Overview

Complete guide to set up a secure, automated server environment.

• Virtualize multiple servers through Proxmox
• Automatic server setup using Ansible
• Manage users using OAuth with LDAP and passkey logins
• Host public sites through Cloudflare
• Serve private sites through custom DNS via Tailscale and NextDNS

Guide

Follow these steps to set up your server environment.

1. Set variables like your server name, first username, and application secrets
2. Install a Proxmox hypervisor and configure it for Tailscale and SSL
3. Create a Linux VM in Proxmox and configure it for Ansible
4. Use Ansible to configure the Linux VM and its Docker containers
5. Set up Cloudflare tunnels and DNS for public sites
6. Shield private sites with Tailscale and NextDNS

Further documentation

• Email covers how Postfix and Dovecot create a local email server
• Pocket ID provides automatic login to sites using OAuth and LLDAP
• Network share instructions for backups and file sharing
• Gitea needs a runner registration token
• Caddy uses a custom image for Cloudflare DNS
• Ports lists all ports numbers used in this setup

Services used

• Ansible
• Caddy Cloudflare DNS
• Calibre
• Cloudflare
• Debian
• Docker
• Dozzle
• Gitea
• Grafana
• Jellyfin
• Lemmy
• LLDAP
• Loki
• Mastodon
• Miniflux
• NextDNS
• Pocket ID
• Prometheus
• Proxmox
• Starbase 80
• Tailscale
• Tinyauth