You didn’t just push it to main, you also pushed confidential code to the public repo!

Yeah personally I’m not a fan and I would rather follow a well-written guide than spend even more time auditing such a script (which would be even more difficult if you’re not experienced with Proxmox). For maintenance’s sake it’s also risky getting your service set up like this as you don’t know how the script set things up and it’s harder to fix things if they go wrong.

I do this :). A virtualized router is amazing since you can move it between cluster nodes with zero downtime, and you can restore from backup very quickly if the router’s node fails.

There are zero issues if you know what you are doing and have proper mitigation practices in place - basically that means you have your management interfaces on a flat network and can access opnsense/proxmox/bmc on the same laptop with a static IP. I have a specific switch port connected to that VLAN that I plug my laptop into. If you mess up your config then you just connect directly to the Proxmox webui and access the opnsense vm to fix it.

I virtualize my NAS because it’s small (only several TB) and therefore it can be backed up like any other VM with PBS or dumped as a qcow image. A full restoration is extremely easy because I can simply have another node pull the backup from PBS. Also I can migrate the entire NAS to another node so it stays up when I have downtime.

TIFF is a classic storage format, but PNG is common for web images and isn’t going away either. DNG is for RAW sensor output from professional cameras and is not used for edited and published images. However if you’re archiving your photo collection or something than keep the DNGs!

I run a non-federated Matrix server for my family with synapse, it’s behind nginx and the setup is pretty straightforward if you know what you’re doing. It does chat, voice, and video with screenshare nicely, though I don’t know now well it scales to a large group.

x

Homelabbing is an amazing hobby if you’re into this stuff, and you can go as far down the rabbit hole as you like :)

My lab also supports my coding endeavors since I can deploy VMs, run a local Git server, and so forth. Most of my development is done in a SPICE VDI on Proxmox.

The easiest way would be to just bridge the ISP router if it supports that feature. To connect back to the ISP router’s webui you can setup outbound NAT on your second router (generally only available on enterprise gear).