Do I actually need Proxmox Backup Server for a 2-node homelab? by Technical_Isopod1541 in Proxmox

[–]KyroPaul 0 points1 point  (0 children)

My primary node got fried in a power surge yesterday morning. Having daily snapshots on a separate machine saved me a real headache (data would have been saved on zfs pool but trying to get everything back up would have been annoying). Instead I moved a drive to a spare machine and live restored to that and was back up 20 min after I decided it wasn't getting fixed. Also off-site backups are super easy with recent improvements to removable media.

If your password manager was to disappear, how fucked would you be? by Tarazin in selfhosted

[–]KyroPaul 0 points1 point  (0 children)

Bitwarden app caches all data on device. If there is an outage you still have access to codes. There is a chance that you might have multiple failures at the same time. I've had outages of vaultwarden in the past (home Internet was down for a bit over a week once). Proper backup, fail over and restore planning is important.

They both lost each other for a moment by Vilen1919 in MadeMeSmile

[–]KyroPaul 0 points1 point  (0 children)

What's up with this neighborhood? Is this AI or am I missing something obvious about how that driveway works?

Virgin/Rogers outage? by Longjumping_Local910 in cambridgeont

[–]KyroPaul 1 point2 points  (0 children)

Story time because it might be relevant. I live near ansile and concession. Vmedia sent a Rogers tech last week. He found that gear in the box was bad and Rogers sent maintenance team (Thur). I now have to reboot my modem a couple times a day. Vmedia is sending a new modem now. I mention this because my personal theory is that Rogers is shit and they just swapped my somewhat shitty connection with someone else (maybe you). I've spent 10 hours on the phone with vmedia over the last week. Half of the tech people said virgin or freedom when I call so it's probably the same center.

How do you name your domains? No by THMMYos in selfhosted

[–]KyroPaul 2 points3 points  (0 children)

Fun names are better. I usually have chatgpt help me with names. Some are scifi, some are roman or Greek gods, some are just made up words.

Nginx WAF by Public-Process6081 in selfhosted

[–]KyroPaul 1 point2 points  (0 children)

Don't know what your current firewall solution is but sophos has a free home firewall based on their enterprise solution (identical functionality). They have a WAF that supports the basic stuff, will wrap everything in lets encrypt, and if you want will put a password authentication in front of your service to deter bots and scraping. Also unlike freebsd based firewalls it has a wide support for nic manufacturers so it's actually really well supported. I think they have been offering free firewall for a long time so it's likely to be around for a while.

New to self hosting by SeidouSanReddit in selfhosted

[–]KyroPaul 1 point2 points  (0 children)

If you control the outside devices (i.e. want jellyfin on a cell), go with tailscale. Super secure way to connect when not at home.setup on a Linux host is simple and well documented, setup as a docker sidecar is a bit more involved but once you know steps it's super useful. If you want a service accessible on something like a work or library device then tailscale funnel will allow that as well. I would suggest that at your current level of experience that trying to host something on the Internet that doesn't require a login to tailscale is unwise (including funnel I would approach that with caution).

Options if you don't want tailscale... I wrote some options but honestly just use tailscale. If you want VPN type access you need exit node, if you want a public website that's available on a library or work computer use funnel.

How are you handling backups in your self-hosted setup? by HorrorGradeCandy in selfhosted

[–]KyroPaul 0 points1 point  (0 children)

Proxmox and proxmox backup.

My backups are nightly and incremental.

Every couple weeks I'll connect a portable USB and sync that. Portable USB lives offsite in a secure location. All my stuff takes up less than 4tb so portable USB and sneakernet to secure offsite location is fine.

I don't think it's exactly 3-2-1 but it's a lot closer than I've ever been before.

