|
|
| Line 1: |
Line 1: |
| === Document Scope ===
| | [[File:Screen Shot 2023-04-18 at 10.16.13 PM-min 2.png|left|frameless|810x810px]] |
| To describe rational, choices and purpose in technology choice in use at KzooMakers today. This document is originally authored by JonK, but may involve future author(s).
| |
| {| class="wikitable"
| |
| |+
| |
| !Technology
| |
| !Rational/Background/Role
| |
| !Why I selected this
| |
| |- | |
| |PVE (Proxmox Virtual Environment) | |
| |Proxmox Virtual Environment (Proxmox VE) is a complete open-source server virtualization management solution that leverages a combination of KVM (Kernel-based Virtual Machine) and LXC (Linux Containers) technologies to offer virtualization capabilities. Here are a few reasons why Proxmox VE is favored over KVM, Xen, and VMware vSphere: | |
|
| |
|
| # Easy to use: Proxmox VE has a user-friendly web-based interface that makes it easy to manage virtual machines, containers, storage, and networking.
| |
| # Comprehensive features: Proxmox VE offers a comprehensive set of features, including high availability, live migration, backups, and templates, making it a complete solution for server virtualization.
| |
| # Open-source: Proxmox VE is completely open-source, which means it can be customized and modified to suit specific needs without any licensing costs.
| |
|
| |
|
| Proxmox VE is based on top of the Debian operating system and uses a combination of KVM and LXC hypervisors to provide virtualization capabilities. Proxmox VE's tech stack includes the following components:
| |
|
| |
|
| # Linux Kernel: Proxmox VE is based on the Linux kernel and uses KVM and LXC hypervisors for virtualization.
| |
| # QEMU: Proxmox VE uses QEMU (Quick Emulator) as the virtual machine emulator.
| |
| # LXC: Proxmox VE uses Linux Containers (LXC) as the container technology.
| |
| # Web-based Interface: Proxmox VE's web-based interface is built using HTML, CSS, and JavaScript.
| |
| # RESTful API: Proxmox VE offers a RESTful API that allows developers to automate and integrate with other systems.
| |
| # Corosync: Proxmox VE uses Corosync, an open-source cluster engine, for high availability and cluster management.
| |
| # PHP: Proxmox VE's web-based interface is written in PHP.
| |
|
| |
|
| In summary, Proxmox VE is an open-source server virtualization management solution based on Debian that uses KVM and LXC hypervisors to offer virtualization capabilities. Its tech stack includes the Linux kernel, QEMU, LXC, a web-based interface, a RESTful API, Corosync, and PHP.
| |
| |KzooMakers is looking for a virtualization solution that is user-friendly and easy to manage, without requiring extensive command-line interaction. While I have experience with KVM, Xen, and OpenStack, these platforms can be complex and require a dedicated team to manage effectively. Instead, this organization is using Proxmox, which is a front-end interface for QEMU, a powerful virtualization tool.
| |
| Proxmox is built on Debian, which I have deep experience with and trust. It provides a web interface that is user-friendly and secure, allowing administrators to manage virtual machines and containers without the need for extensive CLI interaction. The built-in VNC client allows for easy access to virtual machines, making it simple to monitor and manage them.
| |
|
| |
|
| One of the key benefits of Proxmox is its ability to support LXC containers, which offer better performance than running QEMU images. LXC is a lightweight virtualization technology that enables containers to share the host system's kernel, allowing for faster boot times and reduced overhead. This makes it an attractive option for organizations looking to optimize their virtualization environment.
| |
|
| |
|
| Overall, Proxmox is a powerful and user-friendly virtualization solution that is well-suited to the needs of the organization. Its integration with LXC containers provides a performance boost, while its web interface makes it easy to manage virtual machines and containers without requiring extensive CLI knowledge.
