A personal code notes blog
This is part two of my Mastek Battery Automation project with Home Assistant. I added a second battery, improved parameter handling in the Home Assistant GUI and overhauled the automation & balancing script for (almost) zero grid export. It works better than ever. I wish I could continue working on this project, but there really is not much more to do, because it is perfect! I used a header…
The Linux kernel's security model is constantly evolving. In 2026, my Docker-in-LXC nesting became increasingly fragile and needed a replacement. Here I describe a state of the art architecture for Proxmox. The post outlines deploying lightweight VMs via cloud-init linked clones, isolating services in rootless Docker namespaces, and using VirtIO-FS with native VFS idmapped mounts for resource…
Integrating a cheap (~1050€) 5kWh AC-coupled battery into an existing 30kWp PV system. The goal: Zero-cloud dependency, full local control via Modbus TCP, and a 'Zero Export' regulation loop using Home Assistant. This post covers the physical installation using a standard TV mount, RS485 wiring, and the complete software logic.
In diesem Beitrag beschreibe ich die Integration eines günstigen (~1050€) 5kWh AC-Speichers in eine bestehende 30kWp PV-Anlage mit Open-Source tools. Das Ziel: Null Cloud-Abhängigkeit und volle lokale Kontrolle mittels Modbus TCP und Nulleinspeisungs-Automatik in Home Assistant. Ich zeige die physische Installation mit einer Standard-TV-Wandhalterung, die RS485-Verkabelung und teile die komplette…
Running apt upgrade on hosts with rootless Docker services can break them. A version mismatch occurs between the running user daemon and the newly upgraded system binaries, causing containers to fail on restart. This post provides an ansible playbook that detects critical package changes and automatically restarts only the necessary rootless user daemons, preventing downtime and manual…
I always hesitated to deploy an extra tool for user management and SSO , but the current state of the web makes it very difficult to keep up with security, CVEs etc. Why not trust one of the longest standing solutions for identity and access management? Keycloak is open source, interoperable with major SSO protocols ( OpenID Connect (OIDC), OAuth 2.0, SAML ), and robust. The setup with docker…
Everyone talks about docker rootless, e.g. for security reasons, but no one actually seems to do it. Very little information is available. Migrations from rootfull systems? File permissions? Reverse-proxy setup? Here I go through the steps to run Mastodon
A site-to-site connection between pfSense/OPNsense with IPSEC is straight-forward. This post explains some of the peculiarities needed to establish a connection, if one side is behind a Carrier-grade NAT or in an internal subnet. This can happen, for example, with an upstream WAN uplink that uses a dynamic IP address. I also show how to handle routing with multiple subnets on one end, using…
Migration is a tedious process because it depends on a number of custom setup parameters. Understandably, the Proxmox docs provide only basic information on how to migrate the hypervisor itself.
Flashing SAS Cards feels like a trip to the 90s, with all the peculiarities included. This particular LSI SAS9201-16e card left me puzzled, until I realized it is the Supermicro variant that needs special handling. Let's see if I can pull together the important pieces, so that those who come after me don't need to give up on their cards.
This is a description of the process to install Telegraf on proxmox to collect sensor reading, smart data and metrics in InfluxDB 2.0.
This is a description of the process to create `sdcard.img` for the Raspberry Pi Zero W with HiFiBerry DAC Hat in Windows Subsystem for Linux (WSL2).
This is a brief description of the setup process for running docker in unprivileged LXC containers on proxmox. There are two primary sources, one is a post on Reddit and a more general discussion on linuxcontainers.org.