Ebook Syafi - Edit Bab

Tajuk Bab

Urutan

Jenis

Kandungan HTML

<h1 id="bab-11-projek-homelab-popular-benda-best-yang-boleh-anda-buat">Bab 11: Projek Homelab Popular — Benda Best Yang Boleh Anda Buat!</h1>
<figure><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 860 500" width="860" height="500">
 <defs>
 <linearGradient id="pp-bg" x1="0%" y1="0%" x2="100%" y2="100%">
 <stop offset="0%" style="stop-color:#f8fafc"/>
 <stop offset="100%" style="stop-color:#f5f3ff"/>
 </linearGradient>
 <filter id="pp-shadow">
 <feDropShadow dx="0" dy="8" stdDeviation="10" flood-color="#0f172a" flood-opacity="0.12"/>
 </filter>
 </defs>
 <rect width="860" height="500" rx="18" fill="url(#pp-bg)"/>
 <text x="430" y="36" font-family="Arial, Helvetica, sans-serif" font-size="20" font-weight="bold" fill="#1e293b" text-anchor="middle">Matriks Projek Homelab Popular</text>
 <text x="430" y="58" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#64748b" text-anchor="middle">Pilih projek mengikut kategori penggunaan dan impak pembelajaran</text>
 <g filter="url(#pp-shadow)">
 <rect x="55" y="96" width="230" height="120" rx="16" fill="#2563eb"/>
 <text x="170" y="126" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Media dan Kandungan</text>
 <text x="170" y="149" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#dbeafe" text-anchor="middle">Jellyfin</text>
 <text x="170" y="167" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#dbeafe" text-anchor="middle">Kavita / Calibre-Web</text>
 <text x="170" y="185" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#dbeafe" text-anchor="middle">Immich untuk gambar keluarga</text>
 </g>
 <g filter="url(#pp-shadow)">
 <rect x="315" y="96" width="230" height="120" rx="16" fill="#0f766e"/>
 <text x="430" y="126" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Produktiviti</text>
 <text x="430" y="149" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ccfbf1" text-anchor="middle">Nextcloud</text>
 <text x="430" y="167" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ccfbf1" text-anchor="middle">BookStack / Wiki.js</text>
 <text x="430" y="185" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ccfbf1" text-anchor="middle">Gitea untuk repositori sendiri</text>
 </g>
 <g filter="url(#pp-shadow)">
 <rect x="575" y="96" width="230" height="120" rx="16" fill="#7c3aed"/>
 <text x="690" y="126" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Rangkaian dan Utiliti</text>
 <text x="690" y="149" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ede9fe" text-anchor="middle">Pi-hole + Unbound</text>
 <text x="690" y="167" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ede9fe" text-anchor="middle">Smokeping / Grafana</text>
 <text x="690" y="185" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ede9fe" text-anchor="middle">Vaultwarden</text>
 </g>
 <g filter="url(#pp-shadow)">
 <rect x="150" y="260" width="250" height="120" rx="16" fill="#ea580c"/>
 <text x="275" y="290" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Rumah Pintar</text>
 <text x="275" y="313" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ffedd5" text-anchor="middle">Home Assistant</text>
 <text x="275" y="331" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ffedd5" text-anchor="middle">Integrasi sensor, WiFi, Zigbee</text>
 <text x="275" y="349" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#ffedd5" text-anchor="middle">Automasi notifikasi dan tindakan</text>
 </g>
 <g filter="url(#pp-shadow)">
 <rect x="460" y="260" width="250" height="120" rx="16" fill="#dc2626"/>
 <text x="585" y="290" font-family="Arial, Helvetica, sans-serif" font-size="16" font-weight="bold" fill="#ffffff" text-anchor="middle">Foto dan Sandaran</text>
 <text x="585" y="313" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#fee2e2" text-anchor="middle">Immich, backup berkala, versioning</text>
 <text x="585" y="331" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#fee2e2" text-anchor="middle">Sesuai untuk keluarga dan self-hosting</text>
 <text x="585" y="349" font-family="Arial, Helvetica, sans-serif" font-size="11" fill="#fee2e2" text-anchor="middle">Belajar storage, DB, dan proxy</text>
 </g>
</svg>
<figcaption>Matriks projek homelab popular</figcaption></figure>
Sekarang kita sampai bahagian paling seronok! Anda dah siapkan infrastruktur, dah faham Docker, dah setup rangkaian — jadi sekarang masa untuk pasang service yang betul-betul berguna dalam hidup anda. Ini antara bahagian favourite saya sebab anda akan nampak homelab anda “hidup” dan jadi sesuatu yang anda guna setiap hari.
Apa yang anda akan belajar: - Pilih projek homelab yang benar-benar berguna untuk diri sendiri - Tahu urutan service mana yang paling sesuai dipasang dahulu - Deploy service tanpa menjadikan homelab terlalu kompleks
<blockquote>
Nota Beginner: Jangan cuba pasang semua projek dalam satu hujung minggu. Homelab yang baik berkembang sedikit demi sedikit. Cuba satu projek dulu, pastikan stabil, baru tambah yang seterusnya. Tak perlu buat semua sekaligus!
