My Proxmox Home Server Walk-Through: Part 1 (TrueNAS, Portainer, Wireguard)

today we're going to be putting together a multi-purpose Home Server with multiple virtual machines and containers using this used Lenovo workstation I'm going to walk through the entire process step by step of installing proxmox true Nas scale for network attached storage pertainer so that I can run Docker containers such as wireguard jellyfin first streaming my personal media collection and even a Windows install for remote gaming and I only make a bunch of dumb mistakes along the way so stick around foreign [Music] getting started I'd like to take just a second to thank the sponsor of today's video nordpass if you're watching this video I imagined you spend a fair amount of time on the internet and have quite a few different accounts and if you're not using a password manager you might be in a bit of trouble fortunately there's nordpass an easy to use password manager created by the same cyber Security Experts that built nordvpn nordpass lets you store all your passwords in one place so you never have to worry about forgetting them and also generates complex passwords to keep your account safe I don't have any intention of fear-mongering but in today's climate cyber attacks and more specifically data breaches are a significant threat if you use the same or similar passwords across your social media e-commerce and financial accounts you could be in serious trouble if any one of those companies mishandles your precious data by having random and complex passwords across all your accounts you're much less likely to get hacked and nordpass does all that hard work for you you can use nordpass on up to six devices including on your mobile device desktop web browser and more and one cool feature I personally appreciate is the ability to import passwords from a CSV file which made getting up and running with nordpass literally only take a few minutes there are a lot of other features purely focused on security from their data breach scanner to their Advanced encryption algorithm and zero knowledge architecture right now you can get an exclusive Nord pass deal plus four additional months for free by going to nordpass.com Hardware Haven or you can just use the code Hardware Haven at checkout step up your online security and get signed up with nordpass today now I want to be clear about what this video is I would consider myself more of a hobbyist when it comes to self-hosting networking and things of that nature so it's very possible that I make a few small mistakes in this video while this is a tutorial I would describe this video as more of a hey look what I did this is because I filmed the entire process of me building and setting up the server so I forgot a few things along the way while this might not be the most clear and concise tutorial I think it still has some value as you'll essentially be able to see the entire process I went through to set up and troubleshoot the server also this will be a two possibly three part Series in this video I'll get the hardware set up install proxmox and create two virtual machines one with two now scale and the other with Debian on the latter VM I'm going to install pertainer which should make it really easy to run and manage Docker containers once we have portaner set up I'm going to spin up a wireguard server so that I can connect remotely to this server or any other devices and services on my home network in the second part of this series I'll be installing a Windows Virtual Machine for remote gaming using parsec and also a jellyfin server for streaming movies TV shows and more after that who knows let me know if you have anything you'd like to see running on this server in the comments below with that all out of the way let's talk about the hardware I bought this Lenovo p310 workstation a while back for right around 200 including fees taxes and shipping it came with a 4 core 8 thread Skylake Xeon E3 1275 V5 16 gigabytes of DDR3 memory and an Nvidia Quadro k1200 which as I mentioned in the original video I would probably sell to bring our total price between 120 and 150 this system also came with a 400 watt power supply but that unfortunately died shortly after I started working on the system and despite a valiant effort I didn't manage to save it so once again I'm going to be using my EVGA 650 watt gold power supply in previous videos I installed a 240 gigabyte SSD for a boot drive and that's exactly what we'll be using for this build as well the system is pretty solid for the money but to make our server more interesting I'm going to make quite a few upgrades most of these were either purchased on eBay or from Amazon warehouse deals first I added 16 more gigabytes of RAM to bring the system total to 32. Then I Dropped In a two and a half gigabit Ethernet card this will give our server and more specifically true Nas more than double the bandwidth of a standard gigabit connection when connected to a 2.5 gigabit Ethernet switch like this one here that Asus store was kind enough to send over along with one of their multi-gigabit USB adapters with the multi-gigabit switch and adapters like these we can connect our server with other devices like my desktop PC a laptop or even my drive store for Nas which I currently use for local backups also just a quick note that I'll have links for most of this stuff in the description if you're interested and also want to help support the hardware Haven Channel Next I installed this LSI 9240-8i it mode SAS HBA