201–210 of 240 posts
Earlier quoted context omitted.
Don't expose anything to the Internet. Use a tunneling tool (Tailscale et al) or VPN
You'll have a hard time hosting websites/projects meant for the public to view, if you don't allow public internet traffic :)
Earlier quoted context omitted.
Depends on your needs. For some Raspberry Pi (ideally with 8-16GB RAM) + SSD can be enough if you are after low power consumption. If you need more power: I had success with HP ProDesk Mini (or any other one-litre PC), you can get these second hand from like $150 and extend RAM and SSDs however you like. You can even pick processor / generation to fit your needs best. These can have consumption from like 30W if I'm n…
> For some Raspberry Pi (ideally with 8-16GB RAM) + SSD can be enough Wut? For many, a Raspberry Pi with 1 GB RAM and the regular sdcard can be enough, you really don't need to go fancy if you don't want to run anything particularly heavy. Or if it's cpu-intensive then you might need the newest Pi or something even beefier but still only the lowest RAM and smallest/slowest storage options (like for WordPress). As you…
Last thing I need is Kubernetes at home
Still running everything from my basement using FreeBSD jails and shell scripts. Sacrificing some convenience? Probably. But POSIX shell and coreutils is the last truly stable interface. After ~12 years of doing this I got sick of tool churn.
Last thing I need is Kubernetes at home
I clicked expecting a list of cool things to self host. Instead I got a list of ways I would never want to host. Mankind invented BSD jails so that I do not have to tie myself in a knot of container tooling and abstraction.
Lord knows why people overcomplicate things with docker/kubernetes/etc.
Earlier quoted context omitted.
You'll have a hard time hosting websites/projects meant for the public to view, if you don't allow public internet traffic :)
We've been running production traffic via Cloudflare Tunnels for over a year with no problems. Ngrok and tailscale both run similar services, too.
Still running everything from my basement using FreeBSD jails and shell scripts. Sacrificing some convenience? Probably. But POSIX shell and coreutils is the last truly stable interface. After ~12 years of doing this I got sick of tool churn.
FreeBSD and jails is so easy to maintain its unbelievable.
I've been running a DigitalOcean VPS for years hosting my personal projects. These include a static website, n8n workflows, and Umami analytics. I used manual Docker container management, Nginx, and manual Let's Encrypt certificate renewals. I was too lazy even to set up certbot.
I've migrated to a Portainer + Caddy setup. Now I have a UI for container management and automatic SSL certificate handling. It took about two hours.
Thanks for bringing me to 2025!
I haven't tried it myself yet. Has anybody else given it a spin?
[0]: https://canine.sh/
Earlier quoted context omitted.
Isn't 95% of it just blocking every port except the service you want to expose, and then making sure everything is up to date and the service is built in a secure way. WAF's etc just hide the fact the code in your service is full of holes.
What's the 5% that's not blocking ports for services you want to expose? Ensuring your infra is built in a secure way is as important as ensuring your service is built in a secure way.