</blockquote>
<h3 id="laluan-paling-mudah-untuk-beginner">Laluan Paling Mudah untuk Beginner</h3>
<ul>
<li>Pilih maksimum dua projek untuk fasa pertama</li>
<li>Pilih service yang segera berguna seperti Pi-hole, Vaultwarden, atau Jellyfin</li>
<li>Selepas satu service stabil, baru tambah service kedua</li>
</ul>
<h2 id="projek-1-pelayan-media-jellyfin">Projek 1: Pelayan Media — Jellyfin</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni">Apa benda ni?</h3>
Jellyfin adalah pelayan media sumber terbuka. Bayangkan Netflix, tapi anda yang kontrol semua kandungan. Koleksi filem, rancangan TV, dan muzik anda boleh distream dari mana-mana peranti — telefon, TV, laptop, semuanya.
<h3 id="kenapa-anda-nak-guna">Kenapa anda nak guna?</h3>
Saya guna Jellyfin hampir setiap hari. Tak perlu lagi cari USB drive atau copy fail ke telefon. Semua media anda ada di satu tempat, boleh akses dari mana-mana. Dan yang best — tiada yuran langganan bulanan!
<h3 id="cara-setup">Cara setup</h3>
<div class="sourceCode" id="cb1"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb1-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb1-2" aria-hidden="true" tabindex="-1"></a> jellyfin:
<a href="#cb1-3" aria-hidden="true" tabindex="-1"></a> image: jellyfin/jellyfin:latest
<a href="#cb1-4" aria-hidden="true" tabindex="-1"></a> container_name: jellyfin
<a href="#cb1-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb1-6" aria-hidden="true" tabindex="-1"></a> - "8096:8096"
<a href="#cb1-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb1-8" aria-hidden="true" tabindex="-1"></a> - ./jellyfin/config:/config
<a href="#cb1-9" aria-hidden="true" tabindex="-1"></a> - ./jellyfin/cache:/cache
<a href="#cb1-10" aria-hidden="true" tabindex="-1"></a> - /mnt/media/movies:/data/movies:ro
<a href="#cb1-11" aria-hidden="true" tabindex="-1"></a> - /mnt/media/tvshows:/data/tvshows:ro
<a href="#cb1-12" aria-hidden="true" tabindex="-1"></a> - /mnt/media/music:/data/music:ro
<a href="#cb1-13" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb1-14" aria-hidden="true" tabindex="-1"></a> - TZ=Asia/Kuala_Lumpur
<a href="#cb1-15" aria-hidden="true" tabindex="-1"></a> devices:
<a href="#cb1-16" aria-hidden="true" tabindex="-1"></a> - /dev/dri:/dev/dri # Untuk transcoding perkakasan
<a href="#cb1-17" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="konfigurasi">Konfigurasi</h3>
<ol type="1">
<li>Akses <code>http://pelayan:8096</code></li>
<li>Cipta akaun admin</li>
<li>Tambah pustaka media:
<ul>
<li>Filem → <code>/data/movies</code></li>
<li>Rancangan TV → <code>/data/tvshows</code></li>
<li>Muzik → <code>/data/music</code></li>
</ul></li>
<li>Konfigurasi transcoding perkakasan (Intel Quick Sync / VAAPI)</li>
<li>Pasang aplikasi Jellyfin di telefon, TV, atau pelayar</li>
</ol>
<blockquote>
Nota Beginner: Kalau tak ada GPU untuk transcoding, jangan risau. Jellyfin boleh jalan tanpa itu — cuma transcoding akan guna CPU, yang mungkin lebih perlahan sikit.
</blockquote>
<h2 id="projek-2-storan-awan-peribadi-nextcloud">Projek 2: Storan Awan Peribadi — Nextcloud</h2>
Tahap kesukaran: Sederhana
<h3 id="apa-benda-ni-1">Apa benda ni?</h3>
Nextcloud adalah alternatif sumber terbuka kepada Google Drive dan Dropbox. Anda boleh simpan fail, sync merentas peranti, malah boleh edit dokumen secara online — semua di pelayan anda sendiri.
<h3 id="kenapa-anda-nak-guna-1">Kenapa anda nak guna?</h3>
Data anda, di pelayan anda. Tiada siapa yang scan fail anda untuk iklan. Tiada had storan melainkan saiz hard drive anda. Saya guna ni setiap hari untuk sync dokumen antara laptop dan telefon.
