René Welches

TECH NOTES TO MYSELF

Real IPs for k3s: MetalLB, VLANs, and Why I Had to Buy a Switch

A k3s LoadBalancer turned into a network rebuild — managed switch, VLANs, OPNsense, and MetalLB in L2 mode

How I gave my Proxmox k3s cluster a real LoadBalancer with MetalLB — and why getting there meant buying a managed switch, segmenting the network into VLANs, and working around the limits of Google Nest WiFi.

Posted by Rene Welches on Friday, June 12, 2026
Last Modified on Sunday, June 14, 2026

Homelab IaC: Terraform + Ansible for Proxmox LXC

Because clicking through the Proxmox UI twice is already too many times

How I went from Proxmox community scripts to a full Terraform + Ansible IaC setup for managing LXC containers, with MinIO as a self-hosted Terraform state backend.

Posted by Rene Welches on Monday, April 20, 2026

Running Debian 13 in UTM on Apple Silicon

Native ARM64 virtualization with a Debian netinstall ISO — no emulation required

Step-by-step guide to creating a Debian 13 (Trixie) ARM64 virtual machine in UTM on an Apple Silicon Mac using the Virtualize mode for near-native performance.

Posted by Rene Welches on Thursday, February 19, 2026

Running Your Own Root CA for the Homelab

What started as a GitHub README turned into a proper blog post

How to create a self-signed Root CA for your homelab, sign server certificates, and trust them on macOS and Linux — including the git gotcha that the macOS Keychain won't tell you about.

Posted by Rene Welches on Wednesday, February 18, 2026
Last Modified on Thursday, February 19, 2026

Upgrading My 'Frankenstein-cluster': MOREFINE M8 Replaces the MINIX

A newer, faster node for $120 net after selling the old one

I picked up a MOREFINE M8 mini PC (Intel N150, 16GB DDR4, 1TB NVMe) for $219.99 and sold my old MINIX NEO J50C-4 Plus on eBay for $100, netting a solid upgrade for just $120.

Posted by Rene Welches on Tuesday, February 17, 2026
Last Modified on Wednesday, April 8, 2026

Using Vagrant with QEMU on macOS - or not

Lightweight VM provisioning on Apple Silicon with cloud-init support

Learn how to set up Vagrant with QEMU on macOS using Homebrew. Explore two provisioning approaches: shell scripts and cloud-init, along with the advantages and limitations of this setup.

Posted by Rene Welches on Thursday, January 29, 2026

Fixing Twingate DNS Resolution with AdGuard Home

Moving connectors to separate hosts fixed my DNS resolution issues

How to fix Twingate DNS resolution issues when using the Home Assistant connector with AdGuard Home by moving connectors to separate Proxmox hosts.

Posted by Rene Welches on Thursday, January 29, 2026

Creating a Debian Cloud Image Template for Proxmox

Build reusable VM templates with cloud-init support

Step-by-step guide to creating a Debian generic cloud image template in Proxmox. Learn how to download, configure, and convert cloud images into reusable VM templates with cloud-init support.

Posted by Rene Welches on Friday, January 23, 2026
Last Modified on Tuesday, February 17, 2026

Automating Docker Container Deployment on Proxmox with Terraform

Using SSH Agent authentication to provision Docker containers in LXC containers - and why Ansible is next

Learn how to use Terraform with SSH agent authentication to automatically deploy Docker containers in Proxmox LXC environments. Includes practical examples and discusses why Ansible is better suited for configuration management.

Posted by Rene Welches on Tuesday, January 13, 2026
Last Modified on Thursday, January 29, 2026

Adding a Disk to Proxmox node: LVM Integration Guide

Extend your Proxmox storage with LVM thin provisioning

Complete guide to adding a disk to a Proxmox node with existing storage. Learn how to integrate the disk into the LVM 'pve' volume group and extend the thin pool for transparent storage expansion.

Posted by Rene Welches on Thursday, January 8, 2026
Last Modified on Thursday, January 29, 2026