| | == Location == |
| | ''<span style="font-size: 24px;">1102 E Michigan Ave,<br>Kalamazoo, MI<br>49048</span>''' |
|
| |
|
| I've used it for a few years personally, it's free (unlike Vsphere and ESXI) so yeah.
| | ([https://goo.gl/maps/ppBnNoTSgWHGJk3L9/ Google Map Location]) |
| |-
| |
| |Docker
| |
| |Docker is a platform for building, shipping, and running applications in containers. It allows developers to create and deploy applications quickly and easily, with a consistent environment across different systems.
| |
| A container is a lightweight, standalone executable package that includes everything needed to run an application, including code, runtime, system tools, libraries, and settings. Containers allow applications to run in isolated environments, without interfering with other applications or the host system.
| |
|
| |
|
| One of the main benefits of using Docker is that it enables developers to create a consistent environment for their applications, regardless of the underlying hardware or operating system. This means that developers can build their applications on their local machine, test them in a containerized environment, and then deploy them to any system that supports Docker.
| | === A Makerspace for Kalamazoo === |
|
| |
|
| Using Docker also makes it easier to scale applications, as containers can be easily replicated and distributed across multiple systems. This means that applications can be quickly and easily scaled up or down as demand changes.
| |
|
| |
|
| In addition, Docker provides a number of other benefits over traditional bare metal machines. For example, it allows for more efficient use of resources, as multiple containers can be run on a single host machine. It also enables faster deployment of applications, as containers can be quickly created and deployed without the need for complex setup and configuration.
| | KzooMakers is a Makerspace, also referred to as a Hackerspace, which is a workshop / laboratory and community of people who are interested in designing things, learning new stuff, and generally being creative! Makerspaces like ours have a set of community-owned tools to share involving elements of a machine shop, woodworking tools, lasercutting, 3d printing, electronics bench equipment, and other fabrication devices. We host classes and events to help encourage people to enjoy learning and creating. Many members typically join to work on individual projects while being able to ask others about their insight on a subject and use tools that otherwise would be out of reach to a typical hobbyist. It’s a great chance to meet other people who share these interests, and expand your own skills. |
|
| |
|
| Overall, Docker is a powerful tool for developers and system administrators that can help to streamline the development and deployment of applications, while also providing a more efficient and flexible approach to managing infrastructure.
| | === What Kzoomakers is === |
| |KzooMakers is using VMs using Ubuntu linux images. These VMs have Docker CE installed, which allows them to run containerized applications through the use of Docker Compose. By utilizing containerization, the organization can ensure that each application runs independently of the host system and can be easily moved between different environments. The applications that are currently containerized include the organization's Wiki, Fileservers, and VPN.
| |
| To ensure that the containerized applications start automatically when the VM boots, the organization uses a combination of Docker Compose and systemd startup scripts. Systemd is a system and service manager for Linux that provides a framework for the management of services and processes. By integrating Docker Compose with systemd startup scripts, the organization can automate the process of starting and managing the containerized applications. This approach not only simplifies the deployment process, but it also ensures that the applications are always available and running efficiently.
| |
| |-
| |
| |VPN (Pritunl)
| |
| |Pritunl VPN is an open-source virtual private network (VPN) solution that provides a secure and encrypted connection between devices over the internet. It is designed to be easy to use and deploy, making it a popular choice for both individuals and organizations.
| |
| Pritunl VPN uses the OpenVPN protocol, which is known for its strong security and flexibility. It also supports WireGuard, a newer and faster VPN protocol that has gained popularity in recent years. Pritunl VPN offers a range of features, including multi-factor authentication, user and group management, and support for multiple VPN gateways.
| |
|
| |
|
| There are several reasons why people might choose to use Pritunl VPN over other VPN solutions like OpenVPN or WireGuard. One of the main reasons is its ease of use and deployment. Pritunl VPN can be set up quickly and easily, making it an attractive option for individuals and organizations that want a simple yet secure VPN solution.
