Spyke

Replies

Comment on

For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?

I moved to closing everything down and wireguarding in to home 5 years ago and I'm glad I did. I only expose game server these days which have a different vuln profile.

If/when I open up for Jellyfin/etc, I'll probably run them on a different box to my NAS in a DMZ with strong firewall rules. And use a VPS for anything else that doesn't require NAS storage to reduce blast radius.

Can we go back to late 90s internet yet?

Comment on

Migrated my Docker Compose homelab to OpenTofu

I've been doing IaC for years on my homelab. Once I outgrew rockets impose and a single NUC, I ended up going full regard on kubernetes forna few years, before getting sick of the complexity and upkeep and moving to a nix stack for my NAS and nuc

Tip;: if you haven't already look at using renovate bit to run on your repo and update your container tags, it's great to manage updating your containers in a controller fashion

Current nix
https://github.com/truxnell/nix-config

Deprecated k8s
https://github.com/truxnell/home-cluster

Comment on

How do you monitor your servers?

Cockpit on each server (microos) and bezel for a lite centralized monitoring/alert stack. I have a bespoke gitops on each server running ansible hourly, and ntfy pings for failure on these. Also healthchecks.Io for heartbeat/backups, other critical infra checks

You reached the end