um… did my bio get deleted?

  • 0 Posts
  • 70 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle
  • I should probably give in and get the Puli, I dislike non-replaceable batteries but I’m sure if it dies before I upgrade to 5G and give the device away I could figure out how to replace it.

    The Spitz AX looks awesome for e.g. an RV base station etc, but too many antennas for travel use. I used old Spitz on Amtrak with some success. I wish they had a similar 5G unit with 2x external 5G antennas, and internal antennas only for wifi.

    Maybe I will get my wish someday, GLi do like producing a variety of devices on a theme…





  • ThorrJo@lemmy.sdf.orgtoSelfhosted@lemmy.worldISO Selfhost
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 month ago

    Congrats, you’ve arrived at the right place!

    Source: I subscribed to a ton of Lemmy communities to quit Reddit, and the selfhosting ones are so active they routinely push other communities down below the fold unless I sort by new.

    btw if you haven’t got into Proxmox yet, have a look at it.








  • some electronics on messy shelves

    Testing an image post from Voyager client…

    I only own the gear marked A and B, which lives above the couch I call home.

    A is my web services 24/7 Proxmox box, an Intel 8500T; 2 routers; an 8TB HDD; and a Back-UPS Pro so old its ethernet surge protection is rated for 100bT, with a brand new LFP battery in it. The UPS powers both A and B.

    B is my personal Proxmox box, an AMD 5750GE, which I use for development and running desktop OSes which I remote into, plus a GL.iNet Slate AX router. These come with me if I stay someplace other than the couch (not pictured). That’s why they’re on different shelves. Also, there’s a USB wifi dongle w/antenna connected to B which I used when some stupid website demands I drop my VPN (all traffic from everything pictured is routed thru 24/7 private VPN endpoints, aka a $2/mo VPS or three).


  • I consider selfhosting to be both. VPS or homelab. The latter has more ‘cred’ but is also a much bigger investment and not everyone can do it. Granted I’m living in a difficult environment but as somebody using Linux since 1994 it took me 3 years to recently get a homelab to where I could credibly serve the wider internet from it, and I still use a VPS as reverse proxy anyway! Meanwhile, offloading your physical plant to a mom-n-pop platform-as-a-service provider isn’t the worst thing in the world. Some operators started out selfhosting and grew their little VPS provider from that, those guys need business too!





  • Personally I’d go for as big a UPS as I could afford, but I serve some public-facing stuff from my homelab and I live in an area with outdated infrastructure and occasional ice storms. I currently have a small UPS and have been too tired/overwhelmed to set up automated shutdown yet. It’s not too hard though, I’ve done it before. And even without that in place, my small UPS has kept things going thru a bunch of <10 minute outages.



  • There isn’t a guide yet that I’ve found. I slowly & painfully assembled all the info and beat my head against the task until I had something working & stable.

    I’m currently building a comprehensive one, but due to circumstances beyond my control, it’s taking forever.

    I think civilization just hasn’t gotten there yet, but I suspect I’m not the only one working on this, so I bet the reverse proxy tunnel HOWTO situation will be way better in a year or two…

    FWIW I use nginx on the front end, and rathole for my tunnels - the latter is a very straightforward way to set up the tunnels.


  • Currently I have a bastion host running a hardened distro, which establishes a reverse proxy tunnel to its ssh port via my $4/mo VPS using rathole, an excellent reverse proxy utility I switched to from frp.

    I also maintain a Tor hidden service pointed at the bastion host’s ssh port and another on a different internal host. These are so that I can still get in if the bastion host, my VPS, or certain aspects of networking are down for some reason.

    Eventually I will implement port knocking / single packet authorization by deploying fwknop on some or all of these services to further enhance security.