r/homelab

The “rack” is a boltless steel shelf from Amazon, the kind meant for paint cans and storage tubs.

On it: six tower nodes, all running Proxmox, doing everything from LLM inference to Kubernetes pools, plus flash storage.

The whole thing is tied together with a $50 1G switch (I promise I’ll upgrade the fabric soon).

Things I swore were temporary: the wood framing, the cable management, the switch, the shelf itself. The shelf is winning. It’s load-bearing infrastructure now.

It honestly works. Boltless shelving handles way more weight than people assume, and tower chassis don’t need rails. The real problems are airflow and cable management, both of which the photo will confirm I have not solved.

So before I spend real money: know any better ways to store these? Towers, not rackmount, so a standard 19” rack is out unless I shelf-mount them anyway. Open to wall mounts, custom builds, “just buy X,” or being told the shelf is fine and I should stop overthinking it.

Hey everyone, just wanted to share the final status of my 10-inch homelab rack setup. It fits right inside a standard Ikea Kallax shelf, and I finally got the ZimaCube 2 integrated at the bottom.

Here is a quick breakdown of how I configured everything:

The Hardware Stack (top to bottom):

• OPNsense Firewall: ZimaBoard 2 (8GB) handling edge routing and WireGuard VPN access.
• Compute Node (Proxmox VE): ZimaBoard 2 (16GB RAM) running core services like primary AdGuard Home, PostgreSQL database cluster, Nginx Proxy Manager, Vaultwarden, and Home Assistant.
• Compute Nodes 2 & 3 (Proxmox VE): 2x ZimaBlades (16GB RAM each). One runs Frigate NVR (hooked up to a Coral TPU) and the other is a "Game-Central" node (RomM, SMB shares, retro games).
• Secondary DNS: Raspberry Pi Zero 2W running secondary AdGuard Home (synced via adguardhome-sync for DNS failover).
• Storage & AI Node: ZimaCube 2 (Standard Edition) running ZimaOS Beta. It handles the NFS/SMB shared storage for Proxmox and runs local LLMs (mostly Gemma models) via llama.cpp + OpenClaw.

Upgrades on the ZimaCube 2: I added a 32GB DDR5 stick to get 40GB RAM total and dropped in a low-profile Intel Arc Pro B50 (16GB VRAM, AV1 encoding support). I went with the B50 because it runs entirely off PCIe slot power (no extra power cables needed) and offers an awesome VRAM-to-price ratio.

Software & Local AI: Instead of wiping ZimaOS from the ZimaCube 2 right away, I decided to keep it to test a ZimaOS Beta version provided by the IceWhale that includes native Intel Arc GPU driver support. This way, the ZimaCube 2 hosts the shared storage backend for the cluster and runs local inference with llama.cpp + OpenClaw. For the cameras, Frigate is still running on one of the ZimaBlades with a Coral TPU since I have 4 outdoor cameras and want to keep the load off the main CPU/GPU.

3D Prints & Links: Printed everything on my Elegoo Centauri Carbon. I did a couple of remixes myself to get the ZimaCube and the firewall cleanly integrated. Here are the links:

• Kallax 10" 7U Rack Frame (Top Section): Original Model on MakerWorld (Used as-is for the upper compute stack).
• Kallax 10" 2U Rack Frame (Bottom Section for ZimaCube): My Remix on MakerWorld (Modified this to handle the height and weight of the ZimaCube 2, includes the sliding tray rails).
• ZimaBoard 2 Mount (OPNsense Firewall - 2 Keystones): My Remix on MakerWorld (Added 2 keystone slots for clean WAN/LAN cable management on the front).
• ZimaBoard 2 Mount (Proxmox Brain): Original Model on MakerWorld.
• ZimaBlade Mounts: Original Model on MakerWorld.
• Vents / Blank Panels: Customizable Vents on MakerWorld.

Feel free to ask me anything! Whether you have questions about the physical assembly, the 3D printed mounts, network routing, or the local AI testing under ZimaOS Beta, I'm happy to help out and share details!

Been building my home lab for a few months now and they've been hanging out in my TV stand shelves. I think it came out pretty good. Just need to do some proper cable management.

