Live data from Hacker News

Screw it, I’ll host it myself

markozivanovic.com

401–410 of 495 posts

Re: Screw it, I’ll host it myself

#401
Looking through the comments, I think it would be great if someone can bundle all of this into a product which automatically applies security uodates and offers some form of visual dashboard to see the status of the system, errors, and logs of attempts to compromise the system. Furthermore a migration tool from GMail/Google-Apps/Drive would be super useful (+ one for Microsofts offerings).

I believe many would be willing to pay for such a service, and I would be open to collaborate on building such a product.

I can see here things like: - resale of hardware components and support agreements for paid subscriotions for the software - paid setup support - initial fee of the product - small subscription fee for updates

Re: Screw it, I’ll host it myself

#402
post #343

Earlier quoted context omitted.

The author focuses the entire blog post on remote third party services that are alternatives to popular third party services financed by data collection as a "business model". IMO, the single most important component of a home network is not any piece of the hardware/software outside the home that the third parties may control, it is the internet gateway in the home. Routers were the most important computers at the d…

Okay. How can we fix this? I'm dealing with it right now and this space is so hard -- likely somewhat deliberately so. I'm a 20+ year Linux user trying to get a single home network with multiple ISPs going and it just seems way harder than it ought to be; i.e. -- not that every bit of software needs to be idiot-proof, but this iptables/pfSense/netplan etc etc universe just feels downright hostile to the aspiring home…

Have you checked out opnsense? It features multi-WAN. I've also had a few acquaintances say they prefer it substantially over pfsense

Re: Screw it, I’ll host it myself

#403

Hi, I'm the author, Thank you all so much for your comments. I didn't expect this will be this high on HN. I'm aware there are more simple solutions for self-hosting, even partially. I'm also aware that my setup is not perfect - that's why this post was created. I was hoping to get some feedback. Not from that many of you, but some friends. :) Ask me anything you like, I'll try to answer every question.

K-9 is not ugly if you use a more recent release. In F-Droid, go to the app page and have a look at the Versions that are available.

Re: Screw it, I’ll host it myself

#404
post #269

"for purely private use, I wouldn’t opt for AWS even if I had to choose now. I’ll leave it at that" I will elaborate: I started out with AWS several years ago. I could never work out how they calculated my bill, and had more than one >$100 shocks for hosting my personal services. I moved to DO and Vultr (stayed with DO for no real reason) and so shut everything down on AWS. But I still got a $0.50 monthly charge on m…

> I went through the control panel several times - it is/was a huge mess, obscure by policy obviously - and finally in some far distant corner found something still turned on. I did not understand what it was at the time and can recall no details, but I turned it off with great relief.

Using IAC (Terraform) would solve this in an instant: "terraform destroy". Done.

Re: Screw it, I’ll host it myself

#405

Earlier quoted context omitted.

After reading through it all, I think this is more a condemnation of the author's diagram (or at least their decision to put that particular one up-front), than of their process in general, nor the challenge. Breakdown of (my) issues with the diagram: - author's interaction with each device is explicitly included, adding unnecessary noise - "partial" and "full" real-time sync are shown as separate processes, whereas…

That is great ASCII viz ! Did you do it purely by hand ? I often need to but give up...

For those wondering, I found some tools : Asciio(Linux), Monodraw(Mac), asciiflow.com(Web)

Re: Screw it, I’ll host it myself

#406

Earlier quoted context omitted.

Agree that documentation is key here. Anything you do that is beyond the vanilla "pave the install and plug it in" should be written down. It doesn't need to be perfect - I have a onenote notebook that has the customizations that I've done to my router (static IP leases and edits to /etc/config/network), and some helper docs for a local Zabbix install in docker that I have. I recently how to migrate a database from o…

I set up a folder for notes that shares across my network using SyncThing and is backed up with a FreeNAS box. That folder is just a collection of markdown files for each program / system and when I save on one device it updates the documentation on them all. I use Atom to view and edit them on my Linux machines and a markdown editor app on my phone. This allows me to search across the notes too. I've had this fairly…

Interesting, what markdown editor do you use on your phone?

Re: Screw it, I’ll host it myself

#407
Regarding sever hosting: Hetzner has a very attractive server auction on their website [0]. For about 30€ you can get several terrabytes with a fast cpu and plenty of RAM. No set-up fee either. These are unmanaged dedicated root servers. Basically cancelled sever subscriptions are first offered here again before they take apart the server. So the offerings vary and are time-limited. However, if you pull the trigger there is no limit for how long you can keep using it. Servers are in Germany or Finnland.

I am currently waiting for slightly better offerings (a few weeks ago when I found out there were slightly more attractive options) and then will pull the trigger.

I yet have to find anything that comes close to this bang-for-buck ratio.

[0]: https://www.hetzner.com/sb

Re: Screw it, I’ll host it myself

#408

The problem I have always had when building elaborate home server setups is the "set it and forget it" nature of the systems I've installed bites me in the ass. Since it's not my full-time job to manage these systems, I'm really not familiar with them the way I might be with the systems I manage at work. These systems cruise along for years, and when something finally does go belly-up, I can't remember how I set it u…

If you want stability I would go with a custom OS, eg. no auto updates, only update parts of the system if you need/want to. And apply security/hardening in several layers. Make backups of course. Then you could leave it running, with really nothing to worry about except hardware failure. The problem is that when the hardware do fail, it might be difficult to get a CPU with the same architecture. (like 50 years from now)

Re: Screw it, I’ll host it myself

#409

I had the same thought as the title of the article go through my head, but we ended up with a simpler setup as I wanted something I don't have to constantly mess with: * Put together an overbuilt NAS box running ZFS On Linux * Simple docker-compose file for all services * Backups through borgmatic (via ZFS snapshots) * Auto-updates through watchtower * Punted on email and use FastMail, switched to our own domain from…

I have almost the same setup and it's working like a charm. Was still looking into a backup solution so I'll take a look into borgmatic

Re: Screw it, I’ll host it myself

#410

Looking through the comments, I think it would be great if someone can bundle all of this into a product which automatically applies security uodates and offers some form of visual dashboard to see the status of the system, errors, and logs of attempts to compromise the system. Furthermore a migration tool from GMail/Google-Apps/Drive would be super useful (+ one for Microsofts offerings). I believe many would be wil…

I'm working on this, contact me if you want to join your force to the project: joseph at appdrag dot com
Post reply on HN