<h3 id="apa-yang-boleh-buat">Apa yang boleh buat:</h3>
<ul>
<li>Penyimpanan dan perkongsian fail</li>
<li>Sinkronisasi merentas peranti</li>
<li>Penyuntingan dokumen dalam talian (OnlyOffice/Collabora)</li>
<li>Kalendar dan kenalan</li>
<li>Perbualan video (Nextcloud Talk)</li>
</ul>
<h3 id="cara-setup-1">Cara setup</h3>
<div class="sourceCode" id="cb2"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb2-2" aria-hidden="true" tabindex="-1"></a> nextcloud-db:
<a href="#cb2-3" aria-hidden="true" tabindex="-1"></a> image: mariadb:latest
<a href="#cb2-4" aria-hidden="true" tabindex="-1"></a> container_name: nextcloud-db
<a href="#cb2-5" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb2-6" aria-hidden="true" tabindex="-1"></a> MYSQL_ROOT_PASSWORD: rootpass123
<a href="#cb2-7" aria-hidden="true" tabindex="-1"></a> MYSQL_DATABASE: nextcloud
<a href="#cb2-8" aria-hidden="true" tabindex="-1"></a> MYSQL_USER: nextcloud
<a href="#cb2-9" aria-hidden="true" tabindex="-1"></a> MYSQL_PASSWORD: dbpass123
<a href="#cb2-10" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb2-11" aria-hidden="true" tabindex="-1"></a> - ./nextcloud/db:/var/lib/mysql
<a href="#cb2-12" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb2-13" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-14" aria-hidden="true" tabindex="-1"></a> nextcloud-redis:
<a href="#cb2-15" aria-hidden="true" tabindex="-1"></a> image: redis:alpine
<a href="#cb2-16" aria-hidden="true" tabindex="-1"></a> container_name: nextcloud-redis
<a href="#cb2-17" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb2-18" aria-hidden="true" tabindex="-1"></a>
<a href="#cb2-19" aria-hidden="true" tabindex="-1"></a> nextcloud:
<a href="#cb2-20" aria-hidden="true" tabindex="-1"></a> image: nextcloud:latest
<a href="#cb2-21" aria-hidden="true" tabindex="-1"></a> container_name: nextcloud
<a href="#cb2-22" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb2-23" aria-hidden="true" tabindex="-1"></a> - "8080:80"
<a href="#cb2-24" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb2-25" aria-hidden="true" tabindex="-1"></a> MYSQL_HOST: nextcloud-db
<a href="#cb2-26" aria-hidden="true" tabindex="-1"></a> MYSQL_DATABASE: nextcloud
<a href="#cb2-27" aria-hidden="true" tabindex="-1"></a> MYSQL_USER: nextcloud
<a href="#cb2-28" aria-hidden="true" tabindex="-1"></a> MYSQL_PASSWORD: dbpass123
<a href="#cb2-29" aria-hidden="true" tabindex="-1"></a> REDIS_HOST: nextcloud-redis
<a href="#cb2-30" aria-hidden="true" tabindex="-1"></a> NEXTCLOUD_TRUSTED_DOMAINS: "cloud.lab.local"
<a href="#cb2-31" aria-hidden="true" tabindex="-1"></a> OVERWRITEPROTOCOL: https
<a href="#cb2-32" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb2-33" aria-hidden="true" tabindex="-1"></a> - ./nextcloud/html:/var/www/html
<a href="#cb2-34" aria-hidden="true" tabindex="-1"></a> - /mnt/data/nextcloud:/var/www/html/data
<a href="#cb2-35" aria-hidden="true" tabindex="-1"></a> depends_on:
<a href="#cb2-36" aria-hidden="true" tabindex="-1"></a> - nextcloud-db
<a href="#cb2-37" aria-hidden="true" tabindex="-1"></a> - nextcloud-redis
<a href="#cb2-38" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="pengoptimuman">Pengoptimuman</h3>
<div class="sourceCode" id="cb3"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a># Masuk ke kontena untuk konfigurasi tambahan
<a href="#cb3-2" aria-hidden="true" tabindex="-1"></a>docker exec -it nextcloud bash
<a href="#cb3-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb3-4" aria-hidden="true" tabindex="-1"></a># Aktifkan cron untuk tugasan latar belakang
<a href="#cb3-5" aria-hidden="true" tabindex="-1"></a># Di Nextcloud → Settings → Basic settings → Background jobs → Cron
<a href="#cb3-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb3-7" aria-hidden="true" tabindex="-1"></a># Tambah cron job pada hos
<a href="#cb3-8" aria-hidden="true" tabindex="-1"></a>echo "*/5 * * * * docker exec -u www-data nextcloud php cron.php" | \
<a href="#cb3-9" aria-hidden="true" tabindex="-1"></a> sudo tee /etc/cron.d/nextcloud-cron</code></pre></div>
<blockquote>
Nota Beginner: Nextcloud nampak macam banyak container (database, Redis, app), tapi jangan risau. Docker Compose uruskan semua tu untuk anda. Cuma <code>docker compose up -d</code> dan semuanya jalan.
</blockquote>
<h2 id="projek-3-automasi-rumah-home-assistant">Projek 3: Automasi Rumah — Home Assistant</h2>
Tahap kesukaran: Sederhana
<h3 id="apa-benda-ni-2">Apa benda ni?</h3>
Home Assistant adalah platform automasi rumah sumber terbuka yang paling popular di dunia. Anda boleh kawal lampu, kipas, sensor suhu, kamera — semua dari satu dashboard.
