Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Screw it, I’ll host it myself

markozivanovic.com

Post reply on HN
Print view View original

171–180 of 495 posts

Re: Screw it, I’ll host it myself

#171

Post by shirleyquirk »

FunnyLookinHat wrote: post #4

The diagram alone is more than enough of an argument to dissuade me from giving this a shot right now - it's simply too complicated and too much to manage for the amount of time I can dedicate to it. BUT - I'm really thankful for people who keep posting and sharing these sorts of projects; they're the ones iterating the process for the rest of us who need something a bit more turn-key. I'm excited to see this eventua…

I want what you want, yet how can society reward the work involved in creating a turnkey version of such, other than through the standard capitalist selfinterested paradigm?

Re: Screw it, I’ll host it myself

#172

Post by dervjd »

I'm doing something similar with a NUC that I colocated. $27/month for a gigabit port + 5 IPv4 addresses, and it's far more powerful than any VPS I could get for the same amount of money.

It was a little bit of work to set it up initially, but now I maybe spend 30 minutes a month making sure things are updated. Hosting my own wiki, DNS over HTTPS server, Matomo analytics, and a few other random services.

Re: Screw it, I’ll host it myself

#173

Post by 2ion »

syntheticnature wrote: post #16
planb wrote: post #9

Funny headline, because every time I try to self-host anything important like mail, I learn how deep that field is and how little I know and that I'll probably need many many hours to do everything right and in a secure way (and my mails would still have a higher probability to be classified as spam). Then I think: "Screw it, I'll just use GMail"

Interestingly, it doesn't look like the author is self-hosting email. I know mail-in-a-box exists, but even with that I find it's worth the peace of mind to pay someone else for mail hosting.

No problem if you pull your complete mailboxes using a tool like isync/mbsync. I have background jobs, in addition to regular backups, which pull to all my powered on computers every 30m. As long as the source is IMAP, it's very easy to not get screwed. I couldn't care less if my email hoster today would lock me out. I'll point my domain elsewhere and I have all the data as maildirs.

Re: Screw it, I’ll host it myself

#174

Post by bpye »

merpnderp wrote: post #3

I always wonder why people don't trust their offsite back-ups to cloud providers. I know they're trying to get away from getting locked out of their data, but what are the odds a burglar steals their computers on the exact same day their cloud provider locks them out because they violated the 'no making fun of ridiculous cloud provider lockout policies' policy? As long as your house burning down and your cloud gettin…

Yeah I tend to trust B2 for my offsite. I have redundant storage locally with snapshots. That covers up to two disks failing or even someone trying to wipe storage over SMB.

The offsite protects against catastrophic failure or theft. I would still like to add in another backup for critical data such as databases, I may use another cloud provider that has geo redundant storage for those.

Re: Screw it, I’ll host it myself

#175

Post by divyenduz »

Doing something very similar, hosting a lot of things on a Raspberry Pi 4 with 400 GB SD card.

Dockerizing most things https://github.com/divyenduz/dev-infrastructure

Not as easy though, I still need to figure backup strategy and everything. My goal is to eventually remove photos, and almost everything hosted entirely really.

Re: Screw it, I’ll host it myself

#176

Post by aksss »

0xbkt wrote: post #76
bscphil wrote: post #47

Earlier quoted context omitted.

I don't know what qualifies as "amazing company" in your eyes (they're certainly cheap for what you get), but my experience was certainly very bad: I rented a VPS from them experimentally for a month, then left to go on vacation thinking I had cancelled it, but I had not. They left it running for another month that I hadn't paid for, and then sent the bill for the extra month to collections, so that's presumably affe…

Agreed. Hetzner is very strict about not leaving a penny of theirs wasted/delayed without compensation. I know a couple friends here in Turkey who were contacted by a local collection agency for late settlement and were brought up with legal proceeding if they're not settling it soon. Aware of this, I started to never ever /forget/ about paying any of my bills on time.

I think that’s what the process is training all of us to do, right?

Re: Screw it, I’ll host it myself

#177

Post by benlivengood »

aksss wrote: post #163
imwillofficial wrote: post #89

Earlier quoted context omitted.

So I agree with your sentiment, your details are a little off. “it wouldn't be too difficult for them to grab absolutely anything they want. Even disk encryption doesn't save you. You're in a VM, they can watch the memory if they need to.” It would be difficult because you’d have to have host access. VM disk encryption is now tied into an HSM or TPM these days, host access wouldn’t help. As for memory, that is now us…

> Encryption tied to TPM Common on laptops, but I wouldn’t assume that for systems/SANs in a data center, much less their virtual disks. Would love to be corrected.

AMD secure memory encryption and secure encrypted virtualization. Intel probably has something in the works, but today you can take a GCE instance from a signed coreboot through bootloader and kernel with logged attestation at each phase resulting in a VM using per-VM disk encryption key (you have to provide it in the RPC that starts the machine; it's supposedly otherwise ephemeral) with SME encrypted RAM (again, ephemeral per-machine key). Google calls it Confidential VM and Secure Boot for now.

Re: Screw it, I’ll host it myself

#178

Post by grep_name »

megous wrote: post #160
grep_name wrote: post #129

I tried to have a setup similar to this during covid but ended up with a bit of a mess. What I wanted was a home server that used X forwarding to forward services to my VPS, which also had some images running in a docker-compose stack that I wanted to have more robust uptime than my home server. I ended up being unable to get traefik to pick up on the x-forwarded ports, and ran into SSL certification issues that seem…

Yes, I use wireguard to link VPS with an array of computers in my home via point to point tunnels. This solves the "my home IP not being completely static" problem, because wg handles roaming quite gracefully. And then I just use either DNAT or nginx reverse proxy to proxy https to some http ports at home, depending on the service.

Interesting! I've never used wireguard before. When you link it with the VPS, is it able to behave as if ports from your home network are running natively on the VPS?

I'll look into using DNAT/nginx, but I really do like having everything in a format where all the configuration is self contained in code and can be spun up / down easily, and I'm not sure if I can accomplish that using those tools

Re: Screw it, I’ll host it myself

#179

Post by rkachowski »

Semaphor wrote: post #164
divbzero wrote: post #120

Earlier quoted context omitted.

Yes, and many popular applications are prepackaged as one-click apps by cloud providers like Vultr [1] or Digital Ocean [2]. [1]: https://www.vultr.com/features/one-click-apps/ [2]: https://marketplace.digitalocean.com You can also enable automatic backups for your servers.

Somewhat OT, but never realized how expensive those cloud instances are. For comparison, I pay $4.95/month (billed annually) for a KVM VPS with 2 Ghz, 2 GB RAM, 40gb SSD, 400 GB HDD in the Netherlands. That seems a lot better for selfhosting where you probably want more raw storage than more SSD space.

That's pretty awesome, what provider are you with?

Re: Screw it, I’ll host it myself

#180

Post by cube00 »

m00x wrote: post #105

So, what happens if Vultr locks him out? Sounds like an even worse situation.

At least he has a fighting chance to talk to a human at a local company. You won't get that from Google. Even if you pay for Google One you can still get blown off with "I've already given you all the information I have" (nothing) because telling you why you actually got locked out opens them up to a discussion they are not interested in having.
Post reply on HN