Great tool for documenting your setup. I use this at work a lot

Thanks, I’m not hungry anymore.

I would say that “on prem” defines a location, “selfhosting” an action. You can do both at the same time, e.g. selfhosting nextcloud onprem.

Streaming 4k content is not a problem, transcoding on the fly to lower resolutions is hard and requires good capacity planning.

I’m not convinced that a pile of old HDDs is a good fit for your homeserver.

• Many small disks will consume more energy than fewer large disks. Currently, the best capacity per price seems to be in the 20TB segment. A similar argument can be made for noise.
• The HDDs you have might not be perfect for 20/7 usage. I personally would recommend using disks that are made for continuous usage.

Start with what you have, but if you outgrow your setup, buy proper hardware. And make backups.

No, but thats what TLS does absolutely fine.

Remotely hacking into my server is probably harder than just walking into my home with a warrant and confiscate everything.

I’m unsure about the end-to-end encryption aspect. While this feature is great for a cloud service like ente.io, it doesn’t really help much in a selfhosted scenario - and might make backups more complicated. Any other opinions on this?

While this argument is valid for a larger domain, it doesn’t really matter for the small selfhoster.

This is true and typically called “Next Generation Firewall” or “Intrusion Prevention System”.

However, these have three disadvantages:

• They rely on signatures and many vendors only provide these with an active, costly subscription
• They add complexity and possible error sources and false positives.
• They require processing power and can easily reduce throughput by 90%.

These systems are quite common in enterprise scenarios, but AFAIK the exception in home labs and selfhosting environments.

Something like Guacamole could be a nice fit. Additionally, you need a virtual PC to connect to, Guacamole is just the proxy.

Vaultwarden could be a good start. Everyone needs a good password manager, and setting up one at home is pretty easy.

You don’t even need to expose it to the internet, you can start with a local installation (with some limitations).

true, and caddy works very well with docker compose setups.

Setting up a reverse proxy with nginx proxy manager is pretty simple and comes with letsencrypt support.

For letsencrypt to work, a software needs to write a confirmation code to a special path in your domain. When letsencrypt verifies that you can write to this path (and therefore control the domain), you get the certificate.

This article was already posted here two days ago: https://lemmy.ml/post/10719915

Thanks to your post, I just found lubelog. Has anyone tried it out? I’m really not happy with my current choice for vehicle tracking.

The best depends in what you need… What are your requirements in terms of capacity, speed and redundancy?

You bought a device with just one single USB 2.0 port and ask for the ideal storage option?

I could be wrong, but you’re probably limited to one external HDD (~20 TB) and one micro SD card (1 TB).

True. Some probably have many alternative or throwaways…

The Fediverse is by design affected by inflated numbers. If one user uses three different services, the user is counted three times. However, for the Fediverse it doesn’t really matter - that number of total users is just as irrelevant like the total number of used email addresses.