poweredge-pro SERVICES: - nfs/smb file shares - cronjobs - zfs scrubbing - zfs snapshotting - services.smartd - ups safe power down - allow backup to truenas - virtual machines - virtual router opnsense - web services - admin streamline (docker for now) - chexx-internal-webservices (docker) - chexx-webservices (docker) - filebrowser (potential container to avoid break out) - gitea (container with ssh & git) - mailcow (docker) - tjkeller web services - cgit (public git) (container with ssh & git) - searxng - minitube - smtm SECURITY - boot security - boots without password - certain services start without password - chexx-webservices - all tjkeller services - others require password to be entered for encryption (all not mentioned above) - file security - encrypted zfs pools DISKS - boot disk - zfs or btrfs - services disk - zfs - encryption - datasets - /var/lib/machines - /var/lib/docker IPS - streamline: 10.0.0.2 : 5021 - chexx-internal-webservices: 10.0.0.2 : 8080 - chexx-webservices: 10.0.0.2 : 8081 - filebrowser: 10.0.1.2 - gitea: 10.0.1.3 - mailcow: 10.0.0.2 : 21 445 etc - tj cgit: 10.0.1.4