[-] Simon-RedditAccount@alien.top 2 points 10 months ago

Can't you just install this type of app to your phone or pc?

For one instance of app, it's possible to install it onto a single machine.

Things get tricky when you want to access the data from multiple devices. Even trickier, when several people want to access it. After a certain point, it's easier to have a "cloud" solution. And since "cloud" is just somebody's else computer, why not make this a computer YOU own?

[-] Simon-RedditAccount@alien.top 1 points 10 months ago
  • Google Workspace. Not the cheapest, and also by Google (although they claim they don't mine as much data from business accounts)
  • Zoho, $1.25/mo
  • iCloud+, $0.99/mo, but a bit limited (don't remember whether they have catch-all etc).
[-] Simon-RedditAccount@alien.top 1 points 10 months ago

Do you monitor network traffic?

Generally, no. But I seriously restrict container networking, most of my containers are unable to reach internet, unless absolutely necessary. Also, my firewall is not super-restrictive, but it is different from defaults :)

Sometimes I do some monitoring though.

[-] Simon-RedditAccount@alien.top 1 points 10 months ago

Privacy, Education, Being Cool. Also, there are some services that are not available commercially.

[-] Simon-RedditAccount@alien.top 1 points 10 months ago

Possible - yes.

Do you want it? Probably, no. Especially, SMTP. Better use something like Zeptomail (cheapest) for delivery.

You can still self-host the receiver.

Mandatory do-not-self-host-at-home notice: custom domain at skiff.com is free, iCloud+ Mail is $0.99 and Zoho is $1.25/mo.

[-] Simon-RedditAccount@alien.top 2 points 10 months ago
  • good-looking domains instead of IPs
  • tons of subdomains instead of ports
  • universally recognized TLS certs via Let's Encrypt. DNS challenges are the way to go - you don't even have to expose your HTTP server
  • dynamic DNS, again available via API
  • inbox@yourdomain.com (better not to self-host, but to use an email provider)
[-] Simon-RedditAccount@alien.top 1 points 10 months ago

Consider adding couple of screenshots or even a small sped-up GIF to the GitHub, right at the top. Also, GDrive video is loading extremely slow, better host it YouTube/Vimeo.

Congrats!

[-] Simon-RedditAccount@alien.top 1 points 11 months ago

Knowledgebase + OIDplus + scripts/configs in git repo.

I chose local instance of Wordpress for my knowledgebase a decade ago. Today I'd probably use Bookstack.

[-] Simon-RedditAccount@alien.top 1 points 11 months ago

Not exactly a NUC - a fanless MSI Cubi N with Celeron N4000.

Bare metal Ubuntu Server running nginx + docker-compose for everything other.

[-] Simon-RedditAccount@alien.top 2 points 11 months ago

Everything in my LAN is TLS-protected. Primarily because of convenience (no 'unsafe' warnings), unification (all I do everywhere is TLS). Also for learning purposes (I like challenges). Security is on the last place here (but is still important to me).

Probably your main threat is not people, but malware. Especially since they are not tech-savy. Remember how $35M of crypto assets were recently stolen: in the beginning it was a LastPass engineer who did not update his Plex instance.

[-] Simon-RedditAccount@alien.top 1 points 11 months ago

Probably not your case, but that's what I use for my homelab:

  • OIDplus for keeping OIDs, IPs, .home.arpa subdomains etc
  • local-only Wordpress as a knowledgebase. Today I'd probably chose Bookstack, but it did not exist 11 years ago....
[-] Simon-RedditAccount@alien.top 1 points 11 months ago

A DMZ is always recommended in such cases.

> Should I create a sub network and get a raspberry pi to host these apps?

Yes, it's always better. However, Pi may be overpriced now. Take a look at NUC-sized miniPCs, for roughly the same price you'll get much more computing power.

view more: next ›

Simon-RedditAccount

joined 11 months ago