Refurbished Lenovo Tiny, HP micro or Lenovo mini are the go to things for this. Available in plenty different configurations, modular and widely available due to getting decommissioned by the industry in big numbers after 2-3 years.
They idle around 6-7W
Good Point! I’ll check if my forgejo container has password auth enabled. :D It’s LAN only though.
I mean, not that it’s not severe, but which container images have ssh baked in? If you’re using good stripped down images, you’re fine here.
Not sure where the overlap is between"ssh is enabled" and “one of those OSes”. LXCs maybe?
That it’s in the hand of a few people is one major issue, but the externalized costs* are even worse one in my book and this is another post where it’s conveniently ignored mostly.
Not that I read it all, but literally the second sentence is:
This entire post (the link is the source) has been fully written by me without any AI.
I think that’s perfectly fine as well! I’m on an unmanaged switch, so it’s not really an option for me. (And prefer to keep it that way since I’m always trying to minimize power consumption)
(that’s correct, I just wanted to add that Proxmox Backup Server supports incremental backups)
I’m also on authentik, because of the extensive list of tutorials. I’m also using Navidrome but couldn’t be bothered to set up SSO there since I’m mostly listening via clients
Looks pretty cool, quite pricey though compared to 3D printing. I’m glad my friend printed mine
Sweet! I also love that it has a whole screenshot section.
You’ll find more stuff for problems you didn’t know you have. :D
Yeah I get it. Wanted to get in the habit of blogging about my stuff a bit, but admittedly I’ve been criticizing articles for the same.
What are you building for your community? I think smaller communities is really the spot where this hobby can have a greater impact in enabling people to collaborate in different ways.
I think for that use case, Firewalls on the hosts make sense. VLAN is not a bad idea either, though you’d need a managed switch (hardware) for that.
Crowdsec is on my to-do list as well. Should be easy to set up on OpnSense, just never pulled the trigger.
I have HA notifications set up for the same thing, but sometimes they simply won’t work. Have you set up all the energy settings? There’s a way to create a manual notification from HA, does that work?
Don’t create another Omarchy please!
I have a similar thing but I’m using Ansible. That way, I don’t have to handle all the error checking etc myself.
F2B/FW: If it’s only available locally/via VPN, I think your threat model is your LAN. People in your wifi or rogue smart home stuff. I think a firewall makes more sense here, but if it’s just 1 machine, you should be fine with ufw or the like. If you have several VMs that are supposed to be separated, the solution would depend on the virtualization software.
Unattended upgrades are way better than none at all, both for system and docker. Of course it depends on how important it is that your services are “always” available and I get the NAS struggle though.
That sounds very cool! Did you have prior knowledge in that field or are you learning as you do it?
What kind of id tools? Like the bird sound thing?
Similar, Nextcloud is a fork of OwnCloud, and OpenCloud is a fork of the new OwnCloud Infinite Scale.