thirdBreakfast

joined 2 years ago
[–] thirdBreakfast 3 points 6 months ago (1 children)

Yep, I think there's sound arguments for separating out your storage (NAS) and network (router/DNS/PiHole) infrastructure. After that, whatever suits your purpose. I virtualise all my serious services on one machine under Proxmox (mostly for ease of snapshots) then have another machine for things I'm fiddling with, usually again under Proxmox so they are easy to move to production when I'm happy with them.

[–] thirdBreakfast 8 points 6 months ago

My NAS and production server run 24/7, I've got a dev server that I turn off if I'm not expecting to use it for a week or so. Usually when I do that, I immediately need it for something and I'm away from home. I have chosen equipment to try and minimize energy use to allow for constant running.

My view on UPS is it's a crucial part of getting your availability percentage up. As my home lab turned into crucial services I used to replace commercial cloud options, that became more important to me. Whether it is to you will depend on what you're running and why.

I've heard that one of the most likely times for hard drives to fail is on power up, and it also makes sense to me that the heating/cooling cycles would be bad for the magnetic coating, so my NAS is configured to keep them spinning, and it hasn't been turned off since I last did a drive change.

[–] thirdBreakfast 1 points 6 months ago

I agree. Get a domain name, point it to the internal address of your NGINX Proxy manager (or other reverse proxy that manages certificates that you are used to). A bit of work initially, then trivial to add services afterwards.

I didn't really need encryption for my internal services (although I guess that's good), but I kept getting papercuts with browser warnings, not being able to save passwords, and some services (eg container repository on Forgejo) just flat out refusing to trust a http connection.

[–] thirdBreakfast 1 points 6 months ago

OP, I think you'll find [email protected] will be fine - please ask your 'probably super dumb' questions there, I'd be stoked to see some I could answer!

[–] thirdBreakfast 2 points 6 months ago (1 children)

My step-up from Pi was to ebay HP 800 G1 minis then G2's. They are really well made, there's full repair manuals available, and they are just a pleasure to swap bits in and out. I've heard good things about, and expect similar build quality from the 1 liter Lenovos.

I agree that RAM is a likely constraint rather than processor for self-hosting workloads. Particularly in my case as I'm on Proxmox and run all my docker containers in separate LXCs. I run 32GB in the G2's which was a straightforward upgrade (they take laptop like memory). One some of them I've upgraded the SSDs, or if not, I've added M.2 NVME drives (that the G2's have a slot for).

[–] thirdBreakfast 7 points 6 months ago
  • Climate change contributing to
  • Climate refugees contributing to
  • Breakdown in social cohesion contributing to
  • Populism, oligarchs, and authoritarianism contributing to
  • Breakdown of international cooperation contributing to
  • Inter-nation conflict contributing to
  • GOTO 10
[–] thirdBreakfast 1 points 6 months ago (1 children)

Yeah na, put your home services in Tailscale, and for your VPS services set up the firewall for HTTP, HTTPS and SSH only, no root login, use keys, and run fail2ban to make hacking your SSH expensive. You're a much smaller target than you think - really it's just bots knocking on your door and they don't have a profit motive for a DDOS.

From your description, I'd have the website on a VPS, and Immich at home behind TailScale. Job's a goodun.

[–] thirdBreakfast 39 points 6 months ago (2 children)

+1 for the main risk to my service reliability being me getting distracted by some other shiny thing and getting behind on maintenance.

[–] thirdBreakfast 5 points 6 months ago

I love this idea (of just picking something I'm loving each month), it would help me overcome my decision paralysis about who to support.

[–] thirdBreakfast 6 points 6 months ago (1 children)

Yes, a few. Signal (daily use), LetsEncrypt & Certbot (EFF). It's not enough.

One day I decided I'd spend $x every January (when I do all my other donations) on open source stuff I depend on, and roughly in the proportions I depend on them. It quickly became impossible - I can't just fund Debian (which I use a lot of in VMs), I'd need to think of all their dependencies, same with NGINX, Node etc etc. The mind boggles.

I need something like a Spotify subscription for open source to assuage my guilt of the great value I extract for my personal use of open source.

[–] thirdBreakfast 1 points 7 months ago (1 children)

Thanks. I'll keep an eye out. Now I know that it gets daily use, a more expensive machine doesn't seem so crazy.

[–] thirdBreakfast 1 points 7 months ago

Binary Lane $3.75/month for a small but full access VPS. Been using them for a year or so for self-hosting and commercial workloads, no drama. They expect you to know what you're doing - it's just a Linux VPS with an IP address , the same as DigitalOcean Droplet, Linode etc.

view more: ‹ prev next ›