands that should be run on a remote machine via ssh. Ansible knows or has modules for a variety of different package managers (apt, yum, etc) and automagically knows how to handle services or various config files.

It can get complex, but I think just the startup phase, until you have an inventory of remote machines, the ssh keys are in place, etc. I second the Jeff Geerling recommendation, his stuff is solid, both ready to use playbooks, and tutorials.

I would suggest to also look into cloudinit. Makes setting up VMs on proxmox easier, faster, more consistent, with users, networking, ssh keys, etc ready to use (by you or by Ansible).

Yeah, I think coredns offers all the options you need.

This is a great addition to my home-lab, no more “free online convert” tools needed.

My family pickles watermelons, for generations. They are delicious.

Walking alone around the river bank, with a kitchen knife on my belt. I was “adventuring”.

I agree with you, but this was specifically about jellyfin.

I don’t think so, but don’t quote me on that. My machines come with a 65w charger.

A micro sized PC with an i5 and 8gb or ram can cost under 100€, and it’s way more powerful compared to a pi. Power efficient too. That’s what I used for a long time for my jellyfin server.

I personally use my home lab to test and learn, and I try to mimic a corporate environment. I have multiple instances of DNS, proxy, etc and I have a “prod” and a separate “staging” k8s environment. I try as much as possible, without going nuts about it, to update and try new changes that might be breaking in the staging cluster.

Grew up in a very religious home, in a very religious country (orthodox christian). I don’t think I ever truly “believed”, but I didn’t want to upset my family, so I got married in church and baptized my kids. I am an atheist, and don’t practice any religion now.

I don’t think I’ve ever encountered what you say… I use WG it to access a network, not a device. I have a few dozen devices, physical and virtual, why should I set up wg on all of them? Tailscale, maybe, it’s a different story, but I prefer to “self host” and not rely on a 3rd party provider. Wireguard was relatively easy to set up too, a few years ago… and in the meantime, if I need to add a new client, it’s a two minute job.

Right, but I have wireguard on my opnsense. So when I want to reach https://jellyfin.example.com/ , if I am at home, it goes phone -> DNS -> proxy -> jellyfin (on the same network). If I am connected to the VPN, it goes from phone -> internet -> opnsense public ip -> wireguard subnet -> local subnet -> DNS -> proxy -> jellyfin. I see some unneeded extra steps here… Am I wrong?

Oh, I get that, but it just doesn’t make any sense to me to be physically next to the server, and connect to it via VPN…

My network is not publicly accessible. I can only access the internal services while connected to my VPN or when I’m physically at home. I connect to WG to use the local DNS (pihole) or to access the selfhosted stuff. I don’t need to be connected while I’m at home… In a way, I am always using the home DNS.

Maybe I’m misunderstanding what you’re saying…