Device	Role	Specs
Old Acer Predator Laptop	Proxmox hypervisor failover node	4 Core CPU · 8 GB RAM · 512 GB SSD
GMKtec K15 AI Mini PC	Proxmox hypervisor master node	Core Ultra 5 125U · 48GB RAM · 1TB SSD · Dual 2.5GbE
Raspberry Pi 5 ×2	Docker Swarm manager nodes	4 core CPU · 16GB RAM · 128 GB SD card · GeeekPi P33 PoE+ NVMe Hat
UGREEN NASync DH4300 Plus	NAS	4 Bays · 48 TB HDD (soon) · 2.5 GbE
TP-Link ER707-M2	Router / firewall / VPN	Dual 2.5G WAN · SPI firewall · Omada SDN
SG2210XMP-M2	Core Switching	8× 2.5G PoE+ · 2× 10G SFP+
TP-Link EAP770	Wireless Access Point	WiFi 7 · BE11000 · 2.5G uplink

Got a Proxmox cluster going with the Mini PC and the laptop. Laptop is just for failover. The Pis are part of a 3-node Docker swarm with an Ubuntu VM. I've really been liking the Omada lineup from TP-Link. Bit of a learning curve, but once I got set up, it's been really easy setting up my network.

Here's what I got running:

• Omada Controller VM
• 2 x RHEL IDM servers
• 2 x Pi-holes w/ Unbound and Gravity Sync
• ARR Stack
• OpenVAS CE Vulnerability Scanner
• STIG Manager
• Grafana
• RHEL 7 - 10 test VMs
• Ubuntu Docker Node w/ iGPU passthrough for transcoding

My 4 x 16 TB drives just came in, so I'll be setting that stuff up on the NAS soon. Gotta migrate my data and recreate the RAID setup. I've been using random hard drives that have been sitting around at home.

Next plan is an UPS for the homelab and NVMe SSDs for the Pi's. I'll maybe get another Mini PC for a proper Proxmox cluster.

Originally posted by /u/ITSecurityAdam on /r/sysadmin:

GitHub Official X Post

"We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity."

Dark Web Informer says "GitHub source code allegedly offered for sale: Internal orgs and private repositories claimed

A threat actor using the alias TeamPCP claims to be selling GitHub source code and internal organization data.

The actor claims the dataset includes around 4,000 private repositories and says samples can be provided to interested buyers to verify authenticity.

━━━━━━━━━━━━━━━━━━━━ Target: GitHub Country: United States Sector: Technology / Software Development / Source Code Incident Type: Alleged Source Code Sale Claimed Exposure: Around 4,000 private repositories Actor: TeamPCP Price: Offers over $50,000 ━━━━━━━━━━━━━━━━━━━━"

Edit: adding xcancel link, thanks jykke! https://xcancel.com/github/status/2056884788179726685

EDIT: adding screenshot of Breached forum: https://preview.redd.it/ejqauffg382h1.jpeg?width=1034&format=pjpg&auto=webp&s=3411db1a4516b9153267fcc043ddf09a3e73f2c3

Hello,
I’ve been building an app Speedometer: Driving Tracker, a CarPlay-supported driving tracker focused on trip history, analytics, and the overall driving experience across Apple devices.

Recently, I added real-time OBD2 analytics support after many users requested deeper vehicle insights.

You can now view live OBD2 data directly on CarPlay, iPhone, iPad, Mac, and even Apple Watch (via Live Activity).

Some supported data includes:
• Engine Load
• RPM
• Throttle Position
• Fuel Usage
• Coolant & Oil Temperature
• Mass Air Flow
• Intake/Ambient Air Temperature
• And more

What I personally found most interesting during testing was being able to review how different driving styles affected engine behavior across an entire trip, not just while looking at live gauges.

The app also supports automatic trip recording using Siri Shortcuts automations when your OBD2 device connects.

One important thing:
Every car exposes different OBD2 sensors, so available data can vary depending on the vehicle and adapter.

Beyond OBD2, the app also includes:
• CarPlay trip tracking
• 3D route playback
• Speed-colored trip replay
• Video recording with speed + map overlays
• Fuel, maintenance, and expense tracking
• Vehicle-based analytics & comparisons
• iCloud sync across Apple devices
• Privacy-first experience (no ads, no tracking, no signup)

The goal was never just to make another speedometer or gauge app, but to create a more complete driving companion ecosystem for drivers.

Excited to be a part of the Ubiquiti fam! As per this thread I left lots of space for goodies throughout the year (when stuff is ever back in stock). Answering a few Qs I’m expecting:

- Yes, the UPS is not connected. I don’t know why they made the power cord so short, so powering directly from the pdu currently. And yes, I want the Unifi 2U psu!

- Yes, everyday I refresh the site to see if OCD panels come in stock… sigh. I bought spray paint but honestly may rather just wait for the real deal.

- Currently running Synology NAS in the back of the rack but the Unifi NVRs are sexy. Just a bit limited for what I’d like (I think).

- Currently running all Google home devices / cameras, but happy that I have to option to swap to protect if the time calls for it.

