You can run it on a docker container on your main pc. It will only be accessible when your pc is on of course, but look up docker for windows. You could also run a Linux vm in virtual box and have the docker container run on it.

The whole stack start/stop is huge. It was my biggest issue. Looking forward to giving this a spin.

Securityonion is a great ids system. I used their distributed system, so I have 1 mini pc as a sensor and another as a manager/search. Works wonderful.

Graylog. Super easy to set up. Getting the grok and regex patterns sorted kind of sucks for getting fields to be pulled out unless you are good with that already.

Guacamole Apache is pretty awesome

You could set up quacamole Apache to manage the rdp connections. Through up an authentik instance for authentication to guacamole.

I don’t think it’s hardened so I would recommend vpn for access. I tested it out and if you want to do save sharing, say between phone and pc, there is a push to server and pull from server, buttons that need to be clicked. The actual save file seems to be local to the host machine, not the server by default, so you have to push it to the server if you plan on sharing, and then pull on the next device. I was hoping that it would completely saved on the server but I image that would be hard if two devices tried to access it at the same time.

emulator-js is what you are looking for. Web based emulator. Ive been playing with cosmos and they have emulator-js in its app list. Spun up a quick instance of it and it is retroarch through a web browser. Its a docker container so you dont need cosmos to run it, thats just how i have it set up.

I have all my docker containers in a vm and then anything not docker in a lxc. For a while I didn’t have issues with docker containers in lxc and then they all stopped worked every time there as an update so I moved them to vms.

I don’t know if I’ll keep running this. Already the child nodes are complaining about increase write delays since installing the agents on them.

The parent still is visible to the cloud portal. My understanding is the data all resides local, but when you login to their cloud portal, it connects to the parent to display the information. I’m still playing with it to confirm. My parent node shows all the child nodes on the local interface but the cloud still shows them all.

Just set this up yesterday. I used a parent node and then have all my vms point to that. Took like an hour to figure it out