• 1 Post
  • 47 Comments
Joined 2 years ago
cake
Cake day: June 15th, 2023

help-circle
  • I’ve used a retired desktop for my home server since 1999. It doesn’t have the fancy web-UI management of commercial NAS, but I’m comfortable with command line and config files.

    At some point, I realized I could use its wifi card and hostapd to replace my WAP. That was a bit of an adventure initially finding a card that really supports AP mode and setting up hostapd, but has now allowed me to migrate from 802.11g to n to ac much cheaper than buying whole new devices,

    Recently converted to an N100 with 4x ethernet ports, which let me unplug my little 5-port switch.

    Managing this doesn’t feel like a second job: it’s stable and just works. Automatic updates, with kernel blacklisted; periodically log in, update kernel & reboot. It does give me the opportunity, when I get inspired, for a weekend project, like adding hostapd or a new service, either via docker or bare metal. I like that I have one device doing “NAS,” WAP, and router jobs.




  • This is one of my pet peeves with containerized services, like why would I want to run three or four instances of mariadb? I get it, from the perspective of the packagers, who want a ‘just works’ solution to distribute, but if I’m trying to run simple services on a 4 GB RPi or a 2 GB VPS, then replicating dbs makes a difference. It took a while, but I did, eventually, get those dockers configured to use a single db backend, but I feel like that completely negated the ‘easy to set up and maintain’ rationale for containers.





  • The services you’ve mentioned are all pretty low compute impact, just bandwidth, so I’d expect your MBP to be fine. Transcoding for jellyfin is the only real wildcard, and that depends on your media and client setups. I run pihole, homeassistant, immich, and kodi on a raspberry pi 4 with plenty of overhead for more services. NAS is nice if your library outgrows a single disk and your storage bandwidth gets choked by USB multiplexing.

    My suggestion is to consider a cheap VPS and vanity domain for external access. Domains cheap as $5/year; fair VPSs cheap as $30/year. Use SSH to forward localhost ports on the VPS to container ports on the MBP, then nginx on thee VPS to reverse-proxy to those forwarded ports. You get unique names for every service, LetsEncrypt certificates, and an offsite location for critical backups. Make sure you are the one paying for VPS & DNS so they don’t get surprise-cancelled.







  • The main difference is who bears the risk. For pensions, it’s the employer, who has to make extra payments if the pension fund falls behind it projected obligations, or surrender its management to PBGC. That open-ended risk is why most companies have abandoned pensions. For SS, it’s the government (although they do have the power to change their legal obligation). For annuities, it’s the recipient, who will just get less money if the annuity’s investments underperform during the accumulation phase.



  • Don’t even try to pick based on performance. Whatever they did in the last year, or 5, or 10 is mostly irrelevant to what they do in the next 30. You’re betting on the economy, not on a stock picker.

    Beyond that, it kind of depends on why you want an ‘SRI’ fund. If you just want someone to tell you your investments don’t make you a bad person, then pick a fund from a large brokerage with low maintenance fees, ideally in the range of 0.1%/year. If you want an SRI because you think the market is going to reward ethical companies or punish unethical companies, or because you’'re willing to sacrifice long-term performance for not actively exploiting externalities, then you need to dig into the funds a little deeper and find out what they mean by ‘social responsibility.’ It’s a hot marketing phrase right now, with no regulatory meaning, so you can be sure that there are products being called ‘socially responsible’ with little or no difference from products not so labeled.

    If you actually have a specific ethical agenda, then you need to be prepared to do a lot of work. You’ll need to understand how the fund defines SRI, find out what benchmarks they use to greenlight companies, and figure out whether those benchmarks can be greenwashed. Can Exxon donate a few million dollars to a sketchy ‘reforestation charity’ and claim to be carbon-neutral? I imagine this research is out there, but the people interested in Wall Street tend to be a different set than those interested in climate, labor rights, or political freedom.



  • I switched from an I3-530, nominal TDP 73W, to an N-100, nominal TDP 7W, and power from the wall didn’t change at all. Even the i3 ran around 0.1 CPU load, except when transcoding, and I’m left with the impression that most of the power goes into HDDs, RAM, maybe fans, and PS losses. My sense is that the best way to decrease homelab power use is to minimize the number of devices. Start with your seyrver at 60W, add a WAP at 10-15W, maybe a switch at 10-15W… Not because of the CPUs, necessarily, but because every CPU every CPU comes with systems to keep the CPU going, keep the power regulated, etc.



  • My ISP seems to use just normal DHCP for assigning addresses and honors re-use requests. The only times my IP addresses have changed has been I’ve changed the MAC or UUID that connects. I’ve been off-line for a week, come back, and been given the same address. Both IPv4 and v6.

    If one really wants their home systems to be publicly accessible, it’s easy enough to get a cheap vanity domain and point it at whatever address. rDNS won’t work, which would probably interfere with email, but most services don’t really need it. It’s a bit more complicated to detect when your IP changes and script a DNS update, but certainly do-able, if (like OP) one is hell bent on avoiding any off-site hardware.