Thread 106518956

Don't try this at home Edition.

Previous: >>106465571.

READ THE (temp)WIKI! & help by contributing:
https://igwiki.lyci.de/wiki/Home_server

/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.

>What software should I run?
Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.

>Why should I have a home server?
De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.

>Links & resources
Cool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhosted
https://reddit.com/r/datahoarder
https://www.reddit.com/r/homelab/wiki/index
https://wiki.debian.org/FreedomBox/Features
ARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQ
Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
SFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/
Cheap disks: https://shucks.top/ https://diskprices.com/
PCIE info: https://files.catbox.moe/id6o0n.pdf
>i226-V NICs are bad for servers
>For more SATA ports, use PCIe SAS HBAs in IT mode
WiFi fixing: pastebin.com/raw/vXJ2PZxn (embed) (embed)
Cockpit is nice for remote administration

Remember:
RAID protects you from DOWNTIME
BACKUPS protect you from DATA LOSS

(embed)

Does anyone know good methods for running a routing table on something like an ESP32?

Let me guess.....you need MOAR?

>>106519225
>ESP32
Dude, you want a router running at 160MHz?

What's the cheapest way to set up a 10G home network?
I mounted a cat6 ethernet cable between different parts of the house but then found out every piece of hardware uses sfp for these speeds

>>106520152
Not every piece. There's plenty of 10GT switches around, they are just quite expensive

>>106520152
Theft

Has anyone got a robot vacuum running Valetudo? I'm thinking of getting the Dreame L40 Ultra but only the L40s is available in Australia so I'm not sure if it'll support it

How do people keep track of all the different configurations that pile up over time?
I'm closing in on 70 VMs across 8 hosts and a few VMs require special configurations in terms of routing or just little notes to remember months or years down the line why you did something and how you did it.
Text files become unmanageable at this scale, GLPI and Netbox both seem pretty fucking excessive but I want something 100% local and easy to backup. Is running your own wiki worth it? What are people here using?

does renting one of the cheapest tld get me blacklisted on all major email providers? i plan to selfhost my email server along with my website and other services.

>>106521809
The TLD doesn't matter, you're most likely going to be blacklisted no matter what you do.

i was shitposting on /v/ >>>/v/720115591 about how i could set up a dropsite for devs who want to leak abandoned builds/code without actually intending to do it - but now i'm wondering if i should just do something because i can roughly see how it would work
i would have a secure ftp or even just use an API on s3 or google cloud but encrypt all uploads with a key
i would also only give out one-time upload links to people who contacted me on a proton mail or something
you guys have any ideas?

>>106521923
any way of getting whitelisted if that happens?

Is it possible just using dns rewrites and nginx proxy manager to make one host name resolve to two different IPs based on either where the request originates or if the first ip is not available? Basically I want to make it so I can access my truenas and apps via something like jellyfin.truenas.lan on my lan but also be able to access it via the same address via tailscale when I'm not at my house. I can already do one or the other pretty easily, and I could just always go through my tailnet on lan, but I'd rather not unnecessarily route everything through the internet, especially streaming and large data transfers.

>>106519820
>>How is a construction team better than a hammer?
Why are you pretending you can't just run it in a loop? Hell, it'd probably be faster than ansible because the tasks would run in parallel instead of waiting for stragglers.

>>106522005
Yes, but it's genuinely not worth the time investment. Check out MXRoute

>>106522005
As the other anon said possible yes but not really worth the effort. Look into something like MXRoute or another service or pay to use your own domain with something like gmail, proton, tuta, etc. At least that way sending mail will work consistently. Receiving mail with a VPS based email server is fine obviously, its sending and not getting dropped or spam filtered that's the issue. Mail is basically a cartel.
t. selfhosting two email servers that will soon be retired because it isn't worth the effort vs the cost of a paid option

>>106522230
before you retire those services I want you to send me an email
ayasequart@proton.me

>>106521937
https://www.nytimes.com/tips
scroll down to securedrop

>>106522649
I know, most media sites have something like that, that's what gave me the idea.
Probably should base it on Tor tb.h though that's not something I have dabbled with much.

>>106522649
>>106522936
I meant hosting it using Tor as the backend before someone gives me shit about how Tor isn't a cloud service or whatever.

