FOSS geek, privacy advocate, digital archivist, cypherpunk, gamer
Desktop / Gaming
| MACHINE | System76 Thelio Major (r4) |
| CPU | AMD Ryzen 7 7700X (8 cores, 16 threads) @ 5.6 GHz |
| GPU | NVIDIA GeForce RTX 4090 (discrete), 24 GB with 16384 CUDA Cores |
| RAM | 64 GB Dual Channel DDR5 (4x16 GB), 4800 MHz |
| NVME 0 | 1 TB PCIe Gen4, Read: 7000 MB/s, Write: 5100 MB/s |
| NVME 1 | 2 TB PCIe Gen4, Read: 7000 MB/s, Write: 5100 MB/s |
| NETWORKING | 2.5 GB/s Ethernet, Built-in Intel WiFi 6E + Bluetooth 5.3 |
| OS | CachyOS (KDE Plasma) |
NAS: LAN / Tailnet
NAS is powered down until 2026-10-01
| MACHINE | System76 Meerkat (meer7) |
| CPU | Intel Ultra 7 155H (22 cores) @ 4.80 GHz |
| GPU | Intel Arc Graphics (Meteor Lake-P) |
| RAM | 64 GB Dual Channel DDR4 SODIMMs @ 3200 MHz |
| NVME | 500 GB PCIe NVMe Gen4 |
| NETWORKING | 2.5 GB/s Ethernet, Built-in Intel WiFi 6E + Bluetooth 5.3 |
| OS | Debian (stable) |
In addition to the internal hard drive, I have a NAS enclosure that contains 8x20 TB Enterprise HDDs. The NAS enclosure I use is Syba 8-Bay, Hot Swappable 2.5" 3.5" SATA Non RAID External USB 3.0 Enclosure.
The NAS runs the following services:
- IPFS
- qBittorrent: seeding torrents from FOSS Torrents, DDOS Secrets, and others.
- Jellyfin
-
tailscale funnelto serve my digital archive collection on the public internet through Tailscale. -
zfs set sharenfsfor sharing my digital archive collection over NFS to my public-facing web server. The public-facing web server hosts a copyparty instance with public read-only access to my digital archive collection. - Wayback combined with a few scripts as part of a weekly cronjob to archive select RSS feeds.
- wikiteam3, which I run manually every so often to dump wikis and upload them to the Internet Archive.
- I have a ~170 TB ZFS pool, with separate ZFS datasets for various categories of data.
- Webmin
moonshadow: public-facing
| MACHINE | Orange Pi 5+ |
| CPU | RK3588 (8 cores) @ 2.40 GHz: A76 (4 cores), A55 (4 cores) |
| GPU | ARM Mali-G610 |
| RAM | 16 GB LPDDR4 |
| EMMC | 256 GB |
| NETWORKING | 2xPCIe 2.5 GB/s LAN (RTL8125BG) |
| OS | Armbian (Ubuntu 26.04) |
- public-facing web server
- main website, blog, Gists, Techne
- Linkding
- Bluesky PDS
- Gemini protocol capsule
- GoToSocial
- Webmin
- copyparty
Since this is public-facing with port-forwarding from my router, I have this machine cordoned off from the rest of my homelab / LAN. It cannot access any other machine on my LAN and Tailnet. I access this machine physically or over SSH from my desktop and laptop workstations.
Example Firewalld block zone used on each device on my LAN / Tailnet
| block (active) | |
| target: | DROP |
| ingress-priority: | 0 |
| egress-priority: | 0 |
| icmp-block-inversion: | no |
| interfaces: | |
| sources: | All IP addresses of moonshadow |
| services: | |
| ports: | |
| protocols: | |
| forward: | yes |
| masquerade: | no |
| forward-ports: | |
| source-ports: | |
| icmp-blocks: | |
| rich-rules: |
overseer: LAN / Tailnet
| MACHINE | Orange Pi 5+ |
| CPU | RK3588 (8 cores) @ 2.40 GHz: A76 (4 cores), A55 (4 cores) |
| GPU | ARM Mali-G610 |
| RAM | 16 GB LPDDR4 |
| EMMC | 256 GB |
| NETWORKING | 2xPCIe 2.5 GB/s LAN (RTL8125BG) |
| OS | Armbian (Debian 13) |
I use this machine for homelab monitoring and some other services:
- Grafana
- Prometheus
- Prometheus exporter for Tapo TP-Link P110 smartplugs
- Blocky ad-blocking DNS proxy
- Unbound recursive DNS resolver
- Uptime Kuma
- Webmin
This site is intentionally simple to improve accessibility.