Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What do you self-host?

news.ycombinator.com

Post reply on HN
Print view View original

271–280 of 347 posts

Re: Ask HN: What do you self-host?

#271

Post by zelly »

dmos62 wrote: post #187
zelly wrote: post #85

SSH: for git and tunneling literally everything: VNC, sftp, Emacs server, tmux, .... Docker running random stuff Used to run Pihole until I got an Android and rooted it. Used to mess with WebDAV and CalDAV. Nextcloud is a mess; plain SFTP fuse mounts work better for me. My approach has gone from trying to replicate cloud services to straight up remoting over SSH (VNC or terminal/mosh depending connectivity) to my hom…

I sympathize. My meditations about this lead me to thinking about waste as well. Why computer at home though? For someone who moves around a lot and doesn't invest into "a home", this would be bothersome. Not to mention it's more expensive, in terms of energy and money. I think third-party data centers are fine for self-hosting.

There's really no difference. Mainly I use a machine at home instead of a data center VM because that's just one less bill to pay. I have two GPUs in there which would be very expensive on public cloud.

I guess one reason people might gravitate to home hosting is owning your own disks, the tinfoil hat perspective. You can encrypt volumes on public cloud as well, but it's still on someone else's machine. They could take a snapshot of the heap memory and know everything you are doing.

Re: Ask HN: What do you self-host?

#273

Post by erulabs »

dmos62 wrote: post #252
mavidser wrote: post #60

I reworked my servers a while ago to host literally everything through docker, managed via terraform. All web-services are reverse-proxied through traefik At home: loki + cadvisor + node-exporter + grafana + prometheus syncthing tinc vpn server jackett + radarr + sonarr + transmission jellyfin samba server calibre server On a remote server: loki + cadvisor + node-exporter + grafana + prometheus syncthing tinc vpn ser…

I see you're using Bitwarden. Does anyone have recommendations for password+sensitive-data management? I'm currently using Keepass and git, but I have one big qualm. You cannot choose to not version-control that one big encrypted (un-diff-able) file.

Vault or Bitwarden are great for projects once they get serious - Unfortunately there isn't a one-size-fits all solution that doesn't suck in one way or another. Setting up vault is fairly non-trivial.

Re: Ask HN: What do you self-host?

#274

Post by sdan »

djsumdog wrote: post #169
sdan wrote: post #36

I host a bunch of docker containers plus Traefik to route everything. It runs on a cheap GCP instance (more on this here: https://sdan.xyz/sd2 ) Overleaf: https://sdan.xyz/latex A URL Shortener: https://sdan.xyz All my websites ( https://sdan.xyz/drf , https://sdan.xyz/surya , etc.) My blog(s) ( https://sdan.xyz/blog , https://sdan.xyz/essays ) Commento commenting server (I don't like disqus) Monitoring ( https://sda…

I run netdata too, but I keep that behind my VPN. I'd suggest the same for you. No reason to have that exposed to the entire world. I wrote this to setup my web server, mail server and VPN server, and auto-generate all my VPN keys. https://github.com/sumdog/bee2

You're 100% right. Actually was a bit concerned myself when I realized hundreds of people were peering into how my server is doing.

But at the same time, I understand the security risks and if I have to I can just stop netdata's container and add some more security on it before turning it on again (I'm not running some SaaS startup, so security isn't a huge concern and I don't think you can do anything with my netdata that can affect or show anything else that can make me prone to attack)

Re: Ask HN: What do you self-host?

#275

Post by sdan »

tbyehl wrote: post #268
sdan wrote: post #154

Earlier quoted context omitted.

Thanks for the read! 1. This is hosted on GCP. Actually was thinking of using Cloudflare Argo once my GCP credits expire so that I can truly self host all this (although all I have is an old machine). 2. For me, Cloudflare makes my websites load faster on pages. Security wise, I have pretty much everything enabled... like always on HTTPS, etc. and I some strict restrictions on SSHing into my instance (also note that…

> Actually was thinking of using Cloudflare Argo I'd suggest that Argo is a waste of money if you have control of your router, you don't need to secure unencrypted HTTP traffic, and your ISP isn't port-blocking. Block all traffic except from CF's IPs, configure Authenticated Origin Pulls, and use SSL for your CF Origin traffic (your own cert or CF's). If you don't meet all of those conditions, a cheap VPS as a VPN se…

Great idea. Didn't think of that. Maybe I'll do that in the future.

Re: Ask HN: What do you self-host?

#276

Post by AdamGibbins »

rovr138 wrote: post #241
djsumdog wrote: post #169

Earlier quoted context omitted.

