4 ms·
Related: my latest discovery is Thunderbolt networking. I have my main machine with everything on and my personal machine I use for testing and web browsing. T
by Theodores 4y ago
Related: my latest discovery is Thunderbolt networking.
I have my main machine with everything on and my personal machine I use for testing and web browsing. They both have access to the same files at warp speed. If I then disconnect I can use wifi or I can use the internet.
The lack of latency enables keyboard/mouse sharing across my two machines to work seamlessly. Finding files is at native speeds.
The two machines 'research' and 'development' on their little Thunderbolt connection backup with rsnapshot to a low power NUC that just does backups and hosts 'assets' (images).
The assets sync with rsync to their respective project folders, the rest of the project is updated on a per machine basis with version control and deployment scripts.
I have the home router accessible by FQDN with reserved MAC addresses and port forwarding. This sits behind a CDN that is there to fend off any unwelcome visitors as well as to experiment with content delivery. It is my take on a locked down 'origin server'.
If you setup all of the networking options, for example NFS, SSHFS and SAMBA then you can create a network that can be used by wider members of the team working from home. For example art workers.
If you have buy in from the artworkers then consider NextCloud etc.
I run certbot on the local machines, so everything is https FQDN rather than IP addresses.
Motivation for this setup is in part ease of testing on mobile. I have no use case for wanting to ssh in or browse my file system from my phone.
I do not like using a VPN and setting up OpenVPN is not something I enjoy. I like UFW, bare metal, mod security, public/private key and generally upping my security game without there being passwords. I have 2FA for lots of things now.
I can share my work in development without it being on the official staging server, I can even check the logs to see if interest has been expressed.
For email I don't trust myself to maintain and update that bale of Postfix and all the rest of it. Not bothering with email (I run mailhog) is a good way to cop out of building a full beast of a server.
I use JetBrains Space to keep organised. It does lots of things that mean I can access my todo list and glorified bookmarks, not to mention repos, anywhere including on my phone to some extent.
This means that I don't really have to use a dropbox clone. I have a single source of truth on my backup server for the 'assets' that need to by rsynced across places. I can casually surf my LAN wherever I am or do things in my IDE with a ssh mounted drive if I need to get to the /etc folder (which is not shared).
Soft links are your friends, as are hard links.
By all means setup something that does every possible scenario, however, you might find it is just going to be people in the wider team that need a Dropbox feature, normal backups with rsnapshot work great, rsync with its options to exclude stuff is good for sharing to development environments in combination with version control. With router configuration and FQDN you can make this work elegantly. Finally, Thunderbolt networking in your own home is a good way to use your personal machine to test your work at silly speeds.
- dv35z 4y agoWow, never knew about Thunderbolt networking, thanks! NextCloud - been hearing a lot about this. What’s the setup/upkeep/maintenance like? Where are you hosting it? That VPN idea - would love to keep things accessible by IP whitelist, or just some way that the server is not being scanned for vulnerabilities on the regular…
- Theodores 4y agoThe CDN with what it does it good to learn. However, you have your home router and you just want 22/80/443 port forwarded at a minimum, 80 is just for certbot. That is the basis of the security. I should also say I like configuring Grafana and other system monitoring tools. This all sits behind the home router so no hosting fees. Sure the IP address can get reissued and changed but I am okay running that risk. Thunderbolt 4 cables are not USB C cables, they cost more but they are cheap compared to other networking solutions for point to point.