Topics

Servers, Proxmox and network

Name: senn-tech
Address: Weissachstraße 67, Kufstein, Tirol, 6330, AT
Telephone: +4369917602100
Price range: €€

Virtualisation, clustering, DNS and networking run in-house: Proxmox, high availability, resolvers, updates and the outages that come with them.

47 posts

2026-10-24 · LinuxSteamOS 3.9.5 is stable: Linux 7.2, Plasma 6.7, security updatesValve has released SteamOS 3.9.5 to everyone: kernel 7.2, Plasma 6.7.3, wpa_supplicant as the Wi-Fi default and the revocation of compromised eMudhra certificates. The last item affects every system with its own certificate store.
2026-10-24 · LinuxQuad9 leaves France: what it means for your DNS forwardersAfter a Paris ruling on 21 October, Quad9 ends its service in France on 24 November. Operators outside France have nothing to change, and the case still shows why a single upstream resolver is a risk.
2026-10-24 · LinuxDietPi 10.8: WireGuard server and clients with QR code via dietpi-wireguardDietPi 10.8 of 21 October ships dietpi-wireguard, a tool for WireGuard servers and clients with a QR code for the phone app. It reads existing configs in /etc/wireguard and moves files when you change something, so take a backup first.
2026-10-21 · Self-HostingOut with Matomo, in with Umami: six years of web analytics rebuilt in one nightMatomo ran for six years and ended up as the last publicly reachable mod_php installation we owned. Replaced by Umami 3.3.1: no cookie, no PHP, 14 months of retention.
2026-10-20 · LinuxLinux 7.3 is out: VRAM protection, scheduler tuning, Btrfs and SMBTorvalds released Linux 7.3 on 18 October. What matters for operators: video memory protection (AMD, Intel Xe), subschedulers for sched_ext, the end of the old Btrfs cache and an in-kernel SMB server with Time Machine support.
2026-10-19 · WindowsWindows 10 LTSB 2016 out of support, Server 2016 follows on 12 January 2027: what admins should planTwo end-of-support dates three months apart: Windows 10 Enterprise LTSB 2016 on 13 October, Windows Server 2016 on 12 January 2027. What ESU offers, what it does not replace, and where the inventory starts.
2026-10-18 · InfrastructureExchange 2016 and 2019 are out of updates for good, and the October Windows patch freezes the databasesThe ESU program for Exchange Server 2016 and 2019 ended with the update on 13 October: no more security patches for these servers. And the October Windows updates freeze Exchange databases, Subscription Edition included.
2026-10-17 · Self-HostingPostgreSQL 19 RC1: JIT off by default, LZ4 for TOAST, GA on 19 NovemberThe first release candidate of PostgreSQL 19 is out. The release notes list several changed defaults and several pg_upgrade blockers. If you run Postgres in Docker stacks, a copy of your cluster is the place to test.
2026-10-16 · Self-HostingTalos Linux becomes a hypervisor: a VMware alternative next to Proxmox?A hypervisor on libvirt and QEMU/KVM is coming to Talos Linux, in alpha since 13 October and due for general availability in December. The management product Talos Director is commercial, and Sidero has belonged to Yardi since July.
2026-10-16 · Infrastructure64-day certificates from February 2027: what Let's Encrypt changes and what your renewal rules can takeLet's Encrypt switches to 64-day lifetimes on 10 February 2027, and staging already moved on 14 October. What actually changes, what the CA/B Forum schedule requires and which ACME clients get tight without ARI.
2026-10-15 · LinuxLinux kernel: why the Assisted-by tag for AI-written code is meant to goOnly about ten percent of Linux 7.3 commits carry the Assisted-by tag. The Maintainers Summit wants to end the requirement, and Torvalds sees no point in forced disclosure. The change is not merged yet.
2026-10-14 · Self-HostingAppwrite 2.5 self-hosted: passkeys and interval schedules for functionsPasskeys per project and functions that run every N minutes arrive with version 2.5. Self-hosters need to watch the executor image and the console login during the upgrade.
2026-10-12 · InfrastructureGoogle's MCP Toolbox: exposing databases to AI agents over MCPThe MCP Toolbox for Databases is an open-source server that offers agents parameterized queries from a config file. Its Java SDK has reached version 1.0. What it does and what to settle before connecting.
2026-10-11 · InfrastructureWindows Update: two certificates expire in 2027, Server 2019 firstMicrosoft is swapping the certificates devices use to sign in to Windows Update. The old ones expire on 17 May and 19 June 2027. Patched systems won't notice, Server 2019, Server 2016 and Windows 10 LTSC get a date with an audit trail.
