Peira Labs
  • Start Here
  • Field Notes
  • Compare
  • Topics
  • Playbooks
  • Tools
  • Glossary
  • About
  • Start Here
  • Field Notes
  • Compare
  • Topics
  • Playbooks
  • Tools
  • Glossary
  • About
  • Search
  • Subscribe by email
  • RSS Feed

Copy · paste · run

The Script Drawer

Tested, copy-ready scripts for Linux, macOS, and Windows — the exact commands behind the field notes. Click to copy, paste to run.

83 SCRIPTS · 10 CATEGORIES · 60 TESTED ON THE LIVE LAB

SecurityNetworkingInfrastructureContainersAIKnowledge BaseToolsMonitoringStorageAutomation
Recently added
Bazarr Docker Compose (Subtitles for Radarr + Sonarr)Sep 6, 2026Jellyseerr Docker Compose (Requests for Radarr + Sonarr)Sep 6, 2026Lidarr Docker Compose (Music for the Arr Stack)Sep 6, 2026

Security · I

5 scripts
securityTested

Deploy Authentik with Docker Compose (Linux)

From empty Docker host to a running SSO server in one paste.

Linuxubuntu, debianbash
security

Read-only forced-command SSH reader for a Git vault

One SSH key that can read everything and change nothing.

Linuxdebian, ubuntu, opensusebash
security

Vault secret store + Git history scrub

Pointers instead of passwords — and the purge when one slips through.

Linuxdebian, ubuntu, opensusebash
securityTested

ClamAV Download Scan + Auto-Purge (Docker)

Catch the .exe pretending to be a movie before it catches you.

Linuxubuntu, debianyaml
securityTested

Block SSH brute-force with fail2ban (Linux)

Three failed guesses and the bot is talking to a wall.

Linuxubuntu, debian, fedora +3bash

Security · II

4 scripts
securityTested

Generate a self-signed TLS certificate (Linux / macOS / Windows)

Padlocks for services only your lab will ever see.

Multi-platformbash
securityTested

SSH Server Hardening (Linux)

Password logins are the unlocked window. Bolt it shut.

Linuxubuntu, debian, fedora +3bash
securityTested

Generate an SSH key pair (Linux / macOS / Windows)

One Ed25519 key pair, pushed to the server, on any OS.

Multi-platformbash
securityTested

UFW Firewall Baseline (Ubuntu / Debian)

Deny everything, allow what you meant — without locking yourself out.

Linuxubuntu, debian, raspbianbash

Networking · I

5 scripts
networking

Proxmox VE 9.2 SDN Fabric: Build + Verify

Declare a routed node network in the GUI, then prove FRR converged.

LinuxProxmox VE 9.2bash
networkingTested

Plex over Tailscale: Direct-Connection Prefs

Two API calls to make remote Plex direct, not relayed.

LinuxAny Plex Media Server hostbash
networkingTested

Homelab Network Health Check (Read-Only)

Five read-only checks for the network that swears it's fine.

LinuxopenSUSE Tumbleweedbash
networking

Verify VLAN Isolation from a Linux Host

A pass/fail ping audit that proves your VLANs actually isolate.

LinuxUbuntu 24.04, Debian 12bash
networkingTested

Flush the DNS cache (Linux / macOS / Windows)

When the name is right and the answer is stale, clear the cache.

Multi-platformbash

Networking · II

4 scripts
networkingTested

Set a static IP with netplan (Ubuntu / Debian)

A static IP with a dry-run, so a typo can't lock you out.

Linuxubuntu, debianbash
networkingTested

Install Tailscale on Linux

Your lab on every device in one command, no ports opened.

Linuxubuntu, debian, fedora +4bash
networkingTested

Install Tailscale on macOS

The Mac joins the tailnet — subnet routes and exit nodes included.

macOSbash
networkingTested

Install Tailscale on Windows

Windows joins the tailnet with winget and two clicks.

Windowspowershell

Infrastructure · I

7 scripts
infrastructure

Proxmox VE 9.2 Custom CPU Model for Cross-CPU Migration

Pick the newest CPU every node shares — and keep live migration working.

LinuxProxmox VE 9.2bash
infrastructureTested

Add a worker node to a k3s cluster (Linux)

Turn two boxes into one pool that schedules work across both.

Linuxubuntu, debianbash
infrastructureTested

Deploy k3s on a single node (Linux)

One curl command and you're running real Kubernetes.

