The first PVE host already ran domain controllers, ASR, and monitoring. The second was a fresh empty installation. On September 19, 2026, they became a cluster for unified management and manual migration. No HA resources were configured, and QDevice was still a plan.
The important decisions were which host created the cluster and how to demonstrate that the existing guests remained running throughout.
This deployment connected Windows AD → authentik → the Cloudflare dashboard. A domain user signed into authentik and launched Cloudflare from an application card. The last obstacle was the card’s URL: the ordinary dashboard homepage was a bookmark, not an entry point into this SSO flow.
The September 16, 2026 record uses authentik 2026.8.2, two writable DCs, and a cloud RODC. The user confirmed the complete dashboard login. Domains below are examples; no passwords or client secrets are included.
After power returned on August 14, 2026, both PVE domain controllers started, hostnames resolved, and some IPv4/IPv6 probes passed. Yet DC1’s latest attempt to pull Schema from DC2 showed error 8524.
Requesting DNS registration on DC2, restarting Netlogon, correcting remote command wrapping, and retrying the specific replication relationship restored it. When reviewing the record on September 15, the key correction was that recovery does not prove which original DNS record was missing.
windows_exporter supplies Windows CPU, memory, and disk metrics, while temperature, GPU power, and VRAM need a verified sensor source. On a Ryzen 5600H / RTX 3050 Ti laptop, I used two exporters and one Prometheus server.
OS metrics are based on windows_exporter 0.30.7; hardware comes from HardwareExporterWindows / LibreHardwareMonitor. The August deployment record was rechecked against endpoints on September 15. The configurations below are examples, not the complete live dashboard, and other hardware may expose different sensors.
There is no universal Linux fan-control command. Desktop boards usually expose PWM through hwmon, laptops use vendor interfaces, servers have BMC/IPMI policies, and some mini PCs leave all control inside the embedded controller (EC).
This article first chooses the safest control path, then shows how a noisy single-temperature PVE script became a multi-sensor controller with hysteresis, read-back verification, and automatic firmware fallback.
I had 234 legacy WMV/RM videos on a NAS: about 42.8GB and 78.5 hours in total. The goal was to create compatible MP4 copies without touching the source directory, while keeping quality, size, power use, and restart safety under control.
The final choice was h264_videotoolbox -q:v 50. On a representative 720p clip it ran roughly twice as fast as x264, produced a similar file size, and reduced the sustained CPU load and fan noise dramatically.
Hermes Agent's language model and speech recognition are independent pipelines. MiMo can continue to understand, reason, and answer, while a LAN ASR service converts recordings to text before MiMo sees them.
The first deployment used whisper.cpp + CT-Punc. After Paraformer and SenseVoice A/B testing, SenseVoice became the current Hermes backend, while Paraformer remains available for explicit terminology correction and rollback.
Synchronizing container directories alone is not a complete backup. Databases need consistent logical exports, while configuration, certificates, and attachments are good candidates for incremental rsync synchronization.
Run a baseline after buying a VPS before deciding whether it is suitable for hosting, proxying, storage, or production services. This index groups the most useful tools by test target.
For data safety, offline access, and integration with a local knowledge base, I needed to bulk-export Yuque notes to local Markdown. I ended up using yuque-dl to pull hundreds of documents plus images in one pass, and along the way contributed a "download all knowledge bases at once" feature back to the tool via a PR.