which I'm going to pass through later to the trunas VM so that we can directly connect a few ssds to connect to this SATA ssds I'm going to use a SAS to save a breakout cable that I picked up used on Amazon the last thing to go in a pcie slot is the same GTX 1650 super we used when turning this system into a gaming PC this will be passed through to a Windows VM for light gaming as well as video transcoding for storage we'll still be using the 240 gigabyte SSD for the boot drive but we're going to add these four crucial one terabyte ssds to the system for our true Nas install I only own two of these so the other two are loners which is why the models are slightly different to help these fit into the system we'll be using this mb024sp-b that icdoc send over to fit the four two and a half inch ssds and to one of the five and a quarter inch Bays this guy is simple and straight to the point with a trailless doorless design and four SATA ports plus a single power connection on the back I installed this into the bottom five and a quarter inch Drive Bay and remove the optical drive to preserve some more space for cable management this is definitely not the system you should try to replicate for yourself and there is definitely some overspending in some areas I put the system together because I felt like it would let me really play around with a lot of different software and services although a bit tight everything fit just fine and I don't think we'll run into many issues on the hardware side although GPU temps might be a tiny issue the 1650 super shouldn't run too hot though so I'm not really worried there's a lot to cover in this video so I'm just going to hop straight into installing proxmox okay so at this point I've plugged in my ventoy drive but the HBA we have for our ssds has a pretty long bios boot sequence it takes like five minutes or so now I could remove the firmware off of this but since I don't see myself rebooting this a ton of times I don't really feel like it's worth the effort to go through that process so we'll just sit here and wait a few minutes obviously I'll skip that for the video's sake but wait a few minutes until this boots up and then we'll be able to enter the the bios for our motherboard okay now that that is done we can go ahead and hit enter here and then F1 to go into the BIOS and most things should already be set up from when I kind of tested this but we can go ahead and make sure that we do in fact have 32 gigabytes of RAM and then all of this should be good under video setup normally this would be set as Auto and for for later on when we get into messing around with the GPU I found out that you actually had to select this as Peg I actually originally thought of selecting this is the integrated Graphics so that the in my head I was thinking that the graphics card would be left available at that point for pcie passthrough but you actually have to select the pcie graphics otherwise it will just sort of be deactivated and you can't use it for even PCI password so we'll make sure that the graphics card is selected as our video device and then everything else I believe should be there's a few things maybe you could do in here if you wanted to under CPU setup we for sure have to make sure that virtualization is enabled and vtd is enabled and I think everything else is pretty good so yeah we're going to go ahead and hit save changes and exit even though we didn't change anything and then unfortunately have to skip through this three to four minute boot up again so I'll meet you back when we get into vintoy okay we're back and here instead I'm going to hit F12 so we can temporarily make sure we select our ventoy Drive I should be able to do UEFI it should be fine okay and then I'm just going to go down to our proxmox ve ISO and here we're going to hit install and then agree this should all be fairly straightforward but I'm going to walk through it anyways okay we're going to go down to our drive here and here we can actually see our four one terabyte ssds which is pretty cool but we're going to make sure and select this 240 gig SSD that I have in there is our boot drive and under options we could install this as ZFS or xfs I'm going to keep it as ext4 fine and we'll use the entire hard drive hit next countries United States and then this would be go to Chicago which is my time zone keyboard layout next password I'm going to put a super secure password Here and then email all right then next okay now here is where we're going to select our management interface and we're going to hit this en01 which is our gigabit Ethernet which is what should be active currently under hostname I'm going to call this let's do p310 procs dot local kind of ugly looking but whatever and then we got a DHCP address here because we have it connected to my home network but instead I'm actually going to give this a static IP I just know that this is available so 192.168.1.31 subnet's good Gateway is good we'll hit next and this all looks correct so we'll leave this automatically reboot after a successful installation checked and hit install and then we'll come back in a few minutes once this boots back up all right so we've booted back up again and our yeah there we go we booted into proxmox there we go so I'll just hit enter this would automatically happen and realistically we should be done now on this physical computer we should be able to do everything now through the proxmox UI so I'm just going to double check that everything boots up fine and then we will unplug