# HP 290 G1 MT
The HP 290 G1 system was acquired by Kh3group in the past, earlier than 2020. The system has been repurposed and is currently serving as the Kh3 office firewall. A PCIe 4-port gigabit Ethernet adapter has been installed, providing a total of 5 network interfaces for the firewall.

![HP-290](../assets/hp290-01.png)

## Specifications

| CPU            | RAM | Storage   | OS                          | Hostname |
| -------------- | --- | --------- | --------------------------- | -------- |
| Intel i3-7100  | 8GB | 500GB HDD | Debian 11 (Promox VE 7.2-1) | pve02    |


### Proxmox VE
Proxmox VE 7.2-1, a virtualization management solution, has been installed on the HP 290 G1. It provides an easy-to-use web interface for managing virtual machines and containers. 

![Proxmox Dashboard](../assets/hp-prox-01.png)

The following virtual machines and containers are currently running on the Proxmox VE host:

#### pfSense Virtual Machine
A pfSense virtual machine acts as the firewall for the Kh3 office network. It has been configured using hardware passthrough to link the Ethernet adapter to the pfSense VM. This allows for better network performance and provides more control over the firewall configuration.

![Proxmox Dashboard](../assets/hp-prox-03.png)

#### Debian 11 LXC Container
A Debian 11 LXC container also runs on the Proxmox host with Docker installed. The container runs a Pi-hole container and a Cloudflare Tunnel container. Pi-hole serves as the local DNS and ad-blocker for the Kh3 office network. The Cloudflare Tunnel container provides secure access to the internal services running on the Kh3 office network.

![Proxmox Dashboard](../assets/hp-prox-04.png)

## Upgrade Path and Future Plans

The current plan is to upgrade the HP 290 G1 from a 500GB HDD to a 500GB SSD and upgrade from 4GB of RAM to 8GB of RAM. Ultimately, we plan to replace the PC with something more powerful and power-efficient.