| | * A place for people to work on projects they're interested in - We provide a space for members to work on almost any project that interests them and provide the tools to help them do so. |
| | * A place to socialize with like-minded people - We have open evenings which also provide a social venue for members to meet up and discuss what they're working on. |
| | * A place to repair, improve or re-purpose things - We keep an extensive collection of tools that can be used to repair and hack equipment to make it last longer or be more useful and our members often help each other with repairs. |
| | * A group to share knowledge and experience - We can find an expert on almost anything technical (and a lot of other things) within our membership, and most of them are very willing to share and teach |
| | * A way to learn and teach new skills - Our members provide inductions and other training on most of our equipment, as well as workshops to demonstrate and teach new skills we don't have technicians etc |
| | * A place to work collaboratively on projects with friends - We provide a venue for groups of members to meet up and work on projects that would otherwise be hard to arrange. |
| | * You need to be a current paid up member to use makerspace resources this includes tools, internet and materials. |
|
| |
|
| Another reason is its support for multiple VPN protocols. Pritunl VPN supports both OpenVPN and WireGuard, which gives users the flexibility to choose the protocol that best suits their needs.
| | === Kzoomakers is not === |
|
| |
|
| Additionally, Pritunl VPN offers a range of security features that help to protect user data and ensure the privacy of online activities. These include multi-factor authentication, which adds an extra layer of security to the authentication process, and support for user and group management, which makes it easier to control access to the VPN.
| | * A pay-as-you-go workshop - Although we're very flexible on membership contributions and require no long-term commitments, we do expect that being a Kzoomakers member is an ongoing process of contributing to the makerspace. Contributing only when you want to make use of the makerspace facilities is discouraged. |
| | * A co-working space – whilst you may be able to sit down and do some work on a small scale you will very quickly find it is not suited to having meetings, conference calls etc the network may drop out, there will be noise and interruptions |
| | * A laser cutting/CNC machining/etc service - We do not provide commercial services to the public, and we have a shared machine that many members will want to use |
| | * A charity - Although we very much welcome donations and assistance, we are not a registered charity and are structured more like a social club. |
| | * A storage area - We have a small amount of space to store ongoing member projects and we're happy to have tools that are being regularly used, however we are very space limited and do not provide long-term storage. |
| | * A business incubator - We're happy to support local businesses where we can |
| | * A tool hire centre - Our tools are kept at the makerspace and are not loaned out to members. |
| | * The Repair Shop wanting to repair stuff are very welcome to become members and get full access to our facilities. If you join up, we may help you fix it, if someone is around and they have time but we won't fix it for you. |
| | * A source of free materials – You should bring your own materials if people have useable materials left over they can leave them for other member and other members should make a donation to the space to the value of the materials – it is one of the ways we support our selves |
| | * A waste disposal service – Because it does not fit in your bin at home does not mean the space will find it valuable or useful |
|
| |
|
| Overall, Pritunl VPN is a versatile and secure VPN solution that offers a range of features and benefits. Its ease of use and deployment, support for multiple VPN protocols, and strong security features make it a popular choice for both individuals and organizations.
| | == Other things == |
| |Pritunl is a web-based VPN management software that provides an easy-to-use frontend to manage OpenVPN for small organizations. OpenVPN is a popular open-source VPN software that creates secure point-to-point connections between remote users and an organization's private network. Pritunl simplifies the configuration and management of OpenVPN, making it easier for small organizations to set up and use VPN connections.
| |
| One of the advantages of Pritunl is its ease of use. It is designed to be user-friendly and simple to install and configure, even for users without much technical expertise. The web-based interface allows administrators to manage the VPN from anywhere, using a browser. Pritunl also provides an intuitive interface for configuring default routes and removing 0.0.0.0/0, which are common tasks when setting up a VPN.