this and switch over to our desktop and use yep there we go we can see it says 192.168.1.31 and we don't need this anymore so give me just a minute and I'll switch over to my desktop okay so I don't have our proximox server plugged into my capture card anymore so now I have my camera plugged into my capture card so this is new let's see how it goes I'm going to be kind of doing this pretty live so apologies for any errors or anything but um let's go ahead and uh jump into this so we can go to our browser and type in that URL like from earlier and just make sure you do Port 8006 and we should end up here we can hit proceed all right and then our username should be root okay I always forget if it's root or admin okay and we are in we have we can see our proxmox p310 here we have our local storage our lvm everything looks good we can see we have uh I looked at the Swap at first we have our 32 gigs of RAM so that's all looking swell so the first thing we're actually going to do is install trunas that way we can use our ssds as storage we could set this up as local storage but I it's going to be cool to set it up in true navs for a few reasons so let's go ahead and get started but before we do that we actually need to set up iommu and that's so we can do pcie pass-through with our HBA and our two and a half gigabit card so to do that it's a pretty easy just little Google search so we'll just go search proximox iomu it'll pull up this link here and we can follow these instructions so to do that I'm actually going to make a new connection here uh this should allow SSH by default I believe so we'll set up a new thing here in solar putty and create new credentials root and our super secure password private key credentials name p310 procs and we'll hit create yes and there we go so we're now remoted in to our proxbox server so we can just copy this because I used ext4 I'm using grub I'm going to do a copy here paste we will edit this we just need to go into this right here where it says quiet and we're going to add Intel iommu on I keep doing that I think we put a comma is that correct oh just a space I'm going to fix this just to make sure I don't think it should matter if these arguments are in a different order but just to make sure I'm going to paste it in this order here hit Ctrl X and then enter to save I'm actually going to do a quick little okay and then now here we got this we just need to do update grub done and then I believe we just need to reboot now so now we'll just wait a few minutes until this kicks back on see you then all right so after a not so quick reboot we are back up and running and we should be able to double check that we have iommu enabled so to do that we can go back to our shell and we'll just run this quick little command here which should pull up some stuff and we can see in fact iommu is enabled so let's go back full screen here okay and back over in proxmox we can go to our p310 and we're going to upload our true Nas image I don't have one for True Nas okay so I didn't have one for True Nas in that folder but I just plugged in my ventoy drive and we can actually see we have this true now scale we'll hit open upload and give this just a quick minute to upload I said upload like six times in a row there all right we're done there and let's go ahead and create our virtual machine so I'm going to go to create VM p310 procs nordpass is trying to fill some stuff in for me that's funny all right we can leave this VM ID as 100 that's great next um OS we will use okay yeah we're going to use the CD DVD and our ISO image struggle in the talk here and we'll hit we'll leave this is Linux version is great hit next and then for a system we I think we leave this all of the same we will do machine here we want to switch this to Q35 and I believe we can just leave this as C bias if I'm if I remember correctly and then disks we're just going to add one disk here I'm going to make it 42 gigabytes just so we have a little bit more but we can leave this as verdio that's all good next CPU I'm going to go ahead and give this 4 not not four sockets four cores and we can leave it as the default KVM 64. next here we're going to give this 12 gigabytes of memory and I can never do my math so we'll do 1024 times 12. 12. 288 great and then for Network we're going to do yeah we're just going to have this Linux bridge and then we will add in our two and a half gigabit card as well with pcie passthrough so this is all great we do want to leave this as a vertio that's actually really important because this will give us very very fast access to our true Nas storage without having to actually go through a physical network connection it'll all just be a virtual network connection and it'll be super fast so we'll hit next confirm and now we're going to go up to our oop I don't want to do that didn't mean to double click we will go over here to Hardware add pcie device and we're going to add our HBA and add our two and a half gigabit Ethernet so let's go ahead and add this two and a half gigabit here and we will hit Advanced PCI Express we want that because it's going to be I'm pretty sure you'll be limited with PCI on Two and a Half gigabit because I think you can just get gigabit with PCI hit add we'll go to add PCI device and we'll scroll down until we find our HBA here we'll click that and we also want to make sure that this is PCI Express then hit add and then I think we're good to hit start so we'll go ahead and hit start double click on this to bring up our VNC