• 0 Posts
  • 37 Comments
Joined 2 years ago
cake
Cake day: July 2nd, 2023

help-circle
  • When you upgrade your desktop PC, plan for it to be the home server after that.

    I got a rackmount case to transplant my old desktop montherboard into every 5 years. I also got a 4-port NIC so it can also be a router. My server is a 4th gen Core i5 and it’s still plenty of power for a home server.

    If you’re a laptop guy, I’m not sure what you’d do. Maybe ask friends for their old desktops. The Win10 discontinuation next month would be a great opportunity to snap up some business PCs destined for landfill.

    For Home Assistant, I think you either need Docker or a dedicated box. I kinda hate how there isn’t a .deb package for it like literally every other service on my server.








  • The educational route I took was Hurricane Electric’s free IPv6 online course. It taught me a bunch of networking principles. When you finish the course (and get “sage” status), you get free lifetime DNS access. This includes dynamic DNS that automatically updates when your IP address changes.

    Because of this, I can self-host on a basic residential plan without paying for any additional services.




  • pHr34kY@lemmy.worldtoSelfhosted@lemmy.worldJellyfin over the internet
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    3 months ago

    If your reverse proxy only acknowledges jellyfin exists if the hostname is correct, you won’t get discovered by an IP scanner.

    Mine’s on jellyfin.[domain].com and you get a completely different page if you hit it by IP address.

    If it does get found, there’s also a fail2ban to rate-limit someone brute-forcing a login.

    I’ve always exposed my home IP to the internet. Haven’t had an issue in the last 15 years. I’m running about 10 public-facing services including NTP and SMTP.







  • I have a job, and the office is 35km away. I get a locker in my office.

    I have two backup drives, and every month or so, I will rotate them by taking one into the office and bringing the other home. I do this immediately after running a backup.

    The drives are LUKS encrypted btrfs. Btrfs allows snapshots and compression. LUKS enables me to securely password protect the drive. My backup job is just a btrfs snapshot followed by an rsync command.

    I don’t trust cloud backups. There was an event at work where Google Cloud accidentally deleted an entire company just as I was about to start a project there.




  • I’ve got 3 subnets on an L2 switch. You will have clashes over DHCP if you have both broadcasting on the same L2 switch without VLANs.

    My guest wifi is on a vlan, but the switch is L2 and it’s fine. The router has separate physical ports for each subnet. The “guest” subnet is only accessible over Wifi, and the access points are configured so that the guest VLAN is mapped to a separate SSID.

    My third subnet has no VLAN. It’s IPv6-only and all devices have a static IP address. It’s only used for security cameras. I did this so they don’t transmit on the same physical cables as my primary subnet. It is otherwise insecure, as I can join the subnet by simply assigning myself a static address in the same range.

    Note: There is a bug in Windows where it will join an IPv6 subnet on a different VLAN. I had to tweak my DHCPv6 / radvd so that Windows would ignore it. Yes, Windows is this dumb.