<h3 id="kenapa-anda-nak-guna-2">Kenapa anda nak guna?</h3>
Bayangkan: lampu rumah auto tutup bila tiada orang, notifikasi masuk telefon kalau suhu pelayan terlalu tinggi, atau pintu garaj auto buka bila kereta anda sampai. Ini antara projek favourite saya sebab ia buat rumah rasa “hidup”.
<h3 id="cara-setup-2">Cara setup</h3>
<div class="sourceCode" id="cb4"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb4-2" aria-hidden="true" tabindex="-1"></a> homeassistant:
<a href="#cb4-3" aria-hidden="true" tabindex="-1"></a> image: ghcr.io/home-assistant/home-assistant:stable
<a href="#cb4-4" aria-hidden="true" tabindex="-1"></a> container_name: homeassistant
<a href="#cb4-5" aria-hidden="true" tabindex="-1"></a> network_mode: host
<a href="#cb4-6" aria-hidden="true" tabindex="-1"></a> privileged: true
<a href="#cb4-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb4-8" aria-hidden="true" tabindex="-1"></a> - ./homeassistant/config:/config
<a href="#cb4-9" aria-hidden="true" tabindex="-1"></a> - /etc/localtime:/etc/localtime:ro
<a href="#cb4-10" aria-hidden="true" tabindex="-1"></a> - /run/dbus:/run/dbus:ro
<a href="#cb4-11" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="integrasi-popular">Integrasi Popular</h3>
<ul>
<li>Zigbee — Menggunakan Zigbee2MQTT + penyesuai USB</li>
<li>WiFi — Tuya, Shelly, TP-Link Kasa</li>
<li>Sensor — Suhu, kelembapan, gerakan</li>
<li>Kamera — RTSP, Frigate untuk AI</li>
<li>Pemberitahuan — Telegram, Push notification</li>
</ul>
<h3 id="contoh-automasi">Contoh Automasi</h3>
<div class="sourceCode" id="cb5"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb5-1" aria-hidden="true" tabindex="-1"></a># automations.yaml
<a href="#cb5-2" aria-hidden="true" tabindex="-1"></a>- alias: "Tutup lampu apabila tiada sesiapa di rumah"
<a href="#cb5-3" aria-hidden="true" tabindex="-1"></a> trigger:
<a href="#cb5-4" aria-hidden="true" tabindex="-1"></a> platform: state
<a href="#cb5-5" aria-hidden="true" tabindex="-1"></a> entity_id: group.all_persons
<a href="#cb5-6" aria-hidden="true" tabindex="-1"></a> to: "not_home"
<a href="#cb5-7" aria-hidden="true" tabindex="-1"></a> for:
<a href="#cb5-8" aria-hidden="true" tabindex="-1"></a> minutes: 10
<a href="#cb5-9" aria-hidden="true" tabindex="-1"></a> action:
<a href="#cb5-10" aria-hidden="true" tabindex="-1"></a> service: light.turn_off
<a href="#cb5-11" aria-hidden="true" tabindex="-1"></a> target:
<a href="#cb5-12" aria-hidden="true" tabindex="-1"></a> entity_id: all
<a href="#cb5-13" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-14" aria-hidden="true" tabindex="-1"></a>- alias: "Pemberitahuan suhu tinggi pelayan"
<a href="#cb5-15" aria-hidden="true" tabindex="-1"></a> trigger:
<a href="#cb5-16" aria-hidden="true" tabindex="-1"></a> platform: numeric_state
<a href="#cb5-17" aria-hidden="true" tabindex="-1"></a> entity_id: sensor.proxmox_cpu_temperature
<a href="#cb5-18" aria-hidden="true" tabindex="-1"></a> above: 80
<a href="#cb5-19" aria-hidden="true" tabindex="-1"></a> action:
<a href="#cb5-20" aria-hidden="true" tabindex="-1"></a> service: notify.telegram
<a href="#cb5-21" aria-hidden="true" tabindex="-1"></a> data:
<a href="#cb5-22" aria-hidden="true" tabindex="-1"></a> message: "Amaran: Suhu CPU pelayan melebihi 80°C!"</code></pre></div>
<h2 id="projek-4-git-hosting-gitea">Projek 4: Git Hosting — Gitea</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni-3">Apa benda ni?</h3>
Gitea adalah pelayan Git ringan yang serupa GitHub, tapi jalan di pelayan anda sendiri. Tempat anda simpan semua kod dan konfigurasi homelab.
<h3 id="kenapa-anda-nak-guna-3">Kenapa anda nak guna?</h3>
Setiap konfigurasi homelab anda — docker-compose files, dotfiles, scripts — semua patut disimpan dalam version control. Kalau anda accidentally delete sesuatu, senang nak revert. Plus, ini skill yang sangat berguna untuk kerjaya IT!
