Nö, nix Vodafone, Vereinigte Stadtwerke Media, Vodafone kommt uns nicht ins Haus. Und ja, eigene IPv4 ohne CGNAT, die ist theoretisch nicht statisch, hat sich aber anscheinend noch nie geändert. Eine Fritzbox 7590 AX war für eine Einmalzahlung dabei, günstiger als regulärer Marktpreis, ohne Anbietermodifikationen an der Firmware, lediglich die Credentials waren voreingestellt. Und bisher hatten wir keine signifikante Downtime, der letzte Reconnect des Routers war Mitte Mai, aber das war wegen Firmwareupdate, nicht Connection-Loss.

DSL? Or Cable?

I’ve been using Keycloak for multiple years now, it has some complexity, because it supports about everything OIDC or SAML offer. I used Authentik before, but ran into limitations with its OIDC token mappers and found its Python codebase to be harder to extend than Keycloak with its properly typed Java API

I could do that, wouldn’t lose a bit, but I hesitate anyways because downloading a few TB over a 300 Mbit/s Internet connection isn’t fun at all and takes a shitload of time

Yeah, for most things, a premade dashboard exists, and if it isn’t fully to your liking, just customize it. Also for more professionally maintained metrics exporters like the node-exporter, there’s usually an official dashboard. But learning PromQL before relying on premade stuff is probably a good idea, so you know how to adapt them to your needs

I mean, I got the whole set of default dashboards, some for networking and one each for backups (k8up) and Postgres (CloudNativePG), but I don’t look at them often, usually only if something’s wrong. I also have logs available via Grafana, but I don’t have any dashboards for that, I just query what I need. If I ever have enough time and motivation, some things I’d put on a kind of overview dashboard would be in addition to your list:

• zpool health (scrub status, IO etc.)
• list of crashing pods
• list of warnings from FluxCD (e.g. application upgrade failures or invalid manifests)
• list of failing persistent volumes