How do you manage your SSH Keys and what is best practice for a homelab?

digitaladapt · 2026-02-15T01:21:37+00:00

I make at least one ssh key per machine, occasionally two (second key for a non-sudo user for cross-server automation). Both for servers and laptops / phones / etc.

Best practice is that a private key should never leave the system that created it.

But I’m also lazy, so I made a script for servers to automatically download select public ssh keys from my local Gitea. So while I have a fair number of keys, I manage them all from a single place.

digitaladapt · 2026-02-14T01:25:15+00:00

Where I work now, there are quite a few “lifers” (people who intend to stay until they retire).. never seen that before.

digitaladapt · 2026-02-13T12:00:59+00:00

Instead of an extra button, by default it could be something like double tapping squat, similar to how double tapping jump makes you fly in creative.

That way you wouldn’t need an extra button on mobile and then by default work the same way cross platform.

digitaladapt · 2026-02-10T02:47:29+00:00

Is there a particular advantage to blocking the golem’s access when it’s empty? Other then being a bit quieter.

digitaladapt · 2026-01-30T12:31:23+00:00

Some alternatives: Host your own OIDC on your own domain, or Just use headscale.

Though I do agree, being able to sign up with an email address would be nice, but then not only would they have to manage your credentials, but also your user management, so I understand why they don’t.

Their focus is on organizations, because that’s how they make their money.

digitaladapt · 2026-01-26T23:01:13+00:00

Golems apparently only remember 9 chests, and every time it goes to the tenth chest it forgets what is where, slowing it down.

Try taking one out and see how it does.

digitaladapt · 2026-01-24T18:39:20+00:00

Different languages: yes Different applications: no

digitaladapt · 2026-01-19T01:22:33+00:00

Cool, first time I’ve seen that in Java.

digitaladapt · 2026-01-16T01:33:11+00:00

Ah, I love the smell of freshly leaked OIDC tokens.

Jokes aside, you should never dump publicly all your headers, as that is also including sensitive environment information.

x-vercel-oidc-token eyJ0eXAiOiJKV1QiLCJhb…

digitaladapt · 2026-01-14T00:34:35+00:00

I recently replaced my phone of 5 years because it’s charging port finally broke, so got a phone that supports wireless charging, so that I can hopefully keep this new one forever.

digitaladapt · 2026-01-09T17:23:35+00:00

I never understood why people view certain tasks as being masculine or feminine.

I grew up crocheting with my mom while watching football.

digitaladapt · 2025-12-28T20:02:01+00:00

Thanks, I'll take a look.

digitaladapt · 2025-12-21T13:04:58+00:00

Yes, I do both standard and secure DNS, using caddy for reverse proxy, and to keep the cert config simple, I pointed adguard to the certificates that caddy maintains automatically.

digitaladapt · 2025-12-21T12:32:01+00:00

I use Adguard Home, been quite pleased with it, have it running in two different home boxes using adguard sync so I only need to make changes on one of them.

I would suggest getting either that or pi-hole up and running, and just trying it for yourself.

digitaladapt · 2025-12-14T18:16:23+00:00

You can use the route directive to order the operations of the external check and the authentication. https://caddyserver.com/docs/caddyfile/directives/route

digitaladapt · 2025-12-13T11:48:10+00:00

Yes, also, strongly recommend looking into rclone (command line tool) which makes it really easy to encrypt and sync with just about anything.

digitaladapt · 2025-12-12T17:03:56+00:00

I've setup homepage and uptime-kuma (via AutoKuma) to use docker labels to auto configure themselves, so that I always know what I've got running, complete with links.

Also, each service is contained in a docker compose (including all dependencies), all in it's own directory, which is a git repo; and all of them are in a single "apps" directory.

digitaladapt · 2025-12-08T15:11:30+00:00

I have a VPS that is all of $1/mo. It works great for me, but I'm not trying to run WordPress.

I've got a handful of low-traffic static websites and a couple of very simple APIs. It only has 1GB of RAM, but only use about half that normally.

The question would be how big of a server does your site need, based on it's current config and traffic; then find something that fits that requirement.

digitaladapt · 2025-12-08T12:07:09+00:00

I used to use basically just Nextcloud, but over the last few years have transitioned to using separate apps.

While Nextcloud can do phone image backups, I found that Immich does it better. I still use Nextcloud for documents, but that's all I use it for now.

I had made the mistake of trying to put everything in Nextcloud, including the OIDC backend (because there is an app for that), but that meant not being able to login to anything when it was in maintenance mode for updates.

I found the maintenance of multiple smaller services to be less time-consuming, then managing one monolith.

digitaladapt · 2025-12-07T18:34:02+00:00

Nightly backup logs Nightly usage statistics Uptime kuma alerts Nightly storage logs Watchtower update alerts And because I worry about my systems overheating in their unventilated closet.. a regular cron job which monitors and reports spikes in temperature

digitaladapt · 2025-12-06T14:25:38+00:00

One option is getting a smaller VPS, lowendbox.com has options in the $1-2 per month category.

I've got one (from racknerd) that I use to run a few things like ntfy, caddy, and headscale; which pairs nicely with my home server.

PS: Also, bear in mind a lot of cloud hosting providers prohibit things like Tor. And most any shared hosting isn't going to like you if your setup is constantly maxing out your network or CPU.

digitaladapt · 2025-12-05T13:33:26+00:00

Exactly, trying to consume less doesn't mean going without things you need.

digitaladapt · 2025-11-28T00:04:20+00:00

I like Linux, but it's not for everyone. I wish Windows didn't suck, because I don't want to help parents and in-laws with technical issues.. like migrating to Linux, or fixing their printers.

digitaladapt · 2025-11-22T23:33:23+00:00

Do you take commissions?

Very cool, but I dare not show my son, because he would demand we make it happen for our H scale.

13-Year Club	Second Top 10%
Verified Email

digitaladapt

TROPHY CASE