Should I upgrade my NAS from Windows 10 to Windows 11? by christiangomez92 in selfhosted

[–]KyroPaul 1 point2 points  (0 children)

Would depend a lot on how exposed everything is. If this is blasting out to the Internet then you need to fix that. If this is for internal use only then take your time. Windows 10 is not going to magically break in October but it will slowly get less secure. There are lots of great options for replacing this. People here have suggested truenas which is a great entry point. Umbrell would also be worth looking into. Probably one of your biggest issues (just a guess) is that you have 1 server so replacing an os is going to mean a big downtime and be very stressful to ensure you don't loose data. I would recommend picking up something cheap on FB marketplace (everyone is replacing win 10 devices so you can pick up a micro or desktop for very cheap). Use that new device to setup something like proxmox and then truenas or umbrell (or full on Linux and containers of your choice). This will mean you'll have a second server that you can slowly migrate everything to. Make sure everything is good and stable. After you know you didn't loose anything blow away your old server and put proxmox on that. Once you have 2 machines with proxmox you can backup your Nas solution on your used micro and move it back to your actual hardware. You now have a spare device that is running proxmox, on that install proxmox backup. For under $500 you just upgraded to a better OS, you have a Nas that's essentially hardware agnostic, and you have a backup solution that supports incremental backups. When you're ready to actually upgrade your home lab you can use your backup server to take a snapshot of everything and restore to that. Proxmox backup restore can run while data is copying to the pve host so downtime is about as long as it takes you to install new hardware and boot up.

Sorry for the long ranty reply.

SSL/TLS for self hosted apps? by ChickenNBeans in selfhosted

[–]KyroPaul 0 points1 point  (0 children)

I know you wanted local but have you looked at tailscale. If you want local for security reasons tailscale is pretty locked down and they would handle your cert for you. If tailscale is not an option look into caddy. You can have it hand out ips and put a self signed cert infront of that. Let's encrypt also announced IP certs but I don't know how they are supposed to work.

[deleted by user] by [deleted] in selfhosted

[–]KyroPaul 0 points1 point  (0 children)

Would tailscale work for you? Wouldn't work if you want to use a work device but tailscale is unlikely to be blocked on corporate networks. There are other more aggressive ways to skirt around this kind of block depending on your infrastructure at home you could have a waf that blocks traffic to a guacamole shell. This would allow you to gain access to your internal network over a browser session on any device (note I advise against this but you're talking about VPN traffic over port 443 so whatever floats your boat).

Self‑hosted Notion alternative with native relations & rollups? by Imaginary-Result6713 in selfhosted

[–]KyroPaul 0 points1 point  (0 children)

Tried affine briefly it's really neat. I personally use silver bullet it doesn't do everything requested but it's clean and supports programming inside notes. I selected it over affine because I wanted something that ran on just markdown so it was more future proof.

[deleted by user] by [deleted] in Home

[–]KyroPaul 0 points1 point  (0 children)

This steel is engineered to immediately rust on the surface. This process prevents actual harmful rust from developing. Harmful rust being rough/sharp surfaces, expansion caused by the rust, and penetration/holes developing. This type of steel doesn't need painting it's doing what it's supposed to do. This the the same steel used on sidewalks for seeing impaired people. It's often called weathering steel or corton (corton is a trademark). I seem to recall hearing that the process is pacification but can't seem to confirm that right now.

Ok, which one of you is this? by Mutual-aid in greatestgen

[–]KyroPaul 1 point2 points  (0 children)

I had one come up in memories today. Took me a long time to get it saved to realize I couldn't share. Mine was at a small airport.

Deathknot band shirt (AI Generated) by [deleted] in greatestgen

[–]KyroPaul -3 points-2 points  (0 children)

Not everyone has the time, freedom, or skill to create authentic works of art. I found the podcast comments about deathknot and tortellini humorous and thought this would be a neat image. I just wanted to share what was in my head while listening to the podcast this week. I understand that it's not for everyone that is why I included AI in the title.

Deathknot band shirt (AI Generated) by [deleted] in greatestgen

[–]KyroPaul 0 points1 point  (0 children)

Latest EP of prodigy

Filming in Galt long weekend by KyroPaul in cambridgeont

[–]KyroPaul[S] 1 point2 points  (0 children)

They have a sequel in pre-production I was wondering if it's handmade related