I have questions

No.

Fully agree with the sentiment, but the blog post itself is kinda crap. All it really says is - hey, we’re overcomplicating things, but subscribe to my rss for when I actually start talking about it!

FWIW - starting a reply allows you to copy the original text.

I mean… Normally men measure something other than beards. This is such a weird choice!

I’m a syaadmin now, but self hosting nextcloud is what got me my first IT job. I now host a bunch of stuff (even email!), lemmy included.

how did you decide that you would like to self-host? I wanted my friends to play a cs1.6 map I had created.

dire problems, including those that accumulate over time

That’s not a thing. You create problems over time by experimening in what is, effectively, production load. If all you ever did was install any distro and kept it up to date - not much can break. Granted - shit happens, but it’s incredibly rare.

As an example - I’ve set up my mail server in May 2019. Chose archlinux, because I never wanted to go through a big upgrade. The only exta software installed there is mail-server related. Direct from the repos. I’ve become confident enough that now there’s a nightly cronjob to update the system with a hook to reboot if kernel or init gets updated.

In all those 5 a bit years I’ve had one issue where I hqd to revert a kernel update.

Another example is tang on an ubuntu server. This was at a previous workplace, but essentially it’s a piece of software from the repos. Originally installed on 16.04, has gone without reprovisioning all the way to 22.04. I’ve now left the company, but I hear it’s still running.

Upgrading an ubuntu desktop fleet with a myriad of custom software, on the other hand… let’s just not talk about it.

I’m not the best person to query about backups, but in your situation I would do the following, assuming both server and desktop run on BTRFS:

Have a script on the desktop that starts btrfs-receive and then notifies the server that it should start btrfs-send.

You can also do rsync if BTRFS is not a thing you use, but It would either be expensive storage wise, or you would only ever have 1 backup - latest.

Same as the other commentor. Good read!

Thank you! I like the engineering feel it all.

Could elaborate a bit on the scanner-becoming-camera thing? I’ve never heard of that before.

Absolutely cool picture!

I’ve found this more understandable.

I’ve also hacked together a quick thing for spamwaves that were happening last year here.

The purpose of that script is to ban, but there’re auth bits that might help you get a grasp on your task.

Wireguard works best for private traffic, but you can’t host a public site with that.

Of course you can! Nginx and wireguard on a VPS and actual services wherever you want.

If you can dedicate some time to constant keep up - pick a rolling distro. Doing major version upgrades has never not had problems for me. Every major distro has one.

My choice is Gentoo, but I’m weird like that. Having said that - my email server has been running happily on Arch for just over 5 years now.

The lemmy instance I host is on Debian testing - Gentoo was not available on DO - no issues so far.

Even when it’s mostly containers - why waste time every n years doing the big upgrade? Small change is always safer.

Is this the repo of the tool?

Don’t really have anything to add, but wanted to boost the activity on this post.

That’s not what I meant.

Never had a chance to give syncthing a shot, but nextcloud works very well. On top of that, if you ever want to ditch apple/google - it will also happily sync your contacts, calendar, etc, as well as more niche stuff like bike rides. It can become chonky, but that really depends on how much stuff you’re asking it to do.

It’s kinda funny how we think the 100 watts of a desktop P4 was insane when now the TDP of a high end laptop CPU is more than that.

It really isn’t. Modern mobile cpus barely sip power.

Precision guesswork here, but I’ve had nginx (not on opnsense) redirecting me to the default host quite a few times recently - all times it was me cocking up its config. It could be that nginx is waiting for the actual target until it times out and then just gives a your opnsense gui as the most reasonable response.

I’d start checking its config. Or pasting it here, after removing secrets, it any.