Live data from Hacker News

Start Self Hosting

rohanrd.xyz

111–120 of 625 posts

Re: Start Self Hosting

#111

Self hosting is hard. You need to take care of security, backups, software updates, software installation and so on. Even on something like a QNAP (which can be compared to managed hosting) this can be hard. Flip the wrong switch and you expose something to the world. Missed a security update: your device is now vulnerable. While I host a lot of things myself I can understand self hosting is not for everyone.

I tried it but there are so many traps you can fall in, like security settings as mentioned by you. When i had my server online back then, it was hacked 1 week later :D

I hear a lot of stories like this. I've been self-hosting for a few years out of my home. I have a symmetrical gigabit fiber connection. My IP changes very frequently (DDNS and a low TTL solves that problem for my use cases).

_anyway_

I haven't been hacked.. yet. /me knocks on wood

The precautions I take are basic:

  - Use unique and secure credentials on each service I expose.
  - I only expose ports 80 and 443 to the public. 80 HTTP redirects to HTTPS/443
  - I keep my software updated (docker-compose pull)
  - Nightly backups to cloud storage and local disk
  - I "airgap" my home network from my hosting network. There is no shared hardware between them including firewalss/routers, switches, etc.
I figure cloud services and SaaS get hacked anyway. I can't enumerate the breaches my data has been a part of. If my self-hosted stuff gets hacked at least I can do the forensics and actually see what happened and what was accessed. With a 3rd party all I can hope for is what their PR department lets out.

Re: Start Self Hosting

#112

What are you all self-hosting? For me - - Gitea (git forge) - Maddy (email) - Calendso (scheduling) - Vaultwarden (password manager) - linx (filesharing) - Syncthing (file syncing) - Wireguard (VPN) - a couple of metasearch engines I am not mentioning all the tools and services for monitoring and management. Self hosting is easy for me cause I am managing all of this with NixOS.

- Vaultwarden (passwords)

- FreshRSS (RSS reader)

- Homebridge (gets some non homekit devices into Homekit)

- Minecraft Server (kids)

- Valheim Server (me and my buds)

- Syncthing Discovery and Relay servers (I am paranoid, for file sync)

- PiHole (network adblock)

- Wireguard (all our devices have it installed, combined with PiHole = adblock on the go)

- Grafana + InfluxDB (to monitor system health)

All this is running in a 16 GB space eating VM that's backed up offsite. Maintenance is not too bad, if something goes wrong I'll roll back in a flash and investigate later.

Re: Start Self Hosting

#113
post #79

You know what would be kind of neat? Like, a web site you'd go to called makemeoneofthose.com, and you'd click some buttons, and then sometime later you'd have a hosting setup that you own with some software, web server(s) and database(s) on it, and then you can go hack on it yourself, add some features, whatever. Like they send you some AWS keys and say "It's all yours. Good luck and don't forget to pay your hosting…

We used to host our own software. It was called an application and it ran on your personal computer. We just need that, but running on some appliance instead, like a NAS. Package the service up in something like docker-compose, have a way to sell it, install it, update it and support it. Synology is pretty close with their Docker support, but still pretty far.

Not to advertise, but I'm building exactly that at https://pibox.io - also solving other problems people have identified in this thread like automatic valid certificates, DNS, remote access, etc :)

Re: Start Self Hosting

#114

No thank you. I'll have to take care of backups, security, availability, updates, etc. I prefer to use a managed solution. If you don't want to lose data on being banned, just do your own backups, which are by themselves much less time consuming to handle than full-blown self-hosting. I'm fine with the occasional service being axed, I'll just migrate to another one. Often, somebody writes a migration script and open…

No post body was provided.

Re: Start Self Hosting

#115

You know what would be kind of neat? Like, a web site you'd go to called makemeoneofthose.com, and you'd click some buttons, and then sometime later you'd have a hosting setup that you own with some software, web server(s) and database(s) on it, and then you can go hack on it yourself, add some features, whatever. Like they send you some AWS keys and say "It's all yours. Good luck and don't forget to pay your hosting…

I am not related at all, but seems like a good dude:

https://www.molecule.dev/

Re: Start Self Hosting

#116

Self-hosting is not always the answer for a lot of people. Self-hosting are not easy for laypeople (someone who are not familiar with it) to try to get their feet wet with it. For myself, I am on the level of beginner and I do struggle to stay on self-hosting path. When I set it up, I learn there is more steps that I have to do because the documentations and guides did not bother to explain those step and expect me t…

I think the whole "self hosting isn't easy" meme gets repeated so much that people just take it as given now and default to managed software. Or, someone might argue "Well, my grandmother who knows nothing about tech cannot self-host, so it's not viable!" ignoring there is a huge spectrum of competence between grandma and a seasoned Linux sysadmin. People aren't morons, and there's enough info out there on how to do…

I'm skeptical that your layperson would be able to keep self-hosted applications secure constantly. Hell, huge corporations have a difficult time with it.

Re: Start Self Hosting

#117
I've gone down this path a while back and self-host Gitea and other things: https://taoofmac.com/space/blog/2022/02/12/1930

I will be moving my KVM/LXD setup to Proxmox eventually (probably when I get new hardware) and am looking into low-wattage servers (ARM would be nice, to continue the grand tradition of running services on an NSLU2 a few years back, but there just aren't any good ARM server boards with lots of RAM and NVME storage).

Re: Start Self Hosting

#119
post #61

Earlier quoted context omitted.

The complaint is fair though. Trying to find a complete or the "correct" guide to something is very difficult even when you already know roughly what you are doing. I took me ages to work out how to setup postfix properly from about 10 slightly different "guides". The Postfix book wasn't even that helpful. There are also lots of very out-of-date guides that might have been OK for 2015 but not anymore. They don't get…

Postfix is a special kind of hell though, in that getting a good setup requires wading though decades of legacy stuff and patching together a bunch of non-default stuff to get, for instance, dkim signing and stuff working right. I've done this before myself, and agree it was super annoying and not fun, but I also think it is potentially the biggest outlier in self-hosting difficulty I've encountered. Lots of services…

I actually found Postfix fairly easy to configure once you have a solid understanding of Email (which took me a good while at first). Dovecot on the other hand...

Re: Start Self Hosting

#120

Self hosting is hard. You need to take care of security, backups, software updates, software installation and so on. Even on something like a QNAP (which can be compared to managed hosting) this can be hard. Flip the wrong switch and you expose something to the world. Missed a security update: your device is now vulnerable. While I host a lot of things myself I can understand self hosting is not for everyone.

> You need to take care of security Easiest solution is to just host stuff on a local network without access to the wider internet. E.g. running on an old laptop/raspberry pi/server in your basement. Sure, that means you can no longer access your self-hosted stuff when you're out of the house, but the tradeoff is peace of mind about your data leaking or worse.

How about add a remote apple host. Not for the world but just you?
Post reply on HN