Linuxubuntu, debianbash
infrastructure

Configure a Windows VirtIO VM on Proxmox (qm CLI)

Every qm flag for a paravirtualized Windows VM, in one place.

LinuxProxmox VE 8bash
infrastructure

Proxmox GPU passthrough preflight

Find the isolation problem before the VM refuses to start.

Linuxproxmoxbash
infrastructureTested

Make Proxmox Actually Email You: msmtp + Gmail Setup

Three of my four nodes were emailing a wall. Ten minutes of msmtp fixed that.

LinuxProxmox VE 9, Debian 13bash
infrastructureTested

Scratch container lifecycle: create, configure, destroy from code

Prove your infra code on a container born and destroyed in minutes.

LinuxDebian 13, Proxmox VE 9bash

Infrastructure · II

6 scripts
infrastructureTested

Install Proxmox Backup Server + Connect It to PVE

PBS installed, datastore made, and wired to PVE in one sitting.

Linuxproxmox, debianbash
infrastructureTested

Build a Proxmox Cloud-Init Template + Clone a VM

Turn one cloud image into every VM you'll ever clone.

Linuxproxmoxbash
infrastructureTested

Create a Proxmox VM from the CLI (q35 + OVMF + VirtIO)

The full VM wizard collapsed into a single qm line.

Linuxproxmoxbash
infrastructureTested

Install Jellyfin Media Server on Debian/Ubuntu

Free media server, official repo, first library in minutes.

Linuxubuntu, debianbash
infrastructureTested

Install Plex Media Server on Debian/Ubuntu

Plex from the official repo, claimed headless from the terminal.

Linuxubuntu, debianbash
infrastructureTested

Proxmox VE Post-Install Hardening

Free repos, no nag, sane defaults — the first ten minutes done right.

Linuxproxmox, debianbash

Containers · I

8 scripts
containers

Bazarr Docker Compose (Subtitles for Radarr + Sonarr)

Drop-in subtitles for the *arr stack, same media mount as the rest.

Linuxubuntu, debianyaml
containers

Jellyseerr Docker Compose (Requests for Radarr + Sonarr)

The household request page, in one compose service.

Linuxubuntu, debianyaml
containers

Lidarr Docker Compose (Music for the Arr Stack)

Sonarr's engine, pointed at your music library.

Linuxubuntu, debianyaml
containersTested

Check for Docker Image Updates Without Diun

Compare the digest you're running against the registry — one JSON, no Diun.

Linuxsh
containers

Prowlarr Indexer Setup (Apps, FlareSolverr, Sync + Test)

Set indexers up once in Prowlarr and let it sync the rest.

Linuxubuntu, debianbash
containersTested

Home Assistant Container on a NAS (docker-compose)

Host-net Home Assistant on the NAS, ready for Zigbee later.

LinuxAny NAS/Linux host with Docker + Composebash
containers

Back Up a Docker Compose Stack (Volumes + Recipe)

Every volume, the recipe, and the .env — tarred before you touch anything.

LinuxUbuntu 24.04, Debian 12bash
containersTested

Create a Proxmox LXC Container from the CLI

The whole container wizard as one pct command.

Linuxproxmox, debianbash

Containers · II

8 scripts
containersTested

Traefik + Let's Encrypt Reverse Proxy (Docker Compose)

Real HTTPS certificates that renew themselves, wired by labels.

Linuxubuntu, debianyaml
containersTested

Your First Docker Compose Stack (nginx hello-world)

Images, containers, ports, and volumes — learned from one tiny nginx file.

Multi-platformubuntu, debian, fedora +3yaml
containersTested

Homepage Dashboard — Docker Compose Install

Every service on one page instead of twelve bookmarked IPs.

Linuxubuntu, debian, fedora +1yaml
containersTested

Immich Photo Backup — Docker Compose Install

Your own Google Photos, minus Google.

Linuxubuntu, debian, fedora +1bash
containersTested

Uptime Kuma — Docker Compose Install

Know a service died before anyone in the house does.

Linuxubuntu, debian, fedora +1yaml
containersTested

Arr Stack Docker Compose (Prowlarr, Radarr, Sonarr + VPN)

The whole *arr pipeline in one file, with the VPN wired in from day one.