>>106522945
actually not even the backend now that I think about it, more the network obfuscation layer

>>106521923
>>106522230
NTA, but does having a proper SPF/DKIM/DMARC configuration make any difference? Assuming you really aren't spamming, of course.

How the fuck can i bypass the lack of a static ipv4, ipv6 and ddns (since my isp has a cgnat in place)?

>>106523125
>cgnat
You're fucked.

>>106521809
in my experience you need
>unabused ip
>spf
>dkim
>dmarc
>1 year old domain
>landing page for the domain on google search console
using this I have a .com, .org, and .xyz that are fine although .xyz sometimes has problems if the receiver has a more aggressive spam filter.

>>106523125
pay for a business connection?

>>106523212
>>unabused ip
This and the whole block needs to stay clean. You could get blacklisted if someone else on your IP block spams. It's so fucking stupid.

>>106523125
VPS + reverse proxy + p2p vpn tunnel.

>>106523048
Yes, you will score highly on google's evaluation of your email server and then they will still send it directly to spam because you don't have any reputation
How do you get reputation? who knows.

>>106518956 (OP)
/hsg/, i need your help. i have a 8u 10 inch mini rack and about 3.5u left to fit a nas. i'm on a tight power and money budget (ups is only 300w) and can't decide which option to go with. i already have 1 4tb drive so i plan on getting another drive and doing a raid 1 setup
1. mini lenovo pc with jbod
>dirt cheap
>already have the PC
>have to rely on hardware raid(?) over usb
>dont trust the shitty enclosure to not fail
2. terramaster nas
>more expensive
>chinese spyware firmware (can i just flash truenas/OMV on it?)
3. mini itx PC
>most expensive
>more power for transcoding
>might consume too much power
i suppose could also put a pcie to sata adapter in the mini lenovo PC but I don't know how I would then power the drive.

you guys ever go way overboard in your home server purchases and months down the line wonder what the hell you were thinking

So I bought a NAS and a 12TB drive
I want to buy another 12TB to pair it with of course.

Trouble is, finding a 12tb drive new from a non shit seller seems like a very difficult task. Do I drop my requirements and go for an 8TB and lose the 4tb, or is that stupid to do and I should just pay the extra £50-£60 and get the added 4Tb?
I'm guessing 8tb might be quieter too.

>>106523863
what did you build anon?

>>106523863
Nah so far overspecing has worked out in my favour. I've grown into every system and switch/router I bought and even had to update some despite being ridiculously overspeced at the time because I actually needed more RAM.

>>106523125
Not sure what this guy is referring to because he didn't give any specifics
>>106523316
but he's shared some useful concepts.

To access your home server from outside,
>get a static ipv4 vps (all of them have this). I use Vultr (don't let the Redditors make you afraid of them)
>put wireguard on it
>connect your home wire guard client (client 1) to the wiregaurd server on the vps
>at the cafe, connect your laptop/phone to the VPS via wire guard (client 2)
>because wg is bidirectional, you can forward all client2 traffic to client1
>do that via iptables (wg2 -> wg1 interfaces) or via ssh once connected to the wg server
>for ssh, wireguard typically has lan ips like 10.x.x.x e.g. 10.66.66.2

>>106519253
At least two drives, yes.

maybe belongs on /sqt/, but have any of you negotiated to buy a domain? any tips to keep the final cost down but keep the owner from bailing?
isnt some hot domain, its just some stupid shit that only im interested in. sold for a few hundred years ago but the guy wants a couple grand to sell and isnt budging much.

>>106524215
My advice would be to move on and get a different domain. Let him rot with it.

>>106524356
that was sort of the plan. figured id leave the negotiations open to see if hed panic and come back with something better, but who knows. its hard to justify some massive cost for the .com when literally every other tld is ten bucks or less.

>>106523863
The way I see it my journey is over for hardware
My systems are ridiculous but not in an overspending kind of way, it's actually kinda something you can buy 10 year old hardware for pennies of what it used to be and it still be overkill for the next 10 years.

Unless I come across a load of fuck you money, everything here is in for the long haul. Even picked up a spare board as that is what's most likely going to give.

best way to daemonize containers and don't answer kubernetes
I just need to fire one (1) container and make sure that if something happens it will be restarted, so