window okay and now we can go to True now's installation which it did automatically and we'll hit install slash upgrade and then here we're going to select our install device which is the virtual hard drive we made with proxmox and we don't want to select any of these so we'll just hit okay yes super secure password okay and the install is complete so what we're going to do is hit OK and then I'm just going to go to shutdown exit out of this VNC window go over to our VM and under Hardware we're going to remove this ISO or this CD DVD drive I'm just going to hit remove yes and then we'll start this back up while that was happening I went ahead and plugged in the two and a half gigabit card into my Asus store two and a half gigabit switch which thanks for sending that over ASA store and that switch connects This Server now to my turnout server that I personally use as well as my desktop and my Asus store Drive store 4 which I use for some backups this should let us get a much faster read and write speed to our NAS from my desktop all right so back in true now's we can just run the operating system which is what would run by default awesome and we are set up we can see that we got a IP address here from my DHCP server and we're going to go ahead and log into this address and then start setting up true now so I can hit X here we'll open up a new tab once again we'll skip this because we know it's safe I'm going to type in root and then our super secure password and here we go we are in true Nas pretty cool first thing we're going to do is go over here to storage we don't have a pool so we're going to create a pool and we're going to call this let's do proxpool that's fun proxpool and we're going to select all four of our ssds here move them into this datav and we're going to set this up in raid Z which means one of these ssds can fail without losing any data now we could be safer and go to raids E2 which means that up to two of these could fail but I'd rather have a little bit more capacity so yeah and then we can hit create this will delete everything off the drives but that is okay because there's nothing really on them to begin with okay now we have our prox pool set up here and we need to add a data set to this and this is going to be the share that we actually will connect to so I'm going to call this prox share why not it's fun and we should be able to leave basically all of this the same except we are going to use SMB to connect this so we want to make this share type SMB hit save and then now we're going to create a user in this credentials here that we can use to connect to this without having to use the root user so we'll hit add I'm going to call this user Haven Haven no email it's fine now you might want to actually set up an email here for alerts and things like that but I'm just going to leave it blank for now super secure password user ID yeah we can do a new primary group that's fine we can have a Haven group we don't need a home directory so all of this should be able to say this stay the same and we will allow sudo Sudo however you want to say it don't leave a comment or I guess leave a comment whatever it helps me so sure yeah sudo Sudo whichever one made you more upset leave a comment below all right we'll hit save and so now we have this Haven user and we should have a Haven group as well all right now a few more things to set up first of all I'm going to go ahead and set up our Network stuff here you can see we have interesting we only have one interface can I add I might have to come back to this I'm not sure why our two and a half gigabit card isn't showing up I wonder if it needs to be all functions possibly we'll have to reboot for that so we'll do that we'll come back to that we'll come back to the two and a half Cubit card for now we have this I don't want it to be on this dhcp.238 so I'm going to change this to a static IP which we'll add down here so we'll do 192.168.1.32 I'm going to have all my proximox stuff in this dot 30 range here hit test changes we will confirm to test the changes and we'll do 192.168.1.32 and this should work we can hit proceed root and hit save changes because it does in fact work so we're on our new IP here static IP we will need to make sure that this glow Under This Global configuration I'll need to set up a couple things now all right future Colton here explaining what I'm doing because I didn't do a great job in the moment so I have pie hole that operates as my DNS for my local network and I just wanted to make sure that when I used my router as the default gateway and the DNS that it would go ahead and pass that along to my pie hole DNS so that's what I'm doing here I'm just checking that DNS is in fact working most likely you can just use your router as the DNS server or name server all right I'm getting DNS that's great okay so this works sorry I'm doing this all on the Fly just making sure that I'm in fact getting ghcp from my router it should forward it to um my local DNS I'm running Pi hole so yeah next we need to set up a share so we can actually access all of our stuff off of our drive so we're going to select our proc share we can leave it called proc share and we'll hit save enable the SMB service and then here we're going to change the file system ACL to give our Haven user access so we're going to go add item we'll just do group Haven and we'll say permission type full control save Access Control list and now if I go to network here we can do backslash backslash 192.168.1.31 and then procs