---

Self-hosted Home (Lab) Cloud

---

Add domain to CloudFlare * :

settings:

SSL/TLS Mode - Full (strict)  

Edge Certificates:  
  Always Use HTTPS: ON  
  HTTP Strict Transport Security (HSTS): Enable
  - Max Age Header (max-age) 6 months
  - Apply HSTS policy to subdomains: ON
  - Preload: OFF(?)
  - No-Sniff Header: ON
  Minimum TLS Version: 1.2  
  Opportunistic Encryption: ON  
  TLS 1.3: ON  
  Automatic HTTPS Rewrites: ON  
  Certificate Transparency Monitoring: ON   
  
Security:
  Bot Fight Mode: ON 
  Security Level: Medium  
  Challenge Passage: 30 Minutes  
  Browser Integrity Check: ON  

---

Install and Configure Proxmox Virtual Environment * :

Create:

1. Bastion/Jump Debian Server * :

SSH connectivity to all of the VMs

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/Bastion/main/setup.sh)"

2. Debian VM/CT:

Debian is a complete Free Operating System!

• Add free space (if necessary):

VM > Hardware > Hard Disk > Disk Action > Resize
CT > Resources > Root Disk > Volume Action > Resize

• Run script to harden Linux server and to install one of the Services,
• Use Bastion/Jump Server to SSH in.

---

Services:

Unbound DNS (with optional Pi-Hole) * :

validating, recursive, caching DNS resolver with DNS over TLS (DoT), with optional Pi-Hole install

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/unbound/main/setup.sh)"

Samba file server * :

file sharing across different operating systems over a network

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/Samba/main/setup.sh)"

Nginx Proxy Manager (Docker) * :

reverse Proxy for all of your Services

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/NPM/main/setup.sh)"

Nextcloud * :

self hosted open source cloud file storage and colaboration

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/Nextcloud/main/setup.sh)"

Nextcloud (Docker) * :

self hosted open source cloud file storage and colaboration

bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/Nextcloud-D/main/setup.sh)"

Vaultwarden (Docker):

everything you need out of a password manager

clear
RED='\033[0;31m'; NC='\033[0m'; echo -ne "${RED}Enter directory name: ${NC}"; read NAME; mkdir -p "$NAME"; \
cd "$NAME" && git clone https://github.com/vdarkobar/Vaultwarden.git . && \
chmod +x setup.sh && \
./setup.sh

*

top of the page