101–110 of 307 posts
Went from a PowerEdge 2650 in the spare room to a way smaller optiplex 3060. SO much quieter and friendlier to the power bill. Also, a lot faster too. :)
Earlier quoted context omitted.
You don't control a VPS, uptime doesn't matter, and even my 5 Mb/s upload is just fine. Electrical costs are marginal. But most importantly there is nothing more convient than $ cp photo.jpg ~/www/ and sending someone the link example.com/photo.jpg. Plus you have tons of space. That's not to say that a VPS in addition isn't useful or fun. https://indieweb.org/POSSE and all. It just isn't at all required.
I mean is scp any more difficult?
Earlier quoted context omitted.
Would recommend Tailscale over SSH. Really easy to setup/use and means you don't have to open up ports like 22 which are constantly being port scanned.
You can move ssh to a different port.
Earlier quoted context omitted.
Not _exactly_ as easy, you also need a valid https cert, and set up a cronjob to renew it. And for some other reply here, "as easy as it was in 2003" really doesn't mean "easy" :v
You don't have to have that. Expectations have just increased since 2003.
Earlier quoted context omitted.
You can move ssh to a different port.
Anyone who thinks they need to move ssh to a different port likely doesn’t have their ssh security configuration setup optimally.
Earlier quoted context omitted.
My problem is that I have never been able to purchase residential internet that allowed me to open port 443 or port 80.
Use Cloudflare. Or, rent the cheapest machine you can with a public IP and use something like Rathole. I like Cloudflare because it’s fast and free, but they do MITM you.
I'm still not convinced that self hosting is cheaper though. Where I live, both the electric grid and Fibre connections are unreliable, and the ISP charges about $3/month for a static IP. Assuming 2.5W for a RPi, it takes 1.8kWh a month, costing around $0.25 for electricity. This also has the downside of using residential IPs, having to deal with CGNAT/NAT if the ISP has no static IPs, exposing your home IP, slow dis…
I deployed a GRE tunnel to a small box I rent from Hivelocity that has a /26 routed to it, to work around lack of proper connectivity from a "business" HFC connection to said garage.
Earlier quoted context omitted.
Anyone who thinks they need to move ssh to a different port likely doesn’t have their ssh security configuration setup optimally.
Making it explicit: try to always use keys for ssh, avoid passwords. If you have to use passwords, make it very long (20+ chars) and random. Don't use dictionary words or reuse passwords from anywhere else.
You can also do things like firewalld off (or with hosts.allow) 22 to just an ssh bastion/jumphost src (or your house IP), but I find that’s usually not necessary (although an excellent further step if you are a bit paranoid) as long you do what was mentioned in first paragraph.
> Turns out in 21st century you can even update [Raspberry Pi] without downtime. Hopefully I didn't just miss it in the article, but... how?
Kernel care is apparently free for the raspberry Pi https://tuxcare.com/patch-raspberry-pi-systems-without-a-reb... Also I think you can use Ubuntu PRO on the pi, which includes Livepatch.