<h3 id="cara-setup-3">Cara setup</h3>
<div class="sourceCode" id="cb6"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb6-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb6-2" aria-hidden="true" tabindex="-1"></a> gitea:
<a href="#cb6-3" aria-hidden="true" tabindex="-1"></a> image: gitea/gitea:latest
<a href="#cb6-4" aria-hidden="true" tabindex="-1"></a> container_name: gitea
<a href="#cb6-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb6-6" aria-hidden="true" tabindex="-1"></a> - "3000:3000"
<a href="#cb6-7" aria-hidden="true" tabindex="-1"></a> - "2222:22"
<a href="#cb6-8" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb6-9" aria-hidden="true" tabindex="-1"></a> USER_UID: 1000
<a href="#cb6-10" aria-hidden="true" tabindex="-1"></a> USER_GID: 1000
<a href="#cb6-11" aria-hidden="true" tabindex="-1"></a> GITEA__database__DB_TYPE: sqlite3
<a href="#cb6-12" aria-hidden="true" tabindex="-1"></a> GITEA__server__ROOT_URL: https://git.lab.local
<a href="#cb6-13" aria-hidden="true" tabindex="-1"></a> GITEA__server__SSH_PORT: 2222
<a href="#cb6-14" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb6-15" aria-hidden="true" tabindex="-1"></a> - ./gitea/data:/data
<a href="#cb6-16" aria-hidden="true" tabindex="-1"></a> - /etc/timezone:/etc/timezone:ro
<a href="#cb6-17" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="apa-boleh-buat-dengan-gitea">Apa boleh buat dengan Gitea:</h3>
<ul>
<li>Cipta repositori untuk konfigurasi homelab (dotfiles, docker-compose, dll.)</li>
<li>Gunakan Gitea Actions untuk CI/CD</li>
<li>Mirror repositori GitHub penting</li>
</ul>
<h2 id="projek-5-penyekat-iklan-pi-hole-unbound">Projek 5: Penyekat Iklan — Pi-hole + Unbound</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni-4">Apa benda ni?</h3>
Pi-hole sekat iklan di peringkat DNS untuk keseluruhan rangkaian anda. Bermaksud SEMUA peranti di rumah — telefon, laptop, smart TV — semuanya iklan hilang, tanpa perlu install apa-apa app.
<h3 id="kenapa-anda-nak-guna-4">Kenapa anda nak guna?</h3>
Ini mungkin projek homelab yang paling “wow” untuk sekeluarga. Lepas setup Pi-hole, isteri/suami/anak-anak akan perasan YouTube ads berkurangan, laman web load lebih laju. Saya rasa ini projek pertama yang patut semua orang buat.
<h3 id="cara-setup-4">Cara setup</h3>
<div class="sourceCode" id="cb7"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb7-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb7-2" aria-hidden="true" tabindex="-1"></a> pihole:
<a href="#cb7-3" aria-hidden="true" tabindex="-1"></a> image: pihole/pihole:latest
<a href="#cb7-4" aria-hidden="true" tabindex="-1"></a> container_name: pihole
<a href="#cb7-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb7-6" aria-hidden="true" tabindex="-1"></a> - "53:53/tcp"
<a href="#cb7-7" aria-hidden="true" tabindex="-1"></a> - "53:53/udp"
<a href="#cb7-8" aria-hidden="true" tabindex="-1"></a> - "8081:80"
<a href="#cb7-9" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb7-10" aria-hidden="true" tabindex="-1"></a> TZ: Asia/Kuala_Lumpur
<a href="#cb7-11" aria-hidden="true" tabindex="-1"></a> WEBPASSWORD: kata_laluan_admin
<a href="#cb7-12" aria-hidden="true" tabindex="-1"></a> PIHOLE_DNS_: "10.0.0.2#5335"
<a href="#cb7-13" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb7-14" aria-hidden="true" tabindex="-1"></a> - ./pihole/etc-pihole:/etc/pihole
<a href="#cb7-15" aria-hidden="true" tabindex="-1"></a> - ./pihole/etc-dnsmasq.d:/etc/dnsmasq.d
<a href="#cb7-16" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb7-17" aria-hidden="true" tabindex="-1"></a>
<a href="#cb7-18" aria-hidden="true" tabindex="-1"></a> unbound:
<a href="#cb7-19" aria-hidden="true" tabindex="-1"></a> image: mvance/unbound:latest
<a href="#cb7-20" aria-hidden="true" tabindex="-1"></a> container_name: unbound
<a href="#cb7-21" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb7-22" aria-hidden="true" tabindex="-1"></a> - "5335:53/tcp"
<a href="#cb7-23" aria-hidden="true" tabindex="-1"></a> - "5335:53/udp"
<a href="#cb7-24" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb7-25" aria-hidden="true" tabindex="-1"></a> - ./unbound:/opt/unbound/etc/unbound
<a href="#cb7-26" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="apa-yang-anda-dapat">Apa yang anda dapat:</h3>
<ul>
<li>Iklan disekat di semua peranti dalam rangkaian</li>
<li>DNS yang lebih selamat dan peribadi</li>
<li>Laman web dimuat lebih pantas</li>
<li>Kurang penggunaan data</li>
</ul>
<blockquote>
Nota Beginner: Unbound tu optional. Kalau nak senang, guna Pi-hole sahaja dulu. Unbound tambah lapisan privasi DNS, tapi boleh tambah kemudian.