sure right oh I'm an idiot 32. proxer and we'll do Haven our user password and look at this we have stuff here should be able to copy something over all right so I should be able to copy something to it read from it look at that we're on our Nas pretty cool pretty cool so we have a Nas up and running we don't have two and a half gigabit networking so that's a bit unfortunate but um yeah true Nas is up and running now some things I would definitely do here would be to set up some data protection but I'm probably not going to leave this server running way too long after I finish this video just because I don't really need it right now I already have everything I'm setting up in this video for the most part that I actually want or need I already have running so yeah after I make these videos the server is probably going to get you know torn back down and sold or something so I'm not really going to worry too much about this normally what I would set up is periodic snapshots to happen so that I have snapshots so if I delete some files or something and then I would also set up Cloud sync and um rsync yeah I've used arcline which I'm pretty sure is what our sync uses but you'd set up sync to your local backup you've had a local backup and then if you're going to back up to something like Dropbox or um like back Blaze or something like that you could use this Cloud sync tasks to do regular backups of that I'm not going to dig into that on this because it's not really a true now's video it's more of a proximox video so yeah we're going to call it here I might try to mess around a little bit with that two and a half gigabit networking card and we'll see if that helps so let's let's try just rebooting it after making that one change okay so good news I click that little all functions check box um and I guess that was needed for this card I'm not entirely sure what the all functions thing is to be totally honest but yeah it works now so um if we're back in turn as we can go over here to this next interface and we will I'm just gonna call this two and a half just so I know which one it is and we're going to set this up as 10.100.100.5 why not I know that's open and that's the subnet I use for my little local two and a half gig Network and after refreshing we see that it is up and running so just out of curiosity I should be able to go here go 10.100.100.5 procs sure hit enter credentials and there we go and now if I were to try to copy something over let's see all right I got a video here I'm going to paste let's just see what happens okay hmm looks like we might have been limited to I'm going to copy this to my desktop really quick and just see okay no yeah we're getting our full two and a half gigabit connection there so all is well so we have our two and a half connection up we have everything in true Nas ready to go I believe so and we're gonna make a Debian virtual machine that we can run um portaner so we can run some Docker containers it's going to be pretty cool so let's go ahead and get Debian up and running and then we'll get portaner installed and then we'll start running a couple dock containers so to do that I'm going to upload another ISO here I'm going to hit upload I have Debian 11 here kind of hit upload and once again we'll wait for this to upload all right and then basically in the same way we did our last VM we'll do this yeah so we'll just leave this all the same hit next OS we're going to select our Debbie and ISO for our installer system Linux everything can be the same we'll use all of this the exact same yeah it's not doing any PCI pass-through so it should be pretty straightforward we're going to make this still pretty small I'm going to leave oh I didn't think this through yeah we can actually leave this pretty small I'm going to leave this at 32 gigabytes because most of our storage for our containers will actually live on our share on our Nas so we'll do it next CPU we're only going to give this two cores because we're not going to be running a lot of very intensive stuff well yeah let's give it four why not next and then memory we're just going to do let's be 4096. oh my gosh nope wrong place 4096 did that fix this yeah the network we'll leave this all the same we're going to use our Bridge here for networking and for i o hit next confirm and let's go ahead and get this guy up and running okay so here we'll just go ahead and hit we'll just do install I don't need the graphical install English the United States American English hostname we'll uh let's call it prox Dev continue domain name we don't really need this so we'll just do the same procs dad dot local super secure password super secure password do our user also has a super secure password do a central time zone for me and we're just going to use entire disk this disk here all files in one partition is fine finish and write to disk all right we don't have any extra installation media so we'll hit no we'll just use United States for these mirrors default here is all good we don't have a proxy leave blank all right we might as well participate in this survey sure okay here we're going to disable the Debian desktop environment and gnome genome I'm never quite sure how to pronounce certain things in the Linux community and I'm always nervous because people are going to get all mad at me but we don't want to need these desktop environments anything like that we just want an SSH server and we will go down and hit continue all right install the grub bootloader to your primary drive yes all