melchiorbv
/
Obsidian
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'c145565e2c'
${ noResults }
Obsidian/05.02 Networks/Selfhosting.md

9.2 KiB
Raw Blame History Escape

Alias Tag Date DocType Hierarchy TimeStamp location CollapseMetaTable
Self host
Self hosting
Self-host
Self-hosting
🖥️
💻
🛡️
🕵🏼
🌐
2021-08-26 Personal Root2
45.8714213
2.3970385
true

Parent:: @Networks, @Computer Set Up

^Top

 

name Save
type command
action Save current file
id Save

^button-SelfHSave

 

Self-hosting

 

[!summary]+ This note explores self-hosting through its infrastructure and associated services.

 

style: number

 

 

Infrastructure

#^Top  

This section sums up required infrastructure for self-hosting online services.

 

Hardware

An option is to look at a Virtual Private Server (VPS) service. This also solves the issue of the access to the Internet, that is more and more advised to not come from a home connection.

[!tip] A good aggregator for low-cost VPS here

Otherwise, physical hardware include:

Product Type Price range

Synology (DS218/220+)

 NAS £250/300

Dell Poweredge Tower Server T30

 Server £300/400

HP Z420

 Workstation £400

==WIP==

 

OS & Applications

#^Top Linux is the most common OS for servers. Ubuntu, Debian or CentOS the most common distributions. MacOS would require a Virtual Machine to run properly.

 

Internet connection

More and more literature point that a home Internet connection may not be the most appropriate way for a server to connect to the Internet. ISPs limit traffic to manage bandwidth and comply to legislations.

 

Domain

#^Top

[!info] Privacy-friendly domain manager Njalla

Domain management is important for several reasons: email and email routine can only be defined once per domain. As such, email services (self-hosting, email aliasing) need to be run on separate domains.

For self-hosting, the folllowing domain will be used: mfxm.fr

[!warning] Sub-domains to be defined with webhost.

 

Security

Security is paramount at the points of connection to the server. SSH protocols are secured but csn be intercepted. Two different ways of protection can be implemented:

 

RSA Key

#^Top

[!info] Documentation SSH Key Tutorial SSH Key Tutorial 2

All documentation to implement such control can be found VPS Console Dialogue#Securing Server access.

 

VPN

[!info] Documentation SSH VPN

Not tested.

 

Other security considerations

Additional measures can be found below and are in majority described VPS Console Dialogue#Editing the Server's SSH config.

[!info] Documentation Securing SSH

 

Continuity & backups

#^Top

[!info] Documentation Local backup Hot Copy

Backups are managed through the tar command and dispatched over the network with rclone. Instructions can be found VPS Console Dialogue#Backing up a server.

 

Server Monitoring

#^Top

[!info] Documentation Monit Performance Co-Pilot Nagios

Monitoring is implemented through a free and open-source tool called Configuring Monit.

Other Apps include: dockprom CrowdSec - The open-source & collaborative IPS

 

 

Running multiple services on the same hardware

#^Top  

[!tip] Considerations to start Tutorial Caddy tutorial Nginx Proxy Manager tutorial

In essence, to run multiple services on the same hardware, a few basic steps need to be taken to ensure that each service runs properly.

 

Consideration Tool Description

Compartimentalise services into containers

 Configuring Docker Creates containers that can be run independently

Simplify docker commands

 docker-compose Enables to create 'script' for docker commands

Route internet traffic appropriately

 reverse proxy: nginx, Configuring Caddy Enables to route addresses to the appropriate containers and manage SSL certificates (and https forcing)

 

 

Self-hosted services

 

A list of FOSS services can be found here

Service OS Technical reqs Description
Email service Linux 2GB RAM recommended self-host an #Email service

**Email aliases**

| Linux | 2GB RAM; ports: 22, 25, 80, 443 | an #Email alias service\ like [SimpleLogin](https://simplelogin.io) **Nextcloud** | Linux | 500M RAM; MySQL & SQL Lite; PHP 8.0; Apache 2.4 with PHP or nginx with PHP | #Personal cloud syncing instance

**Instant Message**

| Linux | 2/4GB RAM; ports & other extensions | Element instance for #Instant Messenging

**VPN**

| Linux | 500MB RAM | Host a private #VPN

 

Email service

#^Top Email service can be fully built but has many components to it: server, database, imap, caldav, carddav, DNS specificities, spam whitelisting as well as security (server access & spam filtering). It can therefore be tideous to build an email service from scratch. Pre-packaged solitions exist to manage all components:

  1. IRedMail
  2. Mail-in-a-Box
  3. Docker-mailserver which is command-line-only and to be built more extensively than the two other alternatives

[!info] Documentation Reddit Documentation Tutorial

 

Server Alias service

#^Top

[!info] Documentation Tutorial

 

Instant Messenging

#^Top

[!info] Documentation Element

 

Website

[!info] CMS Open source CMS solution: The world’s fastest framework for building websites | Hugo Or Jekyll • Simple, blog-aware, static sites | Transform your plain text into static websites and blogs Or Eleventy, a simpler static site generator.

 

ShortURL

#^Top Through Wordpres with Thirsty Affiliates: free of charge.

 

Self hosting ideas

#^Top

Photos

[!info] Photoprism Self-hosted photo management solution: here

[!info] Piwigo Website

 

Tools

#^Top

Tool Self-hosted service Link to tutorial Sub-domain

Youtube with no ads

| **Piped** | [here]([](https://piped-docs.kavin.rocks/docs/self-hosting/)) | videos

NextDNS\

| **AdGuard Home** | [here](https://cyberhost.uk/adguard-setup/) | dns-resolver

Online identity

| **authentik**
**authelia** | [Welcome \| authentik](https://goauthentik.io/)
[GitHub - authelia/authelia: The Single Sign-On Multi-Factor portal for web apps](https://github.com/authelia/authelia) | identity | Online pantry | Grocy | [grocy - ERP beyond your fridge](https://grocy.info/) | groceries

 

Database: MySQL, MariaDB, Postgres

App Database
AdGuard none

[!info] VPS Ideas Website

 

 

Tasks

 

  • 🖥️ Selfhosting: Check log activity for all servers %%done_del%% 🔁 every 2 weeks 📅 2024-10-15
  • 🖥️ Selfhosting: Check log activity for all servers %%done_del%% 🔁 every 2 weeks 📅 2024-10-01 ✅ 2024-10-01
  • 🖥️ Selfhosting: Check log activity for all servers %%done_del%% 🔁 every 2 weeks 📅 2024-09-17 ✅ 2024-09-17
  • 🖥️ Selfhosting: Check log activity for all servers %%done_del%% 🔁 every 2 weeks 📅 2024-09-03 ✅ 2024-09-03