Linuxubuntu, debianyaml
containersTested

VPN-Shielded Torrent Stack (gluetun + qBittorrent)

Torrents that physically cannot leak past the VPN.

Linuxubuntu, debianyaml
containersTested

Install Docker + Docker Compose on Linux

Docker's official repo, the compose plugin, and your user in the group.

Linuxubuntu, debian, fedora +2bash

AI

4 scripts
aiTested

Karakeep With Local-AI Tagging (Ollama, No Cloud)

Bookmarks that tag themselves on your own hardware — no cloud keys.

LinuxDebian 12, Ubuntu 24.04bash
aiTested

Deploy Olla in Front of a Multi-Node Ollama Cluster

One endpoint, many Ollama nodes — load-balanced, failed-over, and monitored.

LinuxDebian 13, Ubuntu 24.04bash
aiTested

A Read-Only Homelab MCP Server (FastMCP)

Give an AI eyes on your homelab, with no hands.

LinuxDebian 13, Ubuntu 24.04bash
aiTested

Private Web Search for Open WebUI (SearXNG)

Native SearXNG under granian, plus the Open WebUI wiring that actually fires.

LinuxDebian 13, Debian 12bash

Knowledge Base

7 scripts
knowledge-base

A cited RAG endpoint over your Markdown wiki

Ask your wiki a question, get an answer with receipts.

Linuxdebian, ubuntu, opensusejavascript
knowledge-base

Begin/End skills: a revision-labeled cold start for AI agents

Agents that check the commit before they trust a single remembered fact.

Linuxdebian, ubuntu, opensusebash
knowledge-base

Build and query a local embeddings index for a Markdown vault

Semantic search over your notes without a single API bill.

Linuxdebian, ubuntu, opensusebash
knowledge-base

Canonical writer lock + validation gates

One writer at a time, and nothing commits until the audit says so.

Linuxdebian, ubuntu, opensusebash
knowledge-base

Generate a topic-map graph from Markdown frontmatter

Frontmatter in, brain map out — index pages and regions generated.

Linuxdebian, ubuntu, opensusebash
knowledge-base

Stand up a Git + Markdown knowledge vault

One canonical copy on an always-on host; your editor just mounts it.

Linuxdebian, ubuntu, opensusebash
knowledge-base

Publish a Markdown vault to Wiki.js with parity (delete-cascade)

Publish the vault to Wiki.js and prove the copy matches, page for page.

Linuxdebian, ubuntu, opensusebash

Tools

8 scripts
toolsTested

Install Helm and deploy your first chart (Linux)

Turn a complex Kubernetes deploy into a single command.

Linuxubuntu, debianbash
toolsTested

Audit a Media Library for Renamed-Wrong Files

ffprobe every file, sort by runtime, and the wrong matches float to the top.

LinuxDebian 12, Ubuntu 24.04bash
tools

Jellyfin Hardware Acceleration Setup (Intel QSV/VAAPI)

Pass the GPU in, enable QSV/VAAPI, prove it's on the GPU.

LinuxDebian 12, Ubuntu 24.04bash
toolsTested

Plex Transcoder Tuning for Weak CPUs (API)

Make a weak CPU look strong by never letting Plex transcode.

Linuxubuntu, debian, alpinebash
toolsTested

Check what's using a port (Linux / macOS / Windows)

Find the process squatting on your port — on any OS.

Multi-platformbash
toolsTested

Create a Ventoy USB drive on Linux

Flash the drive once; after that, ISOs are just files you copy.

Linuxubuntu, debian, fedora +2bash
toolsTested

Create a Ventoy USB drive on macOS

Ventoy from macOS: one install, then every ISO just boots.

macOSbash
toolsTested

Create a Ventoy USB drive on Windows

Ventoy from Windows: stop reflashing, start copying ISOs.

Windowspowershell

Monitoring

7 scripts
monitoringTested

Self-Host changedetection.io With ntfy Alerts

A tireless page-watcher that pings your phone only when something changes.

LinuxDebian 13, Debian 12bash
monitoringTested

SMART Disk-Health Trending (Nodes + NAS Bays)

Trend every disk's SMART in one dashboard — scraped nodes and pushed NAS bays.

LinuxDebian 12, Debian 13bash
monitoringTested

Homelab Service Health Check (Read-Only)

Five read-only checks for services that died quietly — or keep dying.