right installation is complete so we can hit continue right then over here back in proximox we want to remove this installation media I keep right clicking it remove or I guess we can actually do let's see what's going on here oh no it it worked okay so the next reboot it should remove that so Debian should be up and running so here I should be able to type in root and our password and I'm going to run while I'm root user for just a little bit I'm going to run apt update and then I can't type apt upgrade Dash Y which should update all of our not repositories is it repositories why am I blinking anyway it's gonna make sure we have all of our latest packages looks like we're good and I'm going to do apt install oh gosh I'm scared to say it sudo Sudo however you guys want to say it so now I should be able to do okay let's see if I can run my Linux and stuff I'm gonna see if I can add Haven to the sudo user I believe so now I should be able to log out log back in as Haven and I should be able to run sudo who am I password yeah okay so I can do stuff as the Haven user as root now which is cool sweet so the first thing we're going to want to do is be able to actually access our our true Nas share and to do that we're going to need to install a couple things so I'm going to do sudo apt install cifs util sifs utils I'm not entirely sure how to say it but this will let us easily Mount our SMB share and then we're going to need to create something for this to actually Mount to so I'm going to I can't talk make a directory at slash MNT and then a slash processor forgot to do a sudo all right and then if we change directories into that we should be good all right so we have a directory that we actually want to mount our share to so the next thing we're going to do is edit our f-stab FS tab I'm not entirely sure which one it is and I'm sure you guys are going to let me know but we'll do sudo Nano slash Etc slash fstab and then down here we're going to make an entry so we're going to do forward slash forward slash 192.168.1 Dot and we want this to be 32 I almost forgot and then slash proxy share then we're going to do our Mount location so slash M and T slash Brock share and then now we're actually going to type in cifs and then credentials equals we're going to say slash root slash credentials and we'll get to that here in just a second oh SMB credentials it would have been fine as long as we made the file the same but and then I'm going to type zero space zero and this all looks good to me so we're going to hit command X yes okay now we actually need to make that so we're going to do sudo Nano slash root slash SMB credentials and then here we're going to type in user equals Haven and then password [Music] I'm not going to show you but I'm going to type in my password here because it is going to be plain text so I'm not going to show you but I'm going to type my super secret password here and then hit command control X and save so now um that password is in this credentials file and when we run when the fs tab runs which should Mount um anything that's well that FS type should run on reboot and so that should Mount any of those things that are in there so this hopefully should work and I should be able to test that out I forgot the command just want to double check yeah just sudo and then Mount Dash a Mound good Lord and then now if we're lucky if I don't suck at doing this I should be able to go to proc share and actually see the files that are in our proc share pretty cool pretty cool and I'm gonna make a directory let's do what would it be just call it docker I gotta do sudo I guess I probably should um I think I can fix this hold on one second okay so we're going to change one thing here we're gonna back in our FS tab we're going to add credentials and then we're going to say comma uid equals 1000 which should be our Haven user and then comma GID group ID should be 1000 as well and the space zero space zero do this yes Save and then we'll run suit him out hey again then lists okay and then now can I do it without running his root dang it okay we'll just run into the root I'll figure this stuff all out I'm not I'm not an expert at this guys I just have fun okay after a quick reboot we have our permission set up correctly and I was in fact able to make this dock container here without having to run um or the stock container this Docker directory here without having to um run as root so now we actually need to get Docker installed which is not too difficult we can just go docker installation Debian should take us to the website here and they have some fancy little scripts that make things super easy where's the script at yeah convenient script it's fairly easy we'll just copy paste this we'll need to install curl first though should be pretty easy we'll just do apt install curl now we can copy that oh now we can't copy I keep pulling up I should just open this in solar putty why is this not let me paste I don't think let's see paste here we're going to open this up in solar putty here we'll call this procs dib one two one six eight dot one dot ooh what is our IP address of this there we go we're 190168.1.250 we could set up a static IP I'm not going to worry about it right now two five zero new credentials super secure password credentials name proxdeb sure create yes okay it should hope it be a little easier to see and now we should be able to yeah we can paste that curl command in and then should be able to run sh get docker.sh run it and this should handle installing