Also at @me@social.k3can.us on Mastodon.
I selfhost my blog without a static IP. You just need Dynamic DNS.
Keep in mind that your outbound bandwidth might be different from your inbound. I get 300mbps in, but only 5mbps out. It’s not noticeable during normal Internet use, but as you start sharing content publicly, limited bandwidth becomes really noticeable.
Using them here to run everything. My whole *arr stack is running in a Quadlet pod. Really convenient, especially the auto update and rollbacks.
deleted by creator
For what it’s worth, I changed both usernames and it worked.
There are some tools to help, but things are sort of specific to particular aspects. Lynis for general systems, ntopng for networks, and such.
For 90% of stuff, though, you can just stick to stable repos and upgrade on a schedule and you’ll be alright.
What’s a good reverse proxy for a set up using Cloudflare?
Having a reverse proxy behind your reverse proxy is a little redundant, but should work fine. My preference after trying several was nginx. The config takes a little to get used to, but it has a ton of features.
is Cloudflare’s proxy really needed?
Not at all.
Cloudflare just makes configuration a bit easier, especially if you’re behind CGNAT. I wrote a little about them here: https://blog.k3can.us/index.php?post/2025/02/Cloudflare-for-the-Selfhoster
The paid plans get you the “premium” blocklists, which includes one specially made to prevent AI scrapers, but a free account will still get you the actual software, the community blocklist, plus up to three "basic"lists.
The slightly lower power draw pi5 vs a Tiny will eventually make up for the higher initial cost, but you can save more by turning off lights when you leave a room or skipping a round at the bar.
In my opinion, the wider software compatibility, better processing power, and expansible RAM and storage options far outweigh the eventual theoretical savings.
That said, if you need the super small SBC form factor or GPIO pins, definitely go for a pi. They absolutely have their use cases. I have 4 or 5 of the 3B and 3B+, and have used them on-and-off for a variety of tasks over the years.
It’s been a long time since Pi’s were competitive on price.
You can get a used Lenovo Thinkcentre for $50 on eBay. A modern pi is going to cost you that much for just the board, then you still need to buy a case, power supply, SD card, and then figure out some solution for storage…
Whoa. TIL!
I thought Mandrake/Mandriva died over a decade ago, I had no idea it was still kicking around!
No reason to bother with a Pi unless you need the GPIO for something. You can do more with a Lenovo Tiny or SFF Dell.
I fell for the Ready 100 Computer, years ago and now I don’t trust anything computer related on Kickstarter.
Host? As in running services?
Wireguard and the Proxmox Backup Server software itself. Redundancy/failover comes from the server cluster itself, not my backup server.
As far as the backup content, it “hosts” backup images of my VMs and LXCs, plus /home from my laptop in case it ever gets lost or damaged.
I tried a bunch, zoneminder, motioneye, frigate, etc., before finally settling in AgentDVR. It offers a fair bit of flexibility via MQTT and “just worked” with my PTZ camera.
Under the store page there should be a “steam replay” button if you scroll down a bit. It will only show the OS break down if you use more than one OS, though. No pi chart if you only game on Linux. 😕
AMD has been great on Linux.
I’m curious about Intel’s cards, though. They seem to be offering some solid competition now, but I haven’t heard anything about their Linux support.
You’re not a “target” as much as you are “a thing that exists.” These aren’t targeted attacks.
That said, you can look into adding some additional measures to your webserver if you haven’t already, like dropping connections if a client requests a location they shouldn’t, like trying to access /admin, /…/…, /.env, and so on.
On nginx, it could be something like:
location ^/\.|)/admin|/login {
return 444;
}
Of course, that should be modified to match whatever application you’re actually using.
Self hosted from my homelab on an nginx server. I also self host my blog, which has some info on my whole set up. My blog uses some basic bloging software, though, rather than being hand-made.
The “side menu thingy” is achieved through HTML “frames”. It’s an element of HTML that’s pretty much extinct nowadays, but was all the rage when I built my very first page back in the day.
Nice. I wrote mine “by hand”, too. No CSS, just raw HTML. I think it’s a more personal experience than just using whatever random template some all-in-one web hosting company offers.
That’s called dynamic DNS (it’s the dd in ddclient).