LinuxopenSUSE Tumbleweedbash
monitoring

Your First Prometheus Alert Rule

up == 0 — the one rule every lab should fire first.

Linuxbash
monitoring

Add a Prometheus Data Source to Grafana + Import a Dashboard

A fresh Grafana that wakes up already knowing your metrics.

Linuxbash
monitoringTested

NUT: One-UPS Network Shutdown (Server + Client)

One USB cable, one UPS, every machine shuts down clean.

Linuxdebian, ubuntu, proxmoxbash
monitoringTested

Node Exporter + pve-exporter for Proxmox Metrics

The two exporters that turn a Proxmox cluster into graphs.

Linuxproxmox, debianbash

Storage

7 scripts
storageTested

Deploy Paperless-ngx on a NAS (OCR Document Archive)

From empty Docker host to a searchable, OCR'd document archive.

LinuxDebian 12, Ubuntu 24.04bash
storage

PBS 4.2 S3 Datastore on Self-Hosted MinIO

Self-hosted object-storage backups: MinIO bucket + PBS 4.2 S3 datastore.

LinuxDebian 13, Ubuntu 24.04bash
storageTested

Prove Your Proxmox Backups Restore: A Safe Monthly Test

A backup you've never restored is a hope, not a guarantee.

Linuxproxmoxbash
storageTested

Proxmox Storage Health Check (Read-Only)

Five read-only checks that catch storage dying quietly.

LinuxProxmox VE 9bash
storageTested

Measure Your Proxmox Restore RTO (Honestly)

Your backups have a speed. This measures it before you need it.

Linuxproxmoxbash
storageTested

Samba + NFS File Server on Debian/Ubuntu (LXC or VM)

One box serving files to Windows, Linux, and your phone at once.

Linuxubuntu, debianbash
storageTested

Plex Default-Subtitle Sweep (Linux)

Strip the forced-subtitle flags that break Direct Play, losslessly.

Linuxubuntu, debian, alpinebash

Automation

3 scripts
automationTested

One Daily Email for Your Whole Homelab (Python + msmtp)

Every script drops a JSON file. One email at 8:30 reads them all.

LinuxProxmox VE 9, Debian 13bash
automationTested

Cluster drift detector: OpenTofu plan + Ansible check in one command

One command that asks the cluster: did anything change off the books?

LinuxDebian 13, Any distro with OpenTofu + Ansible installedbash
automationTested

Home Assistant OS VM on Proxmox (community-scripts helper)

HAOS in a proper VM with one command on the Proxmox shell.

Linuxproxmoxbash

No scripts found for this filter.

