Also at k3can@mastodon.hams.social

  • 0 Posts
  • 9 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle

  • I self host.

    I use nginx as a reverse proxy with crowdsec. The backends are nginx and mariadb. Everything is running on Debian VMs or LXCs with apparmor profiles and it’s all isolated to an “untrusted” VLAN.

    It’s obviously still “safer” to have someone else host your stuff, like a VPS or Github Pages, etc, but I enjoy selfhosting and I feel like I’ve mitigated most of the risk.




  • I have a couple Libre Office files where I document the non-technical stuff for my own quick reference, like network layout in Draw, or IP and port assignments in Calc. I use a git repo to store and organize podman scripts, systemd unit files, configs, etc. Probably not the most elegant solution, but it’s simple and FOSS.

    Reverse proxy is Nginx Proxy Manager.





  • Another option would be to redirect logs to a ramdisk. That’s what I’m doing on a RPI to try to minimize writes on the sd card. The biggest downside is that you lose your logs when you power off the device, but if the alternative is not having logs at all, I think it’s still a better option.

    Of course, installing a proper drive is still the best solution.