um… did my bio get deleted?

  • 0 Posts
  • 27 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle
  • Used “1-liter” business PCs which come with a modest amount of RAM+storage (assuming you’re likely to replace/upgrade after buying anyway) and an 8th gen Intel CPU should run between ehhh like $125 to $250 depending on which model CPU, how much RAM etc. Totally worth it IMO, I use one with an i5-8500T as a Proxmox host for my web services and so far I’m quite happy with it. Snagged a deal on it a couple months ago, $110, shipped with 8GB RAM and a 256GB SSD which I immediately replaced.





  • For a long time I did 1 hot copy (e.g. on my laptop), 1 LAN/homelab copy (e.g. Syncthing on a VM), and 1 cloud copy … less a backup scheme than a redundancy scheme, albeit with file versioning turned on on the homelab copy so I could be protected from oopsies.

    I’m finally teaching myself duplicity in order to set up a backup system for a webdev business I’m working on … it ain’t bad.


  • I use NoMachine, but that’s in a Linux-to-Linux environment.

    Did a test last weekend sitting in a department store parking lot on the store’s public wifi, wifi bitrate about 50Mbps both ways, 50ms between me and my homelab … very very usable experience with quality set at 6/10.


  • I consider selfhosting to be both. VPS or homelab. The latter has more ‘cred’ but is also a much bigger investment and not everyone can do it. Granted I’m living in a difficult environment but as somebody using Linux since 1994 it took me 3 years to recently get a homelab to where I could credibly serve the wider internet from it, and I still use a VPS as reverse proxy anyway! Meanwhile, offloading your physical plant to a mom-n-pop platform-as-a-service provider isn’t the worst thing in the world. Some operators started out selfhosting and grew their little VPS provider from that, those guys need business too!





  • Currently I have a bastion host running a hardened distro, which establishes a reverse proxy tunnel to its ssh port via my $4/mo VPS using rathole, an excellent reverse proxy utility I switched to from frp.

    I also maintain a Tor hidden service pointed at the bastion host’s ssh port and another on a different internal host. These are so that I can still get in if the bastion host, my VPS, or certain aspects of networking are down for some reason.

    Eventually I will implement port knocking / single packet authorization by deploying fwknop on some or all of these services to further enhance security.





  • Just wanna put in a good word about GL-iNet routers … they are more travel- and pro-sumer focused than a lot of what’s been mentioned here. They run a proprietary front end on top of OpenWRT, but if you don’t like that, most of them have full support in vanilla OpenWRT.

    These are definitely more for the tinkerer market, their documentation and firmware can have quirks, but that being said (and as somebody who wouldbe wary at that caveat) I have been using GLi routers with manufacturer firmware as a daily driver for 3+ years and once you get them set up they are very solid.

    Might be a good option for the digital nomads among us who need a smaller device which can connect to a host network and then send all traffic over a VPN with very easy setup.


  • I have a background (in the distant past) as a PHP dev, and currently make my income doing mostly Wordpress work.

    For a very long time I took a jaundiced eye towards big PHP apps for the exact same reasons. That being said, I just two days ago finally installed Nextcloud in my homelab and exposed it to the world.

    It’s worth noting that a lot of PHP’s bad rep comes from Wordpress, which is terrible in security terms in large part due to a huge and very poorly vetted ecosystem of plugins written by coders of all skill levels.

    PHP itself had a number of anti-features which made security difficult in the past. A lot of those issues have been worked on. As somebody who was up to my eyeballs in PHP for years during the bad old days, I’m now confident installing big PHP apps if I think the dev team and dev process are reasonably mature.





  • holy crap, that was … … … … 25 years ago???

    I don’t honestly remember the very first, if I had to bet I’d say it was Samba, likely on my 350MHz K6 (later snagged a K6-III+ for this board, fastest Socket 7 chip ever produced) so I could share files with my laptop, a Dell, 300MHz Celeron. Running all Linux at the time, not sure what flavors, although I first encountered a Debian derivative with Corel LinuxOS believe it or not, and have used Debian on servers about 95% of the time forever after.

    My first self-hosting on dedicated hardware was a Samba share and DHCP/DNS server, since at the time routers weren’t always a thing, and in fact it was plugged directly into the cable modem … and for a while accidentally served competing DHCP to my neighborhood cable segment, causing intermittent problems for who knows how many users including myself, because the cable company didn’t filter broadcast traffic!!! When I finally found that config mishap, holy shit was it an awkward monkey moment … fix the typo and walk away slowly … wild west days!!