Categories

  1. Security · I
    1. Deploy Authentik with Docker Compose (Linux)
    2. Read-only forced-command SSH reader for a Git vault
    3. Vault secret store + Git history scrub
    4. ClamAV Download Scan + Auto-Purge (Docker)
    5. Block SSH brute-force with fail2ban (Linux)
  2. Security · II
    1. Generate a self-signed TLS certificate (Linux / macOS / Windows)
    2. SSH Server Hardening (Linux)
    3. Generate an SSH key pair (Linux / macOS / Windows)
    4. UFW Firewall Baseline (Ubuntu / Debian)
  3. Networking · I
    1. Proxmox VE 9.2 SDN Fabric: Build + Verify
    2. Plex over Tailscale: Direct-Connection Prefs
    3. Homelab Network Health Check (Read-Only)
    4. Verify VLAN Isolation from a Linux Host
    5. Flush the DNS cache (Linux / macOS / Windows)
  4. Networking · II
    1. Set a static IP with netplan (Ubuntu / Debian)
    2. Install Tailscale on Linux
    3. Install Tailscale on macOS
    4. Install Tailscale on Windows
  5. Infrastructure · I
    1. Proxmox VE 9.2 Custom CPU Model for Cross-CPU Migration
    2. Add a worker node to a k3s cluster (Linux)
    3. Deploy k3s on a single node (Linux)
    4. Configure a Windows VirtIO VM on Proxmox (qm CLI)
    5. Proxmox GPU passthrough preflight
    6. Make Proxmox Actually Email You: msmtp + Gmail Setup
    7. Scratch container lifecycle: create, configure, destroy from code
  6. Infrastructure · II
    1. Install Proxmox Backup Server + Connect It to PVE
    2. Build a Proxmox Cloud-Init Template + Clone a VM
    3. Create a Proxmox VM from the CLI (q35 + OVMF + VirtIO)
    4. Install Jellyfin Media Server on Debian/Ubuntu
    5. Install Plex Media Server on Debian/Ubuntu
    6. Proxmox VE Post-Install Hardening
  7. Containers · I
    1. Bazarr Docker Compose (Subtitles for Radarr + Sonarr)
    2. Jellyseerr Docker Compose (Requests for Radarr + Sonarr)
    3. Lidarr Docker Compose (Music for the Arr Stack)
    4. Check for Docker Image Updates Without Diun
    5. Prowlarr Indexer Setup (Apps, FlareSolverr, Sync + Test)
    6. Home Assistant Container on a NAS (docker-compose)
    7. Back Up a Docker Compose Stack (Volumes + Recipe)
    8. Create a Proxmox LXC Container from the CLI
  8. Containers · II
    1. Traefik + Let's Encrypt Reverse Proxy (Docker Compose)
    2. Your First Docker Compose Stack (nginx hello-world)
    3. Homepage Dashboard — Docker Compose Install
    4. Immich Photo Backup — Docker Compose Install
    5. Uptime Kuma — Docker Compose Install
    6. Arr Stack Docker Compose (Prowlarr, Radarr, Sonarr + VPN)
    7. VPN-Shielded Torrent Stack (gluetun + qBittorrent)
    8. Install Docker + Docker Compose on Linux
  9. AI
    1. Karakeep With Local-AI Tagging (Ollama, No Cloud)
    2. Deploy Olla in Front of a Multi-Node Ollama Cluster
    3. A Read-Only Homelab MCP Server (FastMCP)
    4. Private Web Search for Open WebUI (SearXNG)
  10. Knowledge Base
    1. A cited RAG endpoint over your Markdown wiki
    2. Begin/End skills: a revision-labeled cold start for AI agents
    3. Build and query a local embeddings index for a Markdown vault
    4. Canonical writer lock + validation gates
    5. Generate a topic-map graph from Markdown frontmatter
    6. Stand up a Git + Markdown knowledge vault
    7. Publish a Markdown vault to Wiki.js with parity (delete-cascade)
  11. Tools
    1. Install Helm and deploy your first chart (Linux)
    2. Audit a Media Library for Renamed-Wrong Files
    3. Jellyfin Hardware Acceleration Setup (Intel QSV/VAAPI)
    4. Plex Transcoder Tuning for Weak CPUs (API)
    5. Check what's using a port (Linux / macOS / Windows)
    6. Create a Ventoy USB drive on Linux
    7. Create a Ventoy USB drive on macOS
    8. Create a Ventoy USB drive on Windows
  12. Monitoring
    1. Self-Host changedetection.io With ntfy Alerts
    2. SMART Disk-Health Trending (Nodes + NAS Bays)
    3. Homelab Service Health Check (Read-Only)
    4. Your First Prometheus Alert Rule
    5. Add a Prometheus Data Source to Grafana + Import a Dashboard
    6. NUT: One-UPS Network Shutdown (Server + Client)
    7. Node Exporter + pve-exporter for Proxmox Metrics
  13. Storage
    1. Deploy Paperless-ngx on a NAS (OCR Document Archive)
    2. PBS 4.2 S3 Datastore on Self-Hosted MinIO
    3. Prove Your Proxmox Backups Restore: A Safe Monthly Test
    4. Proxmox Storage Health Check (Read-Only)
    5. Measure Your Proxmox Restore RTO (Honestly)
    6. Samba + NFS File Server on Debian/Ubuntu (LXC or VM)
    7. Plex Default-Subtitle Sweep (Linux)
  14. Automation
    1. One Daily Email for Your Whole Homelab (Python + msmtp)
    2. Cluster drift detector: OpenTofu plan + Ansible check in one command
    3. Home Assistant OS VM on Proxmox (community-scripts helper)
Peira Labs

Peira Labs (say PAY-rah) — homelab infrastructure, documented honestly.

Content

Start HereAll Field NotesPlaybooksTopicsGlossaryRSS Feed

Site

The LabAboutPrivacy Policy

Around the web

ServeTheHomePerfect Media Serverselfh.stAwesome Self-HostedTRaSH Guides

© 2026 Peira Labs. All rights reserved.

This site contains affiliate links. As an Amazon Associate I earn from qualifying purchases.