| |
|
| |
|
| Pritunl is also flexible and scalable. It can be deployed on a virtual machine (VM) on the organization's network and can handle multiple users and multiple VPN connections. Pritunl also supports multi-factor authentication, which adds an extra layer of security to the VPN connection. Additionally, Pritunl provides detailed logs and monitoring tools, allowing administrators to track usage and troubleshoot issues.
| | === Guides and Rules === |
| | * [[Rules]] - Know the rules! |
| | * [[Guides]] - Find out how things work and how to safely get involved. |
| | * [[Faceplant]] - Common mistakes. Don't inadvertently destroy our equipment! |
|
| |
|
| Overall, Pritunl is a great choice for small organizations that need an easy-to-use VPN management solution. Its user-friendly interface and flexible deployment options make it a popular choice for organizations that need to provide secure remote access to their network resources.
| | === Core Material === |
| |-
| | * [[Library]] - Useful reading material. Update this when you borrow, return or contribute books. |
| |Nginx web Proxy
| | * [[Maintenance]] - The space doesn't improve itself. Know how you should be helping. |
| |Using Nginx as a central point of entry for incoming traffic has several advantages when hosting multiple websites and domains on a single IP, split across multiple virtual machines. One significant advantage is that it acts as a reverse proxy, which can distribute incoming requests to different VMs based on the domain name or URL path. This way, it can direct traffic to the correct website or application, making it an efficient solution for hosting multiple websites on a single server.
| | * [[Suppliers]] - In the local area and online |
| Another advantage of using Nginx as a central point of entry is that it can provide a layer of security, acting as a firewall and filtering out malicious requests. Additionally, Nginx allows for the configuration of SSL/TLS encryption, ensuring that all data transmitted between the server and client is secure.
| | * [[Equipment]] - Incomplete list of the stuff we have and its status. |
| | | * [[Pledges]] - Does the space lack something you want to use? See if others will combine efforts to get it. |
| One significant benefit of using Nginx is that it logs all incoming requests and errors in the access.log and error.log files. This way, you can easily audit and monitor all incoming traffic to all websites and virtual hosts in a single location, simplifying troubleshooting and security auditing.
| | * [[Consumables]], [[Wishlist]] - We try stock cheap little things for convenience. Donate or restock to help maintain. |
| | |
| Nginx is often preferred over Apache as a reverse proxy because it's designed to handle a large number of concurrent connections efficiently. Nginx has a smaller memory footprint than Apache and can handle more requests per second. Additionally, Nginx is known for its ability to handle static files and has excellent support for SSL/TLS encryption.
| |
| | |
| In summary, using Nginx as a central point of entry for incoming traffic offers several advantages, including efficient distribution of incoming requests, improved security, and easy auditing of all incoming traffic. Moreover, it provides better performance and scalability than other web servers, making it an excellent choice for hosting multiple websites on a single server.
| |
| |It's great, lets us use our single IP address in infinite ways.
| |
| |-
| |
| |MediaWiki
| |
| |MediaWiki is a free and open-source wiki software that is used to create and manage collaborative websites. It was originally developed for Wikipedia, the world's largest online encyclopedia, but has since been used for a variety of other projects.
| |
| MediaWiki is written in PHP and uses a database to store content. It allows users to create and edit pages using a simple markup language, and provides features such as version control, access control, and page history. The software is highly customizable, with a wide range of extensions and templates available to add new features or change the appearance of the site.
| |
| | |
| One of the key features of MediaWiki is its ability to support collaborative editing, allowing multiple users to edit the same page simultaneously. This makes it well-suited to projects that require collaboration and community input, such as wikis, knowledge bases, and documentation sites.
| |
| | |
| Overall, MediaWiki is a powerful and flexible platform for creating and managing collaborative websites. Its open-source nature and large community of contributors make it a popular choice for a wide range of projects, from small personal wikis to large-scale enterprise knowledge bases.