</blockquote>
<h2 id="projek-6-pengurus-kata-laluan-vaultwarden">Projek 6: Pengurus Kata Laluan — Vaultwarden</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni-5">Apa benda ni?</h3>
Vaultwarden adalah pengurus kata laluan yang serasi dengan klien Bitwarden di semua platform. Simpan semua kata laluan anda dengan selamat di pelayan anda sendiri.
<h3 id="kenapa-anda-nak-guna-5">Kenapa anda nak guna?</h3>
Jujur, ini service yang saya rasa WAJIB ada. Tak perlu lagi ingat 50 kata laluan berbeza atau (jangan buat ni!) guna kata laluan yang sama untuk semua akaun. Vaultwarden sync antara telefon, laptop, dan tablet — semua encrypted.
<h3 id="cara-setup-5">Cara setup</h3>
<div class="sourceCode" id="cb8"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb8-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb8-2" aria-hidden="true" tabindex="-1"></a> vaultwarden:
<a href="#cb8-3" aria-hidden="true" tabindex="-1"></a> image: vaultwarden/server:latest
<a href="#cb8-4" aria-hidden="true" tabindex="-1"></a> container_name: vaultwarden
<a href="#cb8-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-6" aria-hidden="true" tabindex="-1"></a> - "8000:80"
<a href="#cb8-7" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-8" aria-hidden="true" tabindex="-1"></a> DOMAIN: https://vault.lab.local
<a href="#cb8-9" aria-hidden="true" tabindex="-1"></a> SIGNUPS_ALLOWED: "false"
<a href="#cb8-10" aria-hidden="true" tabindex="-1"></a> WEBSOCKET_ENABLED: "true"
<a href="#cb8-11" aria-hidden="true" tabindex="-1"></a> ADMIN_TOKEN: token_admin_selamat
<a href="#cb8-12" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-13" aria-hidden="true" tabindex="-1"></a> - ./vaultwarden/data:/data
<a href="#cb8-14" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<blockquote>
Nota Beginner: Pastikan anda backup data Vaultwarden secara berkala. Kalau hilang database ni, hilang semua kata laluan. Backup, backup, backup!
</blockquote>
<h2 id="projek-7-papan-pemuka-rangkaian">Projek 7: Papan Pemuka Rangkaian</h2>
Tahap kesukaran: Sederhana
<h3 id="grafana-prometheus-sudah-dibincangkan">Grafana + Prometheus (sudah dibincangkan)</h3>
Kalau anda dah ikut bab automasi, anda dah ada setup ni. Grafana bagi anda dashboard yang cantik untuk pantau semua service.
<h3 id="smokeping-pemantauan-kependaman">Smokeping — Pemantauan Kependaman</h3>
Nak tahu kalau internet anda “lagging”? Smokeping track kependaman rangkaian secara berterusan dan buat graf yang cantik.
<div class="sourceCode" id="cb9"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb9-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb9-2" aria-hidden="true" tabindex="-1"></a> smokeping:
<a href="#cb9-3" aria-hidden="true" tabindex="-1"></a> image: lscr.io/linuxserver/smokeping:latest
<a href="#cb9-4" aria-hidden="true" tabindex="-1"></a> container_name: smokeping
<a href="#cb9-5" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb9-6" aria-hidden="true" tabindex="-1"></a> PUID: 1000
<a href="#cb9-7" aria-hidden="true" tabindex="-1"></a> PGID: 1000
<a href="#cb9-8" aria-hidden="true" tabindex="-1"></a> TZ: Asia/Kuala_Lumpur
<a href="#cb9-9" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb9-10" aria-hidden="true" tabindex="-1"></a> - ./smokeping/config:/config
<a href="#cb9-11" aria-hidden="true" tabindex="-1"></a> - ./smokeping/data:/data
<a href="#cb9-12" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb9-13" aria-hidden="true" tabindex="-1"></a> - "8085:80"
<a href="#cb9-14" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h2 id="projek-8-pelayan-buku-kavita">Projek 8: Pelayan Buku — Kavita</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni-6">Apa benda ni?</h3>
Kavita macam Kindle library, tapi untuk koleksi ebook dan komik digital anda sendiri. Interface dia cantik, boleh baca terus dalam browser.
