I’m still on 10.11. I guess is best to do a few intermediate upgrades just in case? Though an user ok the forum said it had no issues upgrading directly from 10.11

I have like 30 different services running on the same machine.

That’s why you want to use some container solution, I use docker for simplicity.

Also raspberry pi is not great for self hosting. Any cheap x64 machine will be much more powerful for the same price, and have less compatibility issues.

I’m a little paranoid, so this is my security set up.

SSH, blocked at firewall level, only allowing specific local IP to access port 22. Also authentication is done by key, with password disabled.

Most services are local only and I access them through wireguard VPN when I’m outside my home.

For services that need a domain name and be public facing, I use a reverse proxy, with the following protections:

• Very restrictive geoIP block, only my country can access.
• Restrictive rate limiting.
• Crodwsec, with community lists, a pluging for open lists, community rules and my own very restrictive set of rules for banning attackers. (For instance as soon as the requested path contains “.env” that’s an instant ban, no second chances).
• Monitoring through grafana.
• Some complex services that need a valid tls handshake but I only want to use them myself have a setup when they are technically open to the net, to get let’s encrypt, but the server rejects every IP request but mine.

Recently I also reduced some noise, surface attack, deleting the A register from my second level domain and using an obscured target for the CNAME records. I also want to delete the www subdomain as it gets a lot of uneeded noise.

You have anything online you will be hammered by bots trying to get through. That’s the sad reality of the world we live on. It has been like that forever. I get hundreds of bot malicious scans on my server each day.

All that’s left is to secure everything as hard as you can so they cannot break through.

“chemod”

I didn’t turn it down, so it’s obviously up.

They belong to me.

I have as good as a claim on the Islands as Argentina.

Sure as hell the fascist military Junta wasn’t right. I can tell you that.

People who has always live there?

The Maldives has never had Spanish/Argentinian population.

Argentina only claims it based on physical proximity, not on the will of its population.

Precog bouncer. Asigned to the daemon of future cybercrimes. Obviously.

I’m using it. It’s good. Even without the cloud services the bouncer and scenarios are more powerful than fail2ban.

Shame about no self hosted web ui but someone posted here a project I’m ought to look up oncw I arrive home.

Also it’s again the false sense of security pf “if you don’t use vibed apps you’ll be fine”, making people forget basic security procedures.

I, for instance, had a service vulnerable and discontinued without noticing for months. It was something 100% made before LLM was a thing. Still had unpatched vulnerabilities and the project was abandoned. It was my fault for not checking more often is the services I host are safe or not.

I use AIO approach with jellyfin but I’m thinking about changing it.

I like how jellyfin handles music, but the search feature is unusable with so many files.

Each time I search for a movie it search through thousands of music files and music people. And jellyfin search feature is bad as it is. I’m waiting for them to fix ot but it doesn’t seem like it.

So maybe taking music out would make that feature usable again.

This isn’t new at all. Those devices have existed forever.

Luckily being sold on TikTok they will be so crappy that they won’t even be able to property track anyone.