**Synology (DS218/220+)**
| NAS | £250/300**Dell Poweredge Tower Server T30**
| Server | £300/400**HP Z420**
| Workstation | £400 ==WIP== #### OS & Applications **Linux** is the most common OS for servers. **Ubuntu**, **Debian** or **CentOS** the most common distributions. **MacOS** would require a Virtual Machine to run properly. #### Internet connection More and more literature point that a home Internet connection may not be the most appropriate way for a server to connect to the Internet. ISPs limit traffic to manage bandwidth and comply to legislations. #### Domain Domain management is important for several reasons: email and email routine can only be defined once per domain. As such, email services (self-hosting, email aliasing) need to be run on separate domains. For self-hosting, the folllowing domain will be used: **mfxm.fr** ```ad-warning title: Warning Sub-domains to be defined with **webhost**. ``` #### Security Security is paramount at the points of connection to the server. SSH protocols are secured but csn be intercepted. Two different ways of protection can be implemented: ##### RSA Key ```ad-info title: Documentation [SSH Key Tutorial](https://www.linode.com/docs/guides/use-public-key-authentication-with-ssh/) [SSH Key Tutorial 2](https://upcloud.com/community/tutorials/use-ssh-keys-authentication/) ``` All documentation to implement such control can be found [[VPS Console Dialogue#Securing Server access|here]]. ##### VPN ```ad-info title: Documentation [SSH VPN](https://openvpn.net/community-resources/how-to/) ``` Not tested. ##### Other security considerations Additional measures can be found below and are in majority described [[VPS Console Dialogue#Editing the Server's SSH config|here]]. ```ad-info title: Documentation [Securing SSH](https://www.redhat.com/sysadmin/eight-ways-secure-ssh) ``` #### Continuity & backups ```ad-info title: Documentation [Local backup](https://blog.ssdnodes.com/blog/vps-backups-simple-overthinking/) [Hot Copy](https://programmerbear.com/how-to-backup-your-entire-server-or-vps-while-its-running-using-linux-hot-copy/) ``` Backups are managed through the **tar** command and dispatched over the network with **rclone**. Instructions can be found [[VPS Console Dialogue#Backing up a server|here]]. #### Server Monitoring ```ad-info title: Documentation [Monit](https://mmonit.com/) [Performance Co-Pilot](https://pcp.io/) [Nagios](https://nagios.org) ``` Monitoring is implemented through a free and open-source tool called [[Configuring Monit|monit]]. --- ### Running multiple services on the same hardware ```ad-tip title: Considerations to start [Tutorial](https://cyberhost.uk/getting-started/) [Caddy tutorial](https://cyberhost.uk/caddy-setup/) [Nginx Proxy Manager tutorial](https://cyberhost.uk/npm-setup/) ``` In essence, to run multiple services on the same hardware, a few basic steps need to be taken to ensure that each service runs properly. | Consideration | Tool | Description |---------------|------|------------**Compartimentalise services into containers**
| **docker** | Creates containers that can be run independently**Simplify docker commands**
| **docker-compose** | Enables to create 'script' for docker commands**Route internet traffic appropriately**
| reverse proxy: **nginx**, **Caddy2** | Enables to route addresses to the appropriate containers and manage SSL certificates (and https forcing) --- ### Self-hosted services A list of FOSS services can be found [here](https://github.com/awesome-selfhosted/awesome-selfhosted) Service | OS | Technical reqs | Description --------|----|----------------|--**Email service**
| Linux | 2GB RAM recommended | self-host an [[#Email service]]**Email aliases**
