I tell you the real problem with self hosting: people using monospace fonts for body text.
But mono fonts let the reader know they are reading Serious Technical Content ™
Self-Hosting like it's 2025
61–70 of 240 posts
Re: Self-Hosting like it's 2025
#62[flagged]
This.
Re: Self-Hosting like it's 2025
#63I love the idea of self-hosting, especially since I keep a number of very tiny websites/projects going at any given time, so resources would not really be too much of an issue for me. What stops me is security. I simply do not know enough about securing a self-hosted site on real hardware in my home and despite actively continuing to learn, it seems like the more I learn about it, the more questions I have. My identi…
A VPS with a software firewall is more than enough.
Block port 22, secure SSH with certificates only. Allow port 443 and configure your web server as a reverse proxy with a private backend.
You don't need an IDS, you don't need a WAF and you don't need Cloudflare.
Unless you become the next Facebook that's when you start to become concerned about security.
Re: Self-Hosting like it's 2025
#64If any self hosters are burnt out by the state of config management tools and YAML, consider giving Etcha a shot ( https://etcha.dev ). It's stateful (cleans up things when they're no longer in your config), procedural (you control the flow and can trigger things as needed), and supports flexible deployment models (push or pull). Full disclosure, I created it and use it across my business and personal devices.
> It's started (cleans up things when they're no longer in your config)...
Would you please call this something else?
"It automatically reconciles", perhaps? I know that a multi-word phrase isn't nearly as snappy, but not only are "it's started" and "started" overloaded with a bunch of meanings, approximately zero of them mean what you want them to mean in this new context.
Re: Self-Hosting like it's 2025
#65i really like this software-centric approach, but I am a bit stuck when it comes to the hardware. Are there some sources around servers that don't suck up too much energy and are fairly quiet? What CPU is a good all-round solution?
Depends on your needs. For some Raspberry Pi (ideally with 8-16GB RAM) + SSD can be enough if you are after low power consumption. If you need more power: I had success with HP ProDesk Mini (or any other one-litre PC), you can get these second hand from like $150 and extend RAM and SSDs however you like. You can even pick processor / generation to fit your needs best. These can have consumption from like 30W if I'm n…
> For some Raspberry Pi (ideally with 8-16GB RAM) + SSD can be enough
Wut? For many, a Raspberry Pi with 1 GB RAM and the regular sdcard can be enough, you really don't need to go fancy if you don't want to run anything particularly heavy. Or if it's cpu-intensive then you might need the newest Pi or something even beefier but still only the lowest RAM and smallest/slowest storage options (like for WordPress). As you say, it depends on needs
I always recommend using an old laptop to start out with because you've already got it anyway and it's already low power yet very powerful: if it can run graphical software from 2020 then it'll be fine as server until 2030 for anything standard like a web server (with half a dozen websites and databases, such as a link shortener, some data explorers, and my personal site), torrent box, VPN server, mail server, git server, IRC bouncer, Windows VM for some special software, chat bot, etc. all at once. At least, that's what I currently run on my 2012 laptop and the thing is idle nearly the whole time. Other advantages of a laptop include a built-in KVM console and UPS, at least while you still trust the old battery (one should detach and recycle that component after some years)
Re: Self-Hosting like it's 2025
#66I love the idea of self-hosting, especially since I keep a number of very tiny websites/projects going at any given time, so resources would not really be too much of an issue for me. What stops me is security. I simply do not know enough about securing a self-hosted site on real hardware in my home and despite actively continuing to learn, it seems like the more I learn about it, the more questions I have. My identi…
I agree with this: I personally don't need tutorials for hosting stuff, rather tutorials about securing it properly.
Re: Self-Hosting like it's 2025
#67Last thing I need is Kubernetes at home
Exactly. I am hosting 30+ services using docker compose and very happy. I don’t want to troubleshoot k8s in the early morning because home assistant is down and light dimmers are not working for some random k8s reason.
All my "smart home" stuff needs is mosquitto on a OpenWrt router and bunch of cgi-bin scripts that can run anywhere. I already went through a phase of setting up tons of services which ended up being turned off when something changed in my life (moving, replacing equipment etc.) never to be resurrected as I couldn't be bothered to redo it without the novelty effect, so I learned from that.
Re: Self-Hosting like it's 2025
#68I love the idea of self-hosting, especially since I keep a number of very tiny websites/projects going at any given time, so resources would not really be too much of an issue for me. What stops me is security. I simply do not know enough about securing a self-hosted site on real hardware in my home and despite actively continuing to learn, it seems like the more I learn about it, the more questions I have. My identi…
A VPS with a software firewall is more than enough. Block port 22, secure SSH with certificates only. Allow port 443 and configure your web server as a reverse proxy with a private backend. You don't need an IDS, you don't need a WAF and you don't need Cloudflare. Unless you become the next Facebook that's when you start to become concerned about security.
I'm less worried about SSH access then I am abotya vulnerability in some front-end web service though.
I've contented myself using TLS client certs on my family's Android phones (which do not work at all on iOS for something like Home Assistant).
Re: Self-Hosting like it's 2025
#69I love the idea of self-hosting, especially since I keep a number of very tiny websites/projects going at any given time, so resources would not really be too much of an issue for me. What stops me is security. I simply do not know enough about securing a self-hosted site on real hardware in my home and despite actively continuing to learn, it seems like the more I learn about it, the more questions I have. My identi…
A VPS with a software firewall is more than enough. Block port 22, secure SSH with certificates only. Allow port 443 and configure your web server as a reverse proxy with a private backend. You don't need an IDS, you don't need a WAF and you don't need Cloudflare. Unless you become the next Facebook that's when you start to become concerned about security.
> A VPS with a software firewall is more than enough.
So you don't self-host at home, right?
I have been considering setting up a physical DMZ at home, with two routers (each with its own firewall), such that my LAN stays unmodified and my server can run between both routers. Then it feels like it would be similar to having a VPS in terms of security, maybe?
Re: Self-Hosting like it's 2025
#70Earlier quoted context omitted.
A VPS with a software firewall is more than enough. Block port 22, secure SSH with certificates only. Allow port 443 and configure your web server as a reverse proxy with a private backend. You don't need an IDS, you don't need a WAF and you don't need Cloudflare. Unless you become the next Facebook that's when you start to become concerned about security.
> A VPS with a software firewall is more than enough. So you don't self-host at home, right? I have been considering setting up a physical DMZ at home, with two routers (each with its own firewall), such that my LAN stays unmodified and my server can run between both routers. Then it feels like it would be similar to having a VPS in terms of security, maybe?
I colocate four servers in two DCs all running FreeBSD with PF. My main host is running a jail that hosts a bHyve VM
With four jails, each running their own bHyve VMs they run another FreeBSD OS allowing me to host jails for different services. Email, web and game servers.
I'm not a fan of DMZ as they get messy as you then have to ensure your host is protected correctly. So I use bridges, I have two bridges an outer and inner.
Services requiring outbound internet access are tapped to the outer bridge which are throttled and if required can then load balance between and the inner bridge which is under control of deny all, allow some. To my own set of home IPs.
The outer bridge cannot contact services in the inner but the inner can contact the outer but can only host internally.
This all done with PF within each jail as each jail provides you with its own vnet adapter which can be applied to a bridge.
If you wish to learn further that is what you work up too But for the personal user who wishes self-host and to have internet presence a firewall is just fine.