The CA and NTP server would hum along just fine. The DNS servers, less so: CoreDNS is reading my internal DNS zone from an Amazon Route53 private zone. This wa

The CA and NTP server would hum along just fine. The DNS servers, less so: CoreDNS is reading my internal DNS zone from an Amazon Route53 private zone. This was my way of dealing with running two DNS servers concurrently, but it wouldn't do well in a WAN outage. And, once I lose internal DNS, I lose everything else too I've written about the CA for Smallstep: https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-yubikey/ https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi... I wrote a piece about the NTP server, but I haven't had a chance to post it yet. There are some good resources out there for creating a local NTP server, though. It takes some time and effort to get everything dialed in, because GPS and NTP are both finicky and easy to misconfigure. I'd LOVE to write more about my homelab, but it's a work in progress that continues to evolve, and I haven't documented things as well as I'd like to!