| Linux | 2GB RAM; ports: 22, 25, 80, 443 | an [[#Email alias service\|alias service]] like [SimpleLogin](https://simplelogin.io) **[[Nextcloud]]** | Linux | 500M RAM; MySQL & SQL Lite; PHP 8.0; Apache 2.4 with PHP or nginx with PHP | [[#Personal cloud syncing]] instance**Instant Message**
| Linux | 2/4GB RAM; ports & other extensions | [[Element]] instance for [[#Instant Messenging]]**VPN**
| Linux | 500MB RAM | Host a private [[#VPN]] #### Email service Email service can be fully built but has many components to it: server, database, imap, caldav, carddav, DNS specificities, spam whitelisting as well as security (server access & spam filtering). It can therefore be tideous to build an email service from scratch. Pre-packaged solitions exist to manage all components: 1. [IRedMail](https://www.iredmail.org/) 2. [Mail-in-a-Box](https://mailinabox.email/) 3. [Docker-mailserver](https://hub.docker.com/r/tvial/docker-mailserver/) which is command-line-only and to be built more extensively than the two other alternatives ```ad-info title: Documentation [Reddit Documentation](https://reddit.com/r/selfhosted/comments/6h88qf/on_selfhosted_mail_servers/) [Tutorial](https://github.com/ajgon/self-hosted-mailserver/blob/master/docs/nsa-proof-your-e-mail-in-2-hours.md) ``` #### [[Email alias]] service ```ad-info title: Documentation [Tutorial](https://github.com/simple-login/app) ``` #### Personal [[/Nextcloud|cloud]] & syncing ```ad-info title: Documentation [Tutorial](https://nextcloud.com/athome/) [Tutorial2](https://blog.ssdnodes.com/blog/installing-nextcloud-docker/) ``` ```ad-tip title: Build your own [Web interface](https://github.com/mickael-kerjean/filestash) ``` #### Instant Messenging ```ad-info title: Documentation [[Element]] ``` #### VPN Easy service to set-up through [WireGuard](https://www.wireguard.com/) ```ad-info title: Documentation [Tutorial](https://www.makeuseof.com/how-host-own-vpn/) ``` ```ad-note title: VPS plans [Cheap single-location VPN VPS](https://my.webhorizon.in/order/config/index/nat/?group_id=24&pricing_id=282) [With multi jurisdiction option](https://natvps.net/) ``` #### ShortURL Through Wordpres with [Thirsty Affiliates](https://thirstyaffiliates.com): free of charge. #### Self hosting ideas ##### Photos ```ad-info title: Photoprism Self-hosted photo management solution: [here](https://photoprism.app/) ``` ```ad-info title: Piwigo [Website](https://piwigo.org/) ``` ##### CMS ```ad-info title: Hugo Open source CMS solution: [here](https://gohugo.io/) ``` ##### Tools | Tool | Self-hosted service | Link to tutorial | Sub-domain |------|---------------------|---------------|----------**Password manager**
| **Bitwarden** | [here](https://cyberhost.uk/selfhost-bitwarden/) | pw-manager**DNS resolver**
| **AdGuard Home** | [here](https://cyberhost.uk/adguard-setup/) | dns-resolver**Note-taking app**
| **[Notea](https://cinwell.com/notea/)**, **[Turtl](https://turtlapp.com)**, **[Boost Note](https://boostnote.io)**, **[Trilium](https://github.com/zadam/trilium)** | [Notea](https://cyberhost.uk/notea/), [Turtl with docker](https://github.com/turtl/server#running-the-server) | notes**Git instance**
| **[Gitea](https://gitea.io/en-us/)** | [for Gitea](https://www.techrepublic.com/article/how-to-install-the-self-hosted-git-server-gitea-on-ubuntu-18-04/), [Gitea with docker](https://www.how2shout.com/linux/gitea-on-docker-installation-of-self-hosted-git-service/), [Gitea with docker-compose](https://docs.gitea.io/en-us/install-with-docker/) | git Database: MySQL, MariaDB, Postgres | App | Database |-----|:----------: **Turtl** | Postgres **Gitea** | MariaDB **AdGuard** | *none* **Bitwarden** | *none* ```ad-info title: VPS ideas [MikroVPS - FR](https://my.mikrovps.net/cart.php?a=checkout&gid=34&language=English&pid=584&promocode=LEB2021LXC50&utm_source=lowendbox&utm_medium=display&utm_campaign=lbpromo2021) ```