all the docker stuff for us which makes it pretty easy all right it looks like it finished up and if we run this hello world image everything seems to be running well and we can do sudo Docker PS make sure there's nothing else running right but we don't have to run sudo for Docker so we need to add our Haven user to the docker group so we can do sudo uh user mod a capital G Docker Haven and then now if we log out okay and then now here I should be able to say Docker PS great we don't have to do suited that's good so we're going to install portainer once again Google is your friend is usually this is pretty straightforward first thing we're going to do is make this volume I'm just going to do exactly as they do it here so we have our portena data volume and then now we can copy this command here and I believe this is all good I don't think we need to change anything so we'll just copy paste and run it all right cool so it seems like this is all installed and ready to go we can run Docker P oh gosh we can run Docker PS here and we can see our pertainer container is running so now we should be able to log into the web UI and all should be well so let's do that really quick so we can go over here to full screen I already forgot the I already forgot the port I believe it's just 8 000. so we can go to 192. 168.1.250 port 8000. oh nine four four three I'm dumb proceed and here we go once again we'll make a super secure password oh no it's actually making me make a super secure password we're gonna do a super secure password plus a little two exclamation points to our secure password um three exclamation points to our secure password gosh great user okay we're gonna get started just using this local environment it's all good we can click local and then now we should be able to pull up some containers so we have four retainers I don't know what oh yeah this is our um hello world that we did earlier it stopped we can just remove that okay and we're going to add a container and we're going to add a wire guard which will be a VPN server that will let us remote into basically anything on our home network while we're somewhere else so it's pretty cool just back a private tunnel to get into our home network so let's install the wireguard container now to do that I'm going to go over to linuxserver.io they have some great containers that they maintain here and we'll go to the docs and then all the way down to wireguard and wireguard can be a little bit tricky this container does make it a bit easier let's get past a lot of this and we're going to go to the CLI here I'm going to just keep this up and for tainer up okay so we're going to name this container here wire guard you can leave this the same for the image we're going to copy this here always pull the image yeah that will anytime we restart the container it'll pull the latest image now we have a lot of things over here that normally be command line arguments and we're going to have to do those in the the GUI here but it should be fairly straightforward we're going to need to set up a port here um so what we're going to do is we just need UDP on 51820 so we're going to change that 51820 and then 51820 down here for environment variables this is where we're going to have to do quite a bit I'm going to click add environment variable and then here we're going to do we're going to basically copy all of these commands and put them in here so puid and then one thousand guid 1000 as well this is the puid and guid of our Haven user add environment variable TZ I'm going to do America slash Chicago we're going to leave this these two optional guys here blank appears this is important so you can put a number here but I believe you can also put a the list of and it'll actually give them names so that's what I'm going to do for now I'm going to do add environment variable appears and here I should be able to just type in a list like this so I'm going to say iPhone for my phone and then MacBook for my MacBook no spaces or anything add environment variable again go back up this peer DNS Auto we'll just leave that for now we might come back and change that here in a bit if we wanted this to use um like pile or something we'll see if this works automatically if not we may have to come change this internal subnet normally you would leave this exactly the same but because I'm already running wire guard just to make sure we don't have any issues there I'm going to change this internal subnet to 10 Dot let's do 14. 13.0 and then allowed IPS we'll just leave this all these optional ones will just leave as is and then we have a couple volumes we need to mount so for this what we need is we need um this will basically just copy paste but this config folder we need to make our own directory for this so we can go back over here we'll go to probably gonna have to do some stuff here so we might as well just CD to it uh what happened to our proc share okay for some reason it's not mounting on boot so we may have to figure that out but um we can mount it manually so whatever okay so we have our Docker folder here okay so we're going to do is go make directory and then Docker and then we'll call this wireguard so if we see what's in our Docker we see we have this wire guard folder so what we're going to do in portainer now is create these volumes so map additional volume and we're going to do a bind Mount so the path on the container would be let's do this one first slash lib slash modules same thing here on our host machine and then here we need