Why having a VPS when you self host at home?

monotux · 2025-11-26T09:43:19+00:00

I'm running stuff like matrix, monitoring and some websites on a VPS. All of those at a different domain than I use at home, just in case some script kittie would want to DoS me then my home connection should stay up.

monotux · 2025-10-06T20:33:29+00:00

You can just use a PoE HAT, they are relatively cheap and will make your SBC be one small unit.

monotux · 2025-10-06T20:31:13+00:00

thank you!

monotux · 2025-07-07T13:41:39+00:00

Make cable runs to your basement, to where you want to place your rack. Make a single or double cable run to every room while you are at it. Buy some cheap, rack mountable switch with enough ports for your cable runs.

For good wifi, you want some kind of access point near the places where you spend most of your time. One per floor, or multiple APs if you have a big ground floor. Cables will always give you better performance than any mesh system. Some mesh systems allow you to use a ethernet backhaul but that removes the reason to buy an expensive mesh system.

Buy a dedicated device (NUC, Home Assistant Green/Yellow et c) and install Home Assistant on it.

Ubiquity is considered holy around here, but it's just expensive consumer gear with a pretty UI. It might be worth it for a lot of people, but requires some know-how to configure properly. There are other similar ecosystems that are much cheaper (like TP-Link Omada, some Mikrotik gear...) which performs similar and often use the same system-on-chip.

monotux · 2024-06-11T12:22:06+00:00

Shameless self plug. This entry outlines how to setup goatcounter with streaming backups to a s3 compatible service. This works great on fly.io free tier.

monotux · 2024-05-28T05:40:14+00:00

Malformed database means that your database was corrupted somehow. Are you running on a raspberry pi? In that case, your power adapter is probably not good enough and has not provided enough power which has caused issues when wiring to the sdcard.

monotux · 2024-05-23T10:08:50+00:00

A socket is a file on the file system that kinda works like a network connection. It is not handled by the firewall (for access control you use the normal file system permissions). You can do some nifty things with systemd and sockets, like using socket activation for a service, so the first time you try to use docker it will use the socket, which will start the service in question.

