The NFS Mount That Hangs Your Whole Proxmox Host When the NAS Blinks
Why a single NFS mount with default options can freeze pct commands and container management across your whole Proxmox node when the NAS drops offline.
$ ls ./posts
Posts
Proxmox Firewall Precedence: Why a VM-Level Allow Rule Still Gets Dropped at the Datacenter Level
How Proxmox's Datacenter, Node, and VM firewall layers actually stack, and why an allow rule on a guest can still get silently dropped.
The MTU Mismatch That Makes SSH Work Over WireGuard But Breaks Everything Else
Why a WireGuard tunnel can pass SSH and ping fine while web pages and file transfers hang, and how to fix it by getting the MTU right.
Why Your Proxmox VM's Disk Keeps Growing on Thin Storage Even After You Delete Files Inside It
Deleting files inside a VM doesn't shrink its thin-provisioned image on the host. Here's why, and how to wire up discard/TRIM so it actually does.
Proxmox Backup Server: Why Pruning Old Backups Doesn't Free Any Disk Space
Prune jobs on Proxmox Backup Server remove backup references, not the underlying data. Here's why your datastore keeps filling up and how garbage collection actually works.
Wildcard Certs on Internal-Only Hostnames: Why DNS-01 Is the Only Real Option
How to get valid, trusted HTTPS certificates for LAN-only homelab services using the ACME DNS-01 challenge, without exposing anything to the internet.
pmxcfs and the Backup Blind Spot Hiding in /etc/pve
Proxmox stores its config as a SQLite database wearing a filesystem costume, and vzdump doesn't touch it. Here's what that means for disaster recovery.
Split-Horizon DNS: Why Your Reverse Proxy Setup Needs Two Different Answers for the Same Hostname
How to make service.example.com resolve to a different address inside your LAN than it does on the public internet, and why skipping this causes broken NAT hairpinning and cert mismatches.
The Duplicate Machine ID Hiding Inside Every VM You Clone From a Template
Cloning a Proxmox VM template can leave every child VM sharing the same /etc/machine-id and SSH host keys. Here's why that happens and how to fix it.
systemd-resolved Owns Port 53 Before Pi-hole Ever Gets a Chance
Why Pi-hole or AdGuard Home fails to bind port 53 on a fresh Debian/Ubuntu host, and the difference between disabling the stub listener and actually freeing the port.
The LVM-Thin Pool That Fills Up Silently and Takes Every VM With It
How Proxmox's default LVM-thin storage overcommits disk space, why fstrim matters more than you think, and how to stop a full pool from corrupting VMs.
The VM Clock That's a Few Minutes Off After Every Snapshot Rollback
Why restoring a Proxmox VM snapshot leaves the guest clock drifted, and why that quietly breaks TLS and TOTP auth until NTP catches up.
Passing an iGPU Into an LXC for Jellyfin Hardware Transcoding
How to share an Intel iGPU with an unprivileged Proxmox LXC for Jellyfin/Plex, and the render-group GID trap that breaks it.
Docker Inside an Unprivileged LXC: The Nesting Flags and Storage Driver Gotchas
Running Docker inside a Proxmox LXC instead of a VM saves RAM, but the nesting flags and overlay storage driver will bite you if you skip the details.
Your Backup Job Says 'Success.' That Doesn't Mean the Data Is Restorable.
A backup that reports success can still be silently useless. Here's how to build a restore test you actually run, using restic as the example.
Your UPS Is Plugged In, But Proxmox Has No Idea: Wiring Up NUT for Real Shutdowns
A UPS that isn't talking to your hypervisor just delays the crash. How to set up NUT on Proxmox so hosts and guests actually shut down before the battery dies.
Why Your Two-Node Proxmox Cluster Keeps Losing Quorum (and What a QDevice Actually Fixes)
Two-node Proxmox clusters lose quorum on reboot or network blips because of basic vote math. A QDevice fixes it without buying a third full node.
Proxmox Ate All My RAM: Understanding ZFS ARC Before You Blame a VM
Why `free -h` on a ZFS-based Proxmox host looks alarming, and how to find and cap the ARC before you start killing VMs to 'free up memory.'
The Stale Search-Domain Bug That Silently Breaks DNS in Fresh LXC Containers
A dead resolver from a Tailscale experiment months ago kept leaking into brand-new containers, breaking DNS resolution in ways that look like an app bug. Here's how it propagates and the two ways to catch it.
Passing a USB Serial or Webcam Device Into an Unprivileged Proxmox LXC
Group membership doesn't save you here — unprivileged LXC UID remapping means the container sees your bind-mounted device as nobody:nogroup. What actually grants access, and the two config lines that do it.
ip neigh show Lies: Always arping Before You Assign a Static LAN IP
ip neighbor show only reflects hosts that have talked recently. An absent ARP entry does not mean an IP is free — here's why that matters and the one-line check that actually proves it.
Fixing UID/GID Permission Hell When Bind-Mounting Host Storage Into Unprivileged LXC
Why files bind-mounted into an unprivileged Proxmox LXC show up as nobody:nogroup, and how to fix it properly with subuid/subgid mapping instead of going privileged.