Backup and configuration files for my home network infrastructure, including DNS, log aggregation, monitoring, and other network services.

Setup

Passwords labeled CHANGEME must be changed manually in the following files: - Pihole remove.env - NFACCTD nfacctd.conf - Grafana remove.env - Grafana datasources.yml - postges/inidb/01-pmacct-create-db.pgsql - postgre remove.env For files named remove.env change the name so it is just .env

On monitor server

1. Run bootstrap-network.sh
2. Run bootstrap-mkcert.sh a. run mkcert -CAROOT b. copy rootCA.pem and add it to your user machine (what ever pc you use normally)
3. Run docker compose for Vector , Pihole , Unbound , Caddy , & PMACCT
4. set up logrotate

On observe server

1. Run bootstrap-network.sh
2. Run docker compose on Loki , Grafana , Postgre
3. Configure LogRotate
4. Sign into database in grafana
5. set up cronjob to clear database in /observability/postgres/postgreScripts/deleteoldPmacctDb.sh (instructions in file)

On router

1. Install OpenWRT (or other opensource router like DD-WRT or ASUS-Merlin)
2. Configure static ips for monitor (192.168.1.14) and observer (192.168.1.16) server
3. Install & Configure Softflowd for netflow to point at monitor server pmacct udp port 2055
4. Configure router to export logs to monitor server vector udp port 5140

On User PC

1. Add cert from mkcert to your system