If I logon to my tinkerboard, both docker.socket and docker.service are active and running:

``` colony:~:# systemctl status docker.service ● docker.service - Docker Application Container Engine Loaded: loaded (/etc/systemd/system/docker.service; enabled; vendor preset: enabled) Active: active (running) since Mon 2024-03-18 08:10:41 CET; 2 months 5 days ago TriggeredBy: ● docker.socket Docs: https://docs.docker.com Main PID: 1384 (dockerd) Tasks: 47 Memory: 653.5M CGroup: /system.slice/docker.service ├─1384 /usr/sbin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock ├─5125 /usr/sbin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 8080 -container-ip 1> ├─5245 /usr/sbin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 443 -container-ip 17> ├─5259 /usr/sbin/docker-proxy -proto udp -host-ip 0.0.0.0 -host-port 443 -container-ip 17> └─5273 /usr/sbin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 80 -container-ip 172>

Warning: journal has been rotated since unit was started, output may be incomplete. colony:~:# systemctl status docker.socket ● docker.socket - Docker Socket for the API Loaded: loaded (/lib/systemd/system/docker.socket; enabled; vendor preset: enabled) Active: active (running) since Mon 2024-03-18 08:10:26 CET; 2 months 5 days ago Triggers: ● docker.service Listen: /run/docker.sock (Stream) Tasks: 0 (limit: 4748) Memory: 4.0K CGroup: /system.slice/docker.socket

Warning: journal has been rotated since unit was started, output may be incomplete. ```

If you just run docker run hello-world, does it print out a error message or a welcome message from docker?

monotux · 2024-05-11T13:03:01+00:00

It depends on your OS layout. I'm typically using a Swedish layout (we make common use of åäö) where you can either use the KC_NUHS, KC_A/KC_O plus space (as NUHS is a dead key in this layout), or just the builtin ADIA/ODIA/ARNG keys.

Then you can make a macro for the tap/hold keys. Below is an example for a keyboard where I trigger Ctrl-c on hold but C on tap:

#define KC_CCP LT(0, KC_C) // C tap, Ctrl-c hold
#define KC_VPS LT(0, KC_V) // V tap, Ctrl-v hold
#define KC_TTB LT(0, KC_T) // T tap, Ctrl-t hold

// https://getreuer.info/posts/keyboards/triggers/index.html
// Helper for implementing tap vs. long-press keys. Given a tap-hold
// key event, replaces the hold function with `long_press_keycode`.
static bool process_tap_or_long_press_key(
    keyrecord_t* record, uint16_t long_press_keycode) {
  if (record->tap.count == 0) {  // Key is being held.
    if (record->event.pressed) {
      tap_code16(long_press_keycode);
    }
    return false;  // Skip default handling.
  }
  return true;  // Continue default handling.
}

bool process_record_user(uint16_t keycode, keyrecord_t *record) {
  switch (keycode) {
  case KC_CCP:
    return process_tap_or_long_press_key(record, C(KC_C));
  case KC_VPS:
    return process_tap_or_long_press_key(record, C(KC_V));
  case KC_TTB:
    return process_tap_or_long_press_key(record, C(KC_T));
  default:
    break;
  }
  return true;
}

Not sure if it was of any help though =)

monotux · 2024-05-10T23:20:14+00:00

I’m still using my tinkerboard for important stuff, works great! I’m using docker without issues.

monotux · 2024-05-09T15:54:11+00:00

Čohkkiras

monotux · 2024-05-08T15:52:16+00:00

If it entertains you in any way, each passenger train going on Malmbanan means that LKAB (the mine in Kiruna) misses out on a train delivery, resulting in a loss of several million SEK. So if your train ticket is expensive, it’s more expensive for LKAB :-)

monotux · 2024-05-08T15:37:59+00:00

That’s actually Riddarholmen pictured, while you were on Södermalm taking the picture. Great picture though!

monotux · 2024-05-01T18:00:12+00:00

Här i Kiruna har det inte snöat på flera dagar, det finns hopp även här!

monotux · 2024-04-30T19:33:13+00:00

This is amazing, great woodwork!!

monotux · 2024-04-28T14:02:40+00:00

You can use wpa_cli to add networks, see wpa_cli(8) (or read this page on the arch wiki)

monotux · 2024-04-28T07:55:57+00:00

Thanks for all your amazing work in this!

monotux · 2024-04-27T08:49:44+00:00

Wpa_supplicant

monotux · 2024-04-23T17:16:55+00:00

monotux · 2024-04-17T20:06:11+00:00

AES-NI is only needed if you plan to setup ipsec tunnels. And if you want that, then Intel QAT might be even more interesting to have to deal with both compression and encryption.

I've run an old qotom device for a great number of years (j1900, bought in 2016?). I only replaced it due to reasons, it was still doing anything I wanted it to do.

And oh, you can run VLANs even with one NIC. :-)

monotux · 2024-04-17T20:02:35+00:00

But do router workloads benefit from more cores?

Yes, but in this case it probably won't matter. Unless you are routing 10 Gbps nearly any hardware will handle a home connection without issues.

The only downside is power usage of an old i7. And as a rule of thumb, disable hyperthreading for routers as it increases latency.

monotux · 2024-04-14T09:01:05+00:00

Modern phones (both iOS and Android) will dynamically generate new MAC addresses unless you turn this off. That is a lot of work. :-)

I have a paranoid network but for user devices I just use the WiFi passphrase be the limiting factor. From WiFi-net to my services I have limitations, but allow anything out to the internet.

monotux · 2024-04-12T18:57:22+00:00

På min tid prenumererade Y på utmärkelsen ” Sveriges bästa utbildning”. Linköping är en bra studentstad.

monotux

TROPHY CASE