4 ms·
I've been steadily moving everything back home ever since Snowden revealed just how much snooping is going on, and with the last few years worth of scandals, it
by 8fingerlouie 8y ago
I've been steadily moving everything back home ever since Snowden revealed just how much snooping is going on, and with the last few years worth of scandals, it seems i've made the right choice.
Initially i went the Raspberry Pi route, and in a few months i had 4 or 5 of them running, which was where it started turning into a chore. While i enjoy tinkering, i don't particularly enjoy keeping a host of machine up to date.
Fast forward a couple of years, and my home setup now looks like this :
- UBNT EdgeRouter for that sweet affordable hardware L2TP/IPSec VPN.
- Intel NUC6, Running everything internet facing in FreeBSD Jails.
- Intel NUC7, Running everything internally available through Docker, along with Time Machine backups.
- Synology DS716+, Holds all data from both NUC machines, as well as personal files (documents/photos/music/movies)
Resilio Sync is running on the external NUC to provide an "always on" node.
I have a couple of ODroid HC1 boxes that holds my backups, one at home and one at a remote location.
The only thing i have yet to migrate is mail, which is still located at GSuite.
I've moved several times, but every time i decide it's not worth the effort. Since "everybody" uses GMail every mail i send will eventually get indexed as well, regardless of where i store my own mail.
I use GSuite for hosting 5 domains, and i've yet to find an alternative that doesn't require either lots of money or lots of administration from me.
- Angostura 8y agoSorry to go off topic, but could you explain how you;re doing Time Machine backups to the NUC - sounds very interesting.
- 8fingerlouie 8y agoNothing magic. I've installed netatalk from the guidelines on the wiki http://netatalk.sourceforge.net/wiki/index.php/Install_Netatalk_3.1.11_on_Debian_9_Stretch http://netatalk.sourceforge.net/wiki/index.php/Install_Netat... and simply expose a shared drive through it.
- tonyedgecombe 8y agoNetatalk is an AFP[1] server. [1] https://en.wikipedia.org/wiki/Apple_Filing_Protocol https://en.wikipedia.org/wiki/Apple_Filing_Protocol
- Angostura 8y agoMuch obliged.
- stock_toaster 8y agoRecent versions of samba support time machine as well (via vfs fruit), if you are using high sierra (maybe sierra or later?).
- 8fingerlouie 8y agoSadly Debian stable is still stuck on Samba 4.5, and vfs fruit isn't available until 4.8, which is in testing, but who in their right mind runs a server off of -testing :) Same story with netatalk, latest version is 3.1.11, and debian has been on 2.5 forever, with 2.6 in testing.
- icebraining 8y agoI've set up a personal mail server using Debian + Exim + Dovecot (with sieve). It took a bit of time at the start, but besides the couple of hours it took to add DMARC a couple of years ago, and checking the backups are working, I never have to touch it. I give out a different address for each company, so dealing with spam is just blacklisting it (only happened an handful of times).
- 8fingerlouie 8y agoMy main issue is that my ISP blocks SMTP(S) ports, meaning i'll have to host it on a VPS somewhere. While i would avoid being indexed, i wouldn't truly own my data anyway. I have a 300/300 mbit fiber connection, so in theory i could mount the storage over VPN, but that just adds more places things can go wrong. Also, i remember from running my own mailserver 5-8 years ago, that keeping it off various spam blacklists is a job in itself.
- icebraining 8y agoYes, ISP restrictions are a pain. If they only block outbound connections to port 25, you could receive directly, and use a smarthost (on a VPS or an email service) just to send. That's what I did when I ran it at home (my ISP didn't block, but the IP range was listed on Spamhaus PBL). As for blacklists, that's not been my experience at all, but YMMV.
- fallenhitokiri 8y agoWhat's your experience with spam filters from Google, MS, etc etc and (if it happened) the server being down? Do most senders retry mail delivery according to the RFC?
- icebraining 8y agoHaven't had problems with spam filters. I did spend some time making sure everything was good (SPF, DKIM, DMARC, reverse DNS, etc), and I don't send any bulk mail. Yes, senders do retry; I got plenty of back mail after being down for a couple of days, back in 2015.