- Running 3Gb with Bell (capped at 2.5 with this switch + a touch more capped with Pppoe, but honestly everything’s running great for our needs right now.

Open to any thoughts and suggestions! Cheers :)

EDIT: Yes, I am going to get rid of those ugly power bricks! Waiting for more extensions to arrive.

I've always loved minimalism and when I saw this post I finally had my inspiration. I wanted to go with a Nordic theme. Very happy how it turned out.

Created with Homepage. I used a lot of custom css and some java. I decided to use AI assistance due to the very complicated html code homepage spits out. With so many divs within divs within divs it was just much easier to use AI to help me drill down to what I actually needed to edit.

I would still love to create simple dynamic badges using the Homepage widgets but I haven't had any luck thus far. If anyone has had any luck please reach out, would love some advice.

My homelab is proxmox / opnsense. Highly segmented VLANning. Looking for missed alternatives before I press buy.

Replacing aging GbE gear. My reasons:

• Increase bandwidth
• Improve IaC managibility
• Modernize

Three physical locations:

Utility room: rack with firewall. Currently NETGEAR M4300 52-port PoE. Proxmox host, NAS, patch panel including PoE cameras and Unifi WAP, AV gear, about 12 devices in total

Workshop: Backup target (miniPC with HDD box). Currently NETGEAR JGS516PE - very limited management. CNCs, 3D printers, electronics bench, vintage computing, Proxmox backup target

Office: Lone small router picture. 2 workstations, printers and similar peripherals, video editing, experimentation

PoE needs: cameras all in utility (low draw), 3x WiFi 6/7 APs spread between utility and workshop (these are the heavy PoE+++ loads). APs are UniFi.

Proposed stack:

Core (Utility rm stack): MikroTik CRS309-1G-8S+IN, $269, 8x SFP+, RouterOS v7

Access + AP feeder (utility rm stack): UniFi USW-Pro-Max-24-PoE, $799, 8x 2.5G PoE++ + 16x 1G + 2x SFP+, 400W budget

Workshop leaf: MikroTik CRS310-8G+2S+IN, $240, 8x 2.5G + 2x SFP+

Office leaf: MikroTik CRS310-8G+2S+IN, $240, same as workshop

Fiber runs from each leaf back to the CRS309 in the utility rack. DACs for everything in the rack. Plus a few SFP+ NICs for direct-to-core NAS and Proxmox migration link.

Logic: MikroTik for fabric and leaves (RouterOS automates well with Ansible, fits my existing IaC workflow), UniFi for AP-adjacent switching (controller integration with existing APs, decent GUI, 400W PoE handles all the access-port load in one box).

Anything I'm missing? Better options in this price range? Reasons to consolidate or split differently? Specifically curious if anyone has run the CRS309-as-aggregator pattern.

Hi everyone,

I recently bought a gaming desktop with an Asrock 850gold+ PSU.

Given that we're approaching the time of year when a lot of air conditioners are running, we often have power outages here (both from my family's careless use and from the building).

I was thinking of getting a UPS to connect the monitor and the new gaming desktop. Is it worth it?

If yes or no, I have a few dilemmas:

1. My socket has a 16A Italian plug, not a Schuko plug for the UPS. I'm currently using this BTicino power strip https://amzn.eu/d/0cTASQnm and I’ll buy another one just in case if necessary. I’m not sure if I should ask an electrician to change the socket to a Schuko (at least one plug).

2. Would you recommend just buying the power strip or should I just go for the UPS? If yes, what brands or direct UPS do you recommend?

If you have any other advice, let me know and thanks so much in advance!!

My homelab is a kubernetes cluster running on a few Dell PowerEdge servers behind a Ubiquiti EdgeRouter 6p connected to Google Fiber. Among other malicious traffic, I am specifically concerned with a large number of spam accounts being created on my Gitea instance. I have written about the steps I've taken so far to combat this in this issue. I am able to get the IP addresses of the bad actors, but I'm having trouble blocking that traffic from my network. I cannot block them from Gitea, as it is not using X-FORWARD headers to preserve client IP addresses reported by the ingress controller. I tried to write firewall rules to drop traffic from these addresses, but the traffic is still getting through. What can I do to have more control over my network traffic?

I feel like my media needs are completely met now unless there's something I'm forgetting about. I've been able to replace all of the audio and video streaming services I used to have. I've also been able to replace google photos, so I have basically eliminated most of my subscruptions apart from my ISP.

What other containers are worth adding now? I'm happy that I can now sit and enjoy what I've built, but I still have 20GB of memory available, so I want to add more.

I am considering tailscale so I can check on things while at work if there are any problems, or access my streaming services remotely when needed.