2026-10-11 · InfrastructureOneDrive and SharePoint URLs lose their embedded token on 1 April 2027Microsoft is taking the embedded token out of SharePoint and OneDrive URLs. Affected API families, two migration paths, a docs gap, and our backup console: download has a fallback, restore not.
2026-10-09 · InfrastructureWindows Update certificates expire in May and June 2027Windows Update certificates end on 17 May and 19 June 2027. Devices without the July 2026 update (or the September 2025 update on 24H2) lose access to Windows Update afterwards. Versions, deadlines and the Update Catalog route.
2026-10-09 · InfrastructureGPU inference on Proxmox: what LXC instead of a VM actually buys youA LinkedIn post argues that GPU inference belongs on Proxmox LXC instead of in a VM. We checked his claims against the Proxmox documentation, against NVIDIA documents and against our three GPU hosts. The technology is real, our conclusion is not his.
2026-10-08 · InfrastructureA coffee machine sent 1 TB in 10 days: put IoT on its own VLANA connected pod machine caused 1,008.45 GB of upload in just over ten days, according to UniFi statistics. Most of it stayed on the local network, and the cause is unconfirmed. How to find and contain such devices.
2026-10-08 · InfrastructureReplacing Discord with Matrix: self-hosting Synapse and ElementA Hackaday author moves his group from Discord to a self-run Matrix server. The result is six VMs, a paid service and open questions around video calls. What carries over to clubs and small teams.
2026-10-07 · InfrastructureLet's Encrypt moves to 64-day certificates on 10 February 2027On 10 February 2027 the Let's Encrypt default drops to 64 days. The last 90-day certificate expires on 11 May 2027. Where hard-coded numbers in cron jobs and monitoring thresholds will show up.
2026-10-01 · InfrastructureAfter leaving VMware: what the licence bill looks like in 2026The February 2025 post covered the why. This one is the arithmetic: which price increases are documented by a named source, what Proxmox costs per socket, and which four items nobody budgets.
2026-09-21 · InfrastructureOmarchy reviewed: an Arch distribution with a built-in AI agent, five days on ProxmoxOmarchy is an Arch-based distribution with Hyprland and an AI agent built into the setup, carried by $18.5 million in pledges. We ran it for five days on Proxmox. The engineering convinces, the operations do not.
2026-09-18 · InfrastrukturA host with apt exit 100 stopped the patch round for the entire fleetA file host held us up on September 16 with apt exit 100. The rest of the fleet received neither patches nor CVE checks that evening. Counted up: 19 packages pending, five of them security updates.
2026-08-14 · InfrastructureUbuntu or Windows 11 on the desktop: the honest calculationSince Windows 10 left support the question is back. The answer hangs not on the operating system but on the application chain behind it, with measurements from our own estate.
2026-08-13 · InfrastructureProxmox VE 8 goes end of support this month, and ARM64 arrivesSupport for Proxmox VE 8 runs out in August 2026. Moving to 9 means a Debian major upgrade at the same time, and in parallel, the first official ARM64 build has appeared.
2026-08-11 · InfrastructureProxmox VE vs. VMware vSphere: What the Switch Really CostsBroadcom has restructured its pricing, and suddenly everyone is crunching the numbers. We operate six Proxmox nodes across two locations; here’s what the change really means and where it hurts.
2026-07-27 · InfrastructureDNS monitoring: why a green uptime check proves nothingA DNS resolver can be reachable, answer on port 53, and still refuse one lookup after another. We went looking for what our uptime checks had never reported.
2026-07-20 · InfrastructureThe EU Mail Stack: Bulwark + Stalwart + Proxmox Mail Gateway Instead of M365A modern, self-hosted mail platform that owes nothing to Microsoft 365: Proxmox Mail Gateway filters at the edge, Stalwart holds the mailboxes over JMAP, and Bulwark delivers a webmail client that finally looks like 2026. Three open pieces, one sovereign stack; open source, hosted on your own iron under EU law.
2026-07-10 · InfrastructureSSO for the Self-Hosted Stack: Authentik and Keycloak ComparedNextcloud, Gitea, Zammad, mail, chat, each tool brings its own login. A central identity provider ends that, cuts the password chaos, and is the foundation for MFA. Authentik and Keycloak are the two serious open-source options.
2026-06-19 · InfrastructureFrom Pi-hole to Technitium: One Server for Blocking, DNSSEC and Native HAWe ran Pi-hole v6 in production, until high availability became the breaking point. Why we migrated both resolvers to Technitium DNS Server: native clustering, DNSSEC validation, encrypted upstream (DoT) and advanced blocking in a single engine.