| |
| |MediaWiki is a widely used and popular wiki software that has gained its prominence due to its ease of customization and vast community support. It is an open-source platform that offers a wide range of plugins and examples, making it an ideal choice for creating and managing collaborative websites. MediaWiki is written in PHP, a popular server-side scripting language, and offers a wide range of customization options for developers to adapt the software to their specific needs.
| |
| One of the primary benefits of using MediaWiki is its extensive support community, which provides ample resources, including plugins, templates, and examples, to help users create and manage wikis effectively. Moreover, the software's open-source nature allows for continuous development and innovation, enabling users to leverage new features and improvements as they are released.
| |
| | |
| MediaWiki is written in PHP, which provides both advantages and disadvantages. While PHP is a widely used and popular language, it is often criticized for its performance and security issues. Nevertheless, the software is well-designed and optimized for PHP, providing a stable and reliable platform for wiki creation and management.
| |
| | |
| Overall, MediaWiki is an excellent choice for organizations and individuals looking to create collaborative websites. Its large and supportive community, customization options, and wide range of features make it a popular choice for managing knowledge bases, wikis, and other collaborative content.
| |
| |-
| |
| |File Browse
| |
| |https://github.com/filebrowser/filebrowser<nowiki/>filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files. It allows the creation of multiple users and each user can have its own directory. It can be used as a standalone app.
| |
| |Firstly, the reason for selecting the chosen interface is its similarity to Trotec Ruby interface or a drag-and-drop interface that is extremely user-friendly, compared to a complex FTP service or other systems that may pose difficulties for users to learn. The chosen interface offers a seamless and intuitive user experience that is expected to enhance the user adoption and efficiency.
| |
| Secondly, the interface also boasts granular role-based access control (RBAC) and can be utilized to manage file uploads across various organizational activities. The RBAC feature allows for specific permissions and restrictions to be assigned to different users, thereby ensuring that sensitive data and files are only accessible to authorized personnel. Additionally, the interface can render images, edit files, and manage file paths, making it a versatile tool for various organizational needs. It also includes built-in file-sharing features that allow external parties to access files within the KzooMakers organization.
| |
| | |
| Lastly, it is worth noting that the chosen interface is open source, implying that it is freely available to the public for use, modification, and distribution. The open-source nature of the interface enables the KzooMakers organization to benefit from a vibrant community of developers who continuously improve the platform and fix bugs. This ensures that the interface remains relevant, reliable, and efficient over time, reducing the need for costly and time-consuming custom development.
| |
| |-
| |
| |LetsEncrypt
| |
| |Let's Encrypt is a non-profit organization that provides free SSL certificates for websites to enable secure HTTPS encryption. SSL certificates are digital certificates that ensure that the data exchanged between a website and a user is encrypted and secure.
| |
| Certbot is a popular tool used to obtain and install Let's Encrypt SSL certificates on Ubuntu-based systems. It simplifies the process of obtaining and installing SSL certificates, making it accessible even for those who are not familiar with the technical details of SSL certificates.
| |
| | |
| Using Let's Encrypt and Certbot to enable HTTPS encryption for your website is free, as Let's Encrypt is supported by sponsors and donations. It's also easy to use, as Certbot automates the process and provides an interactive wizard that guides you through the installation process.
| |
| | |
| By enabling HTTPS encryption on your website, you can protect your users' sensitive information from being intercepted by hackers or eavesdroppers. This is particularly important for websites that handle personal or financial information, such as e-commerce sites or online banking platforms.
| |
| |Easiest way since we can terminate 80/443 on our network through portforwarding and can run certbot on our proxy server.
| |
| |-
| |
| |YDNS.io
| |
| |
| |
| |What we are using for DNS, there are many dynamic dns providers but this seems to support the amount of domains we have and the script was easy to write.
| |
| The script is on the PVE (Proxmox Virtual Environment) hypervisor, since if that goes down; that's like the captain of the ship isn't it?
| |
| |}
| |