<h3 id="cara-setup-6">Cara setup</h3>
<div class="sourceCode" id="cb10"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb10-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb10-2" aria-hidden="true" tabindex="-1"></a> kavita:
<a href="#cb10-3" aria-hidden="true" tabindex="-1"></a> image: jvmilazz0/kavita:latest
<a href="#cb10-4" aria-hidden="true" tabindex="-1"></a> container_name: kavita
<a href="#cb10-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb10-6" aria-hidden="true" tabindex="-1"></a> - "5000:5000"
<a href="#cb10-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb10-8" aria-hidden="true" tabindex="-1"></a> - ./kavita/config:/kavita/config
<a href="#cb10-9" aria-hidden="true" tabindex="-1"></a> - /mnt/media/books:/books:ro
<a href="#cb10-10" aria-hidden="true" tabindex="-1"></a> - /mnt/media/manga:/manga:ro
<a href="#cb10-11" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h2 id="projek-9-immich-alternatif-google-photos">Projek 9: Immich — Alternatif Google Photos</h2>
Tahap kesukaran: Sederhana
<h3 id="apa-benda-ni-7">Apa benda ni?</h3>
Immich adalah platform pengurusan foto sumber terbuka yang sedang sangat aktif dibangunkan. Ia macam Google Photos — muat naik auto dari telefon, pengecaman wajah, carian pintar — tapi semua data kekal di pelayan anda.
<h3 id="kenapa-anda-nak-guna-6">Kenapa anda nak guna?</h3>
Google Photos dah mula had storan percuma. Dengan Immich, storan anda terhad kepada saiz hard drive sahaja. Dan yang paling penting — foto keluarga anda kekal di tangan anda, bukan di pelayan orang lain.
<h3 id="cara-setup-7">Cara setup</h3>
<div class="sourceCode" id="cb11"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb11-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb11-2" aria-hidden="true" tabindex="-1"></a> immich-server:
<a href="#cb11-3" aria-hidden="true" tabindex="-1"></a> image: ghcr.io/immich-app/immich-server:release
<a href="#cb11-4" aria-hidden="true" tabindex="-1"></a> container_name: immich-server
<a href="#cb11-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb11-6" aria-hidden="true" tabindex="-1"></a> - "2283:2283"
<a href="#cb11-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb11-8" aria-hidden="true" tabindex="-1"></a> - /mnt/data/photos:/usr/src/app/upload
<a href="#cb11-9" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb11-10" aria-hidden="true" tabindex="-1"></a> DB_HOSTNAME: immich-db
<a href="#cb11-11" aria-hidden="true" tabindex="-1"></a> DB_USERNAME: postgres
<a href="#cb11-12" aria-hidden="true" tabindex="-1"></a> DB_PASSWORD: postgres
<a href="#cb11-13" aria-hidden="true" tabindex="-1"></a> DB_DATABASE_NAME: immich
<a href="#cb11-14" aria-hidden="true" tabindex="-1"></a> REDIS_HOSTNAME: immich-redis
<a href="#cb11-15" aria-hidden="true" tabindex="-1"></a> depends_on:
<a href="#cb11-16" aria-hidden="true" tabindex="-1"></a> - immich-db
<a href="#cb11-17" aria-hidden="true" tabindex="-1"></a> - immich-redis
<a href="#cb11-18" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb11-19" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-20" aria-hidden="true" tabindex="-1"></a> immich-db:
<a href="#cb11-21" aria-hidden="true" tabindex="-1"></a> image: tensorchord/pgvecto-rs:pg14-v0.2.0
<a href="#cb11-22" aria-hidden="true" tabindex="-1"></a> container_name: immich-db
<a href="#cb11-23" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb11-24" aria-hidden="true" tabindex="-1"></a> POSTGRES_PASSWORD: postgres
<a href="#cb11-25" aria-hidden="true" tabindex="-1"></a> POSTGRES_USER: postgres
<a href="#cb11-26" aria-hidden="true" tabindex="-1"></a> POSTGRES_DB: immich
<a href="#cb11-27" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb11-28" aria-hidden="true" tabindex="-1"></a> - ./immich/db:/var/lib/postgresql/data
<a href="#cb11-29" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb11-30" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-31" aria-hidden="true" tabindex="-1"></a> immich-redis:
<a href="#cb11-32" aria-hidden="true" tabindex="-1"></a> image: redis:alpine
<a href="#cb11-33" aria-hidden="true" tabindex="-1"></a> container_name: immich-redis
<a href="#cb11-34" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="ciri-immich">Ciri Immich</h3>
<ul>
<li>Muat naik automatik dari telefon</li>
<li>Pengecaman wajah dan objek (AI)</li>
<li>Carian berdasarkan kandungan foto</li>
<li>Perkongsian album</li>
<li>Peta lokasi foto</li>
</ul>
<h2 id="projek-10-wiki-peribadi-bookstack">Projek 10: Wiki Peribadi — BookStack</h2>
Tahap kesukaran: Senang
<h3 id="apa-benda-ni-8">Apa benda ni?</h3>
BookStack adalah wiki peribadi untuk dokumentasikan semua benda berkaitan homelab anda. Fikir ia macam “buku nota digital” yang tersusun dan boleh dicari.
<h3 id="kenapa-anda-nak-guna-7">Kenapa anda nak guna?</h3>
Percaya saya — dalam masa beberapa bulan, anda akan lupa macam mana anda setup sesuatu. Wiki peribadi selamatkan anda berjam-jam troubleshooting. Saya refer wiki sendiri hampir setiap minggu.
