<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi All<div class="">As a relative newbie, I have had a bit of success doing exactly what Craig asked on fully self hosted servers..</div><div class="">These servers are redundant Dell SFF PCs picked up from eBay for about 75-80 a throw There are 3 of them</div><div class="">I install Ubuntu (Thats my drug of choice) and then run them on my own network. </div><div class=""><br class=""></div><div class="">The services I run are</div><div class="">Nextcloud, cloud server</div><div class="">ZonemInder CCTV</div><div class="">SickGear TV Torrent snatcher</div><div class="">HomeAutomation which runs the IOT</div><div class="">Wekan ( A Trello-like Kanban board)</div><div class="">Bitwarden Password manager</div><div class="">A Plex Media Server</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">I have a couple of domains, and run each service as a subdomain (So nextcloud runs on <a href="http://nc.example.com" class="">nc.example.com</a>, zone minder runs on <a href="http://zm.example.com" class="">zm.example.com</a> )</div><div class="">All of the web traffic is redirected to my home IP address and the port 80 & 443 traffic is forwarded by the router 192.168.0.1 to 192.168.0.7 which runs apache2 and I use as a web-proxy, directing the appropriate sites further downstream</div><div class=""><br class=""></div><div class="">(I actually drop all port 80, plain http traffic and only allow https, and use free certificates given by lets encrypt using their certbot)</div><div class=""><br class=""></div><div class="">IMHO this has a couple of advantages </div><div class="">1) My data on my hardware</div><div class="">2) No/Low costs after initial outlay</div><div class=""><br class=""></div><div class="">And a couple of downsides</div><div class="">1) It can be time consuming to set up</div><div class="">2) It is vulnerable to hardware failure</div><div class=""><br class=""></div><div class="">I think 1 is a feature not a bug, what else am I doing during lockdown, and 2 can be ameliorated by a backup regime, either automatic or manual</div><div class=""><br class=""></div><div class="">If someone breaks in, was a question that I asked myself and came to the conclusion that most of the stuff I want to run is fairly secure out of the box, It is run behind https and firewalls, and teh greatest weakness of mine or any other systems is weak or reused passwords</div><div class=""><br class=""></div><div class="">Can this be done on VPS, yes, but I would suggest that doing it yourself is an excellent learning experience</div><div class=""><br class=""></div><div class="">If you contact me direct I am happy to let you have a look</div><div class=""><br class=""></div><div class="">Cheers</div><div class="">Richard</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 6 Mar 2021, at 18:15, Craig Lynch via Newark <<a href="mailto:newark@mailman.lug.org.uk" class="">newark@mailman.lug.org.uk</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">There are a considerable amount of questions to read and consider here so grab a cuppa…<br class=""><br class="">I've been thinking about how to 'de-google' and 'un-facebook' oneself for a while now. As days pass and the extent to which on-line privacy invasion continues, I feel it is time I should do something about it for myself.<br class=""><br class="">I've seen a few videos and read articles on how to easily set up one's own VPS and such from the likes of these:<br class=""><br class="">* <a href="https://videos.lukesmith.xyz/videos/watch/591bf5dd-b02f-40f7-a2cc-b4929c52cb51" class="">https://videos.lukesmith.xyz/videos/watch/591bf5dd-b02f-40f7-a2cc-b4929c52cb51</a> - Luke Smith setting up a VPS with a web server and mail-wizard in one take.<br class="">* <a href="https://www.youtube.com/watch?v=dDddKmdLEdg" class="">https://www.youtube.com/watch?v=dDddKmdLEdg</a> - A walk through of installing Synapse+Riot+Jitsi from scratch on Debian.<br class="">* <a href="https://join.lemmy.ml/docs/en/administration/administration.html" class="">https://join.lemmy.ml/docs/en/administration/administration.html</a> - Information for setting up a Lemmy instance.<br class=""><br class="">just to scratch the surface of my browsing on the subject.<br class=""><br class="">Are there risks to running all of these together in a VPS for my own use? Of course, staying on top of it is the challenge, right?<br class="">Maintaining such a server, (that would perhaps do all of these things for me) could be challenging for a number of reasons, primarily staying on top of security updates (I imagine that this can be easily automated), and secondarily, if I break it, I get to keep both pieces and finally the eternal worry of,<br class="">"What if someone breaks in?"<br class="">One will always be concerned about the data being stored on Someone Else's Computer™, since of course, that's part of why we're looking at this, and to that end, is it feasible to self host? Surely it can't be that traumatic to set up a personal server along with the DDNS requirement ?<br class="">Modern consumer routers from ASUS and tp-link to name a couple (not a recommendation of either) seem to have DDNS services available within their firmware and as such, reaching a server on your home network can be easily achieved.<br class="">Can one sensibly configure this such that a web facing server is kept separate from one's home network and 'the Internet' isn't let in?<br class=""><br class="">It seems there are ways to reduce the noise of people attempting to break in too:<br class=""><br class="">* <a href="https://withblue.ink/2016/07/15/stop-ssh-brute-force-attempts.html" class="">https://withblue.ink/2016/07/15/stop-ssh-brute-force-attempts.html</a><br class="">* <a href="https://www.techrepublic.com/article/how-to-block-ssh-attacks-on-linux-with-denyhosts/" class="">https://www.techrepublic.com/article/how-to-block-ssh-attacks-on-linux-with-denyhosts/</a><br class="">* <a href="https://fedoramagazine.org/protect-your-system-with-fail2ban-and-firewalld-blacklists/" class="">https://fedoramagazine.org/protect-your-system-with-fail2ban-and-firewalld-blacklists/</a><br class=""><br class="">So, I ask for comment, is it worth it? Is it freeing to be in control of your own server and your data?<br class="">Should one even bother with a server at all for IM and try to use something decentralised like jami:<br class="">* <a href="https://jami.net" class="">https://jami.net</a><br class="">and encourage others to do the same?<br class="">There seems to be a million-and-one VPS and domain providers out there with all sorts of options to choose from; are there any particular VPS providers that you've had good experience with?<br class="">If you have done this yourself already, what are your experiences of the set up, is it really as simple as the videos and such describe to do this in a truly secure manner?<br class="">What about backup? Should one do this with the intent of backing it up from home, downloading from it regularly?<br class="">Once things are locked down in terms of configuration, does the worry of break-ins become, less?<br class=""><br class="">Let me know what you think,<br class=""><br class="">C.<br class=""><br class="">-- <br class="">Newark mailing list<br class=""><a href="mailto:Newark@mailman.lug.org.uk" class="">Newark@mailman.lug.org.uk</a><br class="">https://mailman.lug.org.uk/mailman/listinfo/newark</div></div></blockquote></div><br class=""></div></body></html>