2026-05-21 · InfrastructureProxmox VE 9.2: Dynamic Load Balancer for the ClusterWith version 9.2, Proxmox VE gains a dynamic load balancer that automatically distributes running VMs across the cluster; building on the 9.0 generation with Debian 13, new storage features, and SDN fabrics.
2026-04-30 · InfrastructureProxmox Backup Server 4.2: S3 Object Storage and Parallel Sync JobsProxmox Backup Server 4.2 brings official S3-compatible object storage as a backend, parallel sync jobs, and server-side encryption of replication; based on Debian 13, Kernel 7.0, and ZFS 2.4.
2026-04-22 · InfrastructureWireGuard: VPN for Everyday UseWireGuard is fast, simple, and in the Linux kernel. How we build site-to-site and road-warrior VPNs with it, what to watch for with NAT and MTU, and why it replaces IPsec and OpenVPN in almost every SME scenario.
2026-04-21 · InfrastructureMonitoring without the baggage: Uptime Kuma in-houseUptime Kuma brings status monitoring, notifications, and a public status page in one Docker container. What the tool does, how we use it, and where its limits lie.
2026-04-08 · InfrastructureDNS Adblocking Self-Hosted: Pi-hole vs. AdGuard HomeBlock ads and tracking network-wide, without browser plugins. Pi-hole (v6) and AdGuard Home compared: setup, DoH/DoT, recursive DNS with unbound, redundancy, and everyday usability.
2026-04-07 · InfrastructureGit In-House: Gitea and ForgejoSource code does not belong on foreign servers. Gitea and Forgejo bring GitHub functionality to your own network, CI/CD, Issues, Pull Requests, Actions. Lightweight, open source, ready to deploy in 20 minutes.
2026-03-17 · InfrastructureDocker vs. LXC in Proxmox: When to Use What?Docker containers or LXC? This question arises for every Proxmox operator. Both have their place, but for different use cases. A practical decision guide, including unprivileged containers and the Docker-in-LXC pitfall.
2026-03-03 · InfrastructureReverse Proxy with Caddy: HTTPS by DefaultCaddy makes reverse proxying easy; automatic HTTPS, HTTP/3, no certificate headaches, one configuration file. How we secure internal services and make them publicly available.
2026-02-06 · Infrastructure3-2-1 Backup Strategy with Proxmox Backup ServerBackups only matter when they're missing. Proxmox Backup Server, ZFS snapshots, and a Hetzner Storage Box form a 3-2-1-1-0 strategy that is NIS2-compliant and field-proven.
2026-01-16 · InfrastructureProxmox HA Cluster: Quorum, Fencing and the End of Single-Host WoesA single Proxmox host is fine, until it fails. Then everything stops. A three-node HA cluster with Ceph storage is better. What the setup truly requires, why a QDevice solves the two-node problem, and why fencing is no optional detail.
2025-10-16 · InfrastructureHosting at Hetzner: Root-Servers and Colocation as the Middle GroundCloud is expensive, maintaining your own server room is cumbersome. Hetzner offers root servers and colocation as a middle ground: your own hardware, someone else's power, full control. What makes sense and how we use it.
2025-08-05 · InfrastructureVoIP & Telephony with innovaphone, on-prem instead of Cloud-PBXTelephony does not need to move to the cloud. Innovaphone brings IP-PBX, SIP trunks, and device management into your own rack. A field report on setup, high availability, and integration.
2025-04-15 · InfrastructureNetwork Basics: VLANs & Jumbo Frames802.1Q segmentation and MTU 9000 are not just details for network enthusiasts, but solid tools for more security and throughput. When they help, how Proxmox SDN manages them, and where they cause harm.
2025-04-01 · InfrastructureServer OS Choice: Ubuntu vs. AlpineUbuntu brings stability and support, Alpine minimal image size and musl. When each server OS makes sense, and why the question looks different in the container era than it did five years ago.
2025-03-18 · InfrastructureSQL Server 2022/2025 Self-Hosted, Not Just on WindowsSQL Server has long run stably on Linux and in containers. What versions 2022 and 2025 bring, how backup and high availability look in self-hosted operation, and what licensing costs.
2025-02-18 · InfrastructureFrom VMware to Proxmox: Why We Switched HypervisorsLicensing costs, uncertainty after Broadcom's acquisition, and the desire for true data sovereignty: why we migrated our virtualization to Proxmox VE; including native ESXi import, VirtIO pitfalls with Windows, and a clean cutover.
2025-02-07 · InfrastructureSelf-Hosted Mail Server: Stalwart & Axigen vs. ExchangeExchange is expensive and complex. Modern self-hosted alternatives like Stalwart and Axigen offer JMAP, IMAP, and SMTP at a fraction of the complexity. What they deliver, where the differences lie.

Servers, Proxmox and network

Other topics