Incessant tinkerer since the 70’s. Staunch privacy advocate. SelfHoster. Musician of mediocre talent. https://soundcloud.com/hood-poet-608190196
We were/are all noobs at something at some point in our lives. I’ve had a computer in front of me since the mid 70’s, and I’m still a noob. Learning is one of the bigger draws to this whole scene to me. There is always room to learn, because there are always different approaches to the same problem.
I am very paranoid when it comes to security, so I don’t want to risk anything… 😄
Don’t relax that posture. A little paranoia can be a good thing.
You should be good with caveats:
chmod 700 ~/.sshchmod 600 ~/.ssh/id_rsa or id_ed25519, etc.chmod 644 ~/.ssh/id_rsa.pubYou can check with: ls -la ~/.ssh/
I feel that.
You’re still my brother man no matter what.
Welcome to the club dude/Dudette. Come on, don’t tease us…whatcha runnin’? Glad to have you here and it’s good to meet you.
Awww don’t be sad bro.
Great song BTW and yes, I keep having the same deja vu
self hosting a lyrics site
I remember when people were going to court for publishing lyric sites. Wow! Weird times.
follow those over his steps
You hurt me Shrek. lol
Ha! I commiserate with you. My eyes started to glaze over after a bit. Here are some notes that may help out. They have changed the site around several times so, things may not be exactly in the place as documented, so you might end up hunting around the site. But, this should get you down the road a piece. Additionally, I am running Ubuntu Jammy, so their may be slight differences, I’m not sure.
https://send.vis.ee/download/2eab4ead88df4347/#gu-rOJkmSLWXn4v-EEe2Yg
https://archive.org/details/cloudflare-tunnel-setup-for-ubuntu-homelab-production
If the link expires or you want it uploaded elsewhere just let me know
Now what
Congratulations on the new domain name! Now what? Well, first you don’t tell anyone here what it is. /s Since you are already with Cloudflare, why not go all out and set up Cloudflare Tunnels/Zero Trust? Once you install Cloudflare Tunnels/Zero Trust on the server, you no longer need to do all that port fiddling, NAT fiddling, none of that. If you decide to go the Cloudflare Tunnels/Zero Trust route, I have some set up notes you might find beneficial. I’d be more than happy to share them. It isn’t that setting up Cloudflare Tunnels/Zero Trust is hard, but it was a bit touch and go for me, but I got there, and wrote that shit down. LOL
@pmk@piefed.ca has some great advice about documentation. DO IT! Write everything down during deploy. After a successful deploy, distill your notes and clean them up. Make them a part of your 3,2,1 backup scheme.
Suricata would be a better choice given it’s natively multi-threaded
+1 for Suricata/inline
Slow day
It wouldn’t take much really. I run a little fanless standalone pFsense box:
Last time someone asked this question, I believe the going eBay price was in the $175 to $275 USD range. Mine sits between my modem and everything else, servers, cams, PCs, laptops, et al. I haven’t experienced any bottlenecks or sluggishness.
Welcome. Nice to meet you!
Awesome! Welcome to the club!
Many people don’t appreciate the effort involved to be a moderator,
Oh shit, I do…it’s the reason I’m not one anymore. I have lost 90% of my patience in my old age.
…and you get restoration verifications.