I run netdata too, but I keep that behind my VPN. I'd suggest the same for you. No reason to have that exposed to the entire world. I wrote this to setup my web server, mail server and VPN server, and auto-generate all my VPN keys. https://github.com/sumdog/bee2

Any reason to have it behind a VPN?

Reduces surface area of attack, you never know when a 0day is going to be found. Exposing monitoring/metrics is particularly interesting as it exposes a lot of information to an attacker, if they're trying to starve your machine of a resource or whatever.

Re: Ask HN: What do you self-host?

#277

Post by sdan »

oarsinsync wrote: post #191
sdan wrote: post #154

Earlier quoted context omitted.

Thanks for the read! 1. This is hosted on GCP. Actually was thinking of using Cloudflare Argo once my GCP credits expire so that I can truly self host all this (although all I have is an old machine). 2. For me, Cloudflare makes my websites load faster on pages. Security wise, I have pretty much everything enabled... like always on HTTPS, etc. and I some strict restrictions on SSHing into my instance (also note that…

You lose the end to end encryption that you’d get by HTTPS directly to your home instead of proxying via CF, as CF will MITM all of your sessions. Browser CF, CF source server. Two distinct TCP sessions. Both potentially encrypted, but there’s no E2E encryption anymore.

I get what you're saying, but here's some benefits of using CF:

1. Been using it for 3+ years. Whenever I'm making a site, there's nothing better than easily making some DNS records and making sure they're all always-on HTTPS.

2. A little bit of the first part: It's a hassle to setup my own certs, etc.. I feel that Cloudflare "protecting" my IP from DDOS and other attacks is far better than anything that I can setup easily (at least from my experience, I think they know what they're doing)

3. Maybe in the future when I have some time and money I'll do everything on my own and ensure I have E2E encryption. At the moment, anything I'm running isn't mission-critical and isn't used by hundreds of people; I'm not making a SaaS startup. I understand your concern, but the ease of use of Cloudflare is something I value.

4. Analytics. I've come not to trust Google Analytics at all. I'm not sure what they're doing, but most if not 100% of tech-savy people have adblock, which blocks GA. My VPN from AlgoVPN blocks GA and anything related to GA, FB, Twitter, etc. So I'm not really sure how much I can trust GA's analytics opposed to Cloudflare giving me the exact numbers on how many people requested or visited my site. (I'm going to make my own analytics soon since Fathom has turned to profit only and not open source).

Re: Ask HN: What do you self-host?

#278

Post by sdan »

AdamGibbins wrote: post #276
rovr138 wrote: post #241

Earlier quoted context omitted.

Any reason to have it behind a VPN?

Reduces surface area of attack, you never know when a 0day is going to be found. Exposing monitoring/metrics is particularly interesting as it exposes a lot of information to an attacker, if they're trying to starve your machine of a resource or whatever.

Exactly. They have direct access to your vitals and can push certain buttons to figure out how your system is running to brute-force that attack, ultimately ruining whatever they intended to do.

I'm probably going to change how publicly accessible my monitoring view is soon, but for now, it seems pretty cool for everyone to see.

Re: Ask HN: What do you self-host?

#279

Post by greenyouse »

I'm just starting out with building a virtual workstation system for myself with Eclipse Che. My home desktop has always been much more powerful than my laptop so I've always thought it would be ideal to have mainframe style development. I learned about Che 7 this week and figured that it was worth a shot. Using containers for everything sounds like an interesting idea to try out too!

Surprisingly (at least to me), there are some really big companies like Microsoft, IBM/RedHat, and others pushing this workflow. The editor is supposed to basically be VSCode in browser and compatible with most extensions.

I'm using my RPi as a jump box and have some commands to turn on my home desktop + mount the file system and that kind of stuff when connecting. I've used it in the past and it's worked nicely.

I got k8s running but got blocked by some bugs when installing Che. Looks neat though. It would be cool to have a 2007 macbook with the computing power of a 2990WX workstation :).

Re: Ask HN: What do you self-host?

#280

Post by munmaek »

cannonedhamster wrote: post #232
munmaek wrote: post #15

On my FreeNAS server: gitea, plex, openvpn (w/ ExpressVpn), Mayan EDMS I am unhappy with the complexity of Mayan EDMS. I'm debating moving to Paperless. All I want is a digital file system that 1) looks at directories and automatically handles files 2) has user permissions/personal files so I can let my family use it 3) has a web form for uploads. I am planning to change gitea to sourcehut- the git service as well as…

Do you have a link for paperless? I've been looking for years for something like this.

https://github.com/the-paperless-project/paperless
Post reply on HN