<h3 id="cara-setup-8">Cara setup</h3>
<div class="sourceCode" id="cb12"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb12-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb12-2" aria-hidden="true" tabindex="-1"></a> bookstack:
<a href="#cb12-3" aria-hidden="true" tabindex="-1"></a> image: lscr.io/linuxserver/bookstack:latest
<a href="#cb12-4" aria-hidden="true" tabindex="-1"></a> container_name: bookstack
<a href="#cb12-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb12-6" aria-hidden="true" tabindex="-1"></a> - "6875:80"
<a href="#cb12-7" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb12-8" aria-hidden="true" tabindex="-1"></a> PUID: 1000
<a href="#cb12-9" aria-hidden="true" tabindex="-1"></a> PGID: 1000
<a href="#cb12-10" aria-hidden="true" tabindex="-1"></a> APP_URL: https://wiki.lab.local
<a href="#cb12-11" aria-hidden="true" tabindex="-1"></a> DB_HOST: bookstack-db
<a href="#cb12-12" aria-hidden="true" tabindex="-1"></a> DB_DATABASE: bookstack
<a href="#cb12-13" aria-hidden="true" tabindex="-1"></a> DB_USER: bookstack
<a href="#cb12-14" aria-hidden="true" tabindex="-1"></a> DB_PASS: bookstack123
<a href="#cb12-15" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb12-16" aria-hidden="true" tabindex="-1"></a> - ./bookstack/config:/config
<a href="#cb12-17" aria-hidden="true" tabindex="-1"></a> depends_on:
<a href="#cb12-18" aria-hidden="true" tabindex="-1"></a> - bookstack-db
<a href="#cb12-19" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb12-20" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-21" aria-hidden="true" tabindex="-1"></a> bookstack-db:
<a href="#cb12-22" aria-hidden="true" tabindex="-1"></a> image: mariadb:latest
<a href="#cb12-23" aria-hidden="true" tabindex="-1"></a> container_name: bookstack-db
<a href="#cb12-24" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb12-25" aria-hidden="true" tabindex="-1"></a> MYSQL_ROOT_PASSWORD: rootpass
<a href="#cb12-26" aria-hidden="true" tabindex="-1"></a> MYSQL_DATABASE: bookstack
<a href="#cb12-27" aria-hidden="true" tabindex="-1"></a> MYSQL_USER: bookstack
<a href="#cb12-28" aria-hidden="true" tabindex="-1"></a> MYSQL_PASSWORD: bookstack123
<a href="#cb12-29" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb12-30" aria-hidden="true" tabindex="-1"></a> - ./bookstack/db:/var/lib/mysql
<a href="#cb12-31" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<h3 id="apa-yang-perlu-didokumenkan">Apa yang perlu didokumenkan:</h3>
<ul>
<li>Topologi rangkaian dan skim IP</li>
<li>Kata laluan dan konfigurasi (di Vaultwarden)</li>
<li>Prosedur sandaran dan pemulihan</li>
<li>Langkah penyelesaian masalah</li>
<li>Perubahan konfigurasi yang dibuat</li>
</ul>
<hr />
<h2 id="ringkasan">Ringkasan</h2>
<table>
<thead>
<tr class="header">
<th>Projek</th>
<th>Fungsi</th>
<th>Kesukaran</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td>Jellyfin</td>
<td>Pelayan media</td>
<td>Senang</td>
</tr>
<tr class="even">
<td>Nextcloud</td>
<td>Storan awan</td>
<td>Sederhana</td>
</tr>
<tr class="odd">
<td>Home Assistant</td>
<td>Automasi rumah</td>
<td>Sederhana</td>
</tr>
<tr class="even">
<td>Gitea</td>
<td>Git hosting</td>
<td>Senang</td>
</tr>
<tr class="odd">
<td>Pi-hole</td>
<td>Penyekat iklan</td>
<td>Senang</td>
</tr>
<tr class="even">
<td>Vaultwarden</td>
<td>Kata laluan</td>
<td>Senang</td>
</tr>
<tr class="odd">
<td>Grafana</td>
<td>Pemantauan</td>
<td>Sederhana</td>
</tr>
<tr class="even">
<td>Kavita</td>
<td>Pelayan buku</td>
<td>Senang</td>
</tr>
<tr class="odd">
<td>Immich</td>
<td>Foto</td>
<td>Sederhana</td>
</tr>
<tr class="even">
<td>BookStack</td>
<td>Wiki</td>
<td>Senang</td>
</tr>
</tbody>
</table>
Semua projek ini boleh dijalankan menggunakan Docker Compose, menjadikan pemasangan dan pengurusan sangat mudah.
Anda tak perlu pasang semua 10 projek ni. Pilih yang paling relevan dengan kehidupan anda, mulakan dengan satu, dan kembangkan dari situ. Homelab terbaik bukan yang paling banyak service — tapi yang paling kerap digunakan. Selamat mencuba!

Batal