another one and have additional volumes bind mount and for our config so on the container it's just going to be slash config but here we're actually going to do slash M and T slash procs share slash docker slash wireguard cool cool and then I believe that's everything minus these capabilities so capabilities here we need to add net admin and sys module so net admin there's this module there we go so we have all of that it looks like we have everything we need we just need to do okay yeah how do we do this guy so really quick I realized I had never actually done a CIS control argument in portainer I'd only ever done it in the command line so I eventually found this spot here where all we have to do is copy paste the name which is the net underscore ipv4 Dot and give it a value of one okay let's hit deploy container haha there we go it's running that seems good we can hit the logs I don't think I had this capitalized let's try this again place the container hit up the logs okay now because we had that pure variable there it should be in server mode so it's going to generate peers and we have some QR codes here everything looks to be good so what I'm going to do is I'm going to actually hop on my phone really quick and I'm going to hop on the wire guard app okay so here on the wireguard app I'm actually going to disable Wi-Fi really quick so we for sure know I'm just on cellular and I'm going to add a connection here from QR code I guess I actually kind of have to figure out how to get this QR code to where I can see it I'm curious if I there we go okay so if I'm here in putty it'll actually render out this QR code I'm going to delete all of this by the way so don't try to get cheeky or anything like that on me so but I can go on my phone now scan this QR code and I'm going to name this tunnel prox why not hit save and then now if I open this and look at the settings here oh my gosh I'm an idiot I forgot we have to do port forwarding this video is getting a lot longer than I expected okay in my router I have um it's wherever your port forwarding is I'm not there I'm here all right so in your router wherever port forwarding is you'll have to go to that and do some port forwarding you can Google how to do port forwarding I'm not going to talk about it too much I'm just going to do it so I already have some stuff Port forwarded that I'll have blurred out I imagine I'm going to hit add name foreign external Port ooh okay so what happened here was that I forgot to change the port for our wire guard container because I'm already using wire guard on a different server and they're both using the same 51820 port so what I should have done was change the port on our container but what I do instead is I just go ahead and switch my port forwarding to our proxmox server rather than my original wireguard server I also messed up and forgot to set up any sort of Dynamic DNS or anything for wireguard so it just uses my public IP which is dynamic and is going to change so I'll be setting up something in the second part of this video for Dynamic DNS so that we can connect to our wireguard server using a domain name rather than just a public IP address get back on my phone I'm gonna restart this tunnel there we go we see a data received a data sent latest handshake and now I've already actually try to go to 192.168.1.32 which is our true Nas I am actually able to access junaz over my cellular connection right now I could even type in a roost what was that I hate typing on phones and then I'm going to blur this out super secure password and we're in we can actually see true Nas is not like phones but we can actually see I'm on cellular right now I can you know I can prove it but on my wire guard VPN our wireguard VPN is working I can access anything on my home network from my phone all right well I think for now that's about it we have it's this video has been going on way too long I'm gonna have to do a lot of editing but we have trunas up and running in a VM and we also have Debian with pertainer and wireguard so we can actually access this server from or any server on our home network from anywhere which is pretty cool so yeah back to much more better produced and scripted Colton to finish off this video [Music] hopefully you enjoyed this video and maybe even learned something from it if you're wanting to check out the second video in this series make sure to get subscribed so you don't miss out also if you want to help support the things I do here on the hardware Haven Channel make sure to give this video a like and maybe even check out my patreon thanks again to nordpass for sponsoring this video and don't forget to click the link down in the description to get an exclusive nordpass deal plus four additional amounts for free that's about it for this one though so as always thank you so much for watching stay curious and I really hope to see you in the next one [Music] thank you

Channel: Hardware Haven

Views: 888,135

Keywords: build a home server, home lab, home server, home server tutorial, homelab, homelab setup, homelab tutorial, how do i build a home server, how to setup truenas scale vm, how to setup wireguard, lenovo server, linux, linux server, old pc server, portainer, proxmox, proxmox getting started, proxmox guide, proxmox tutorial, proxmox used for, proxmox ve, proxmox virtual environment tutorial, truenas, truenas scale, used pc server, wireguard, wireguard portainer, wireguard proxmox

Id: _sfddZHhOj4

Length: 54min 28sec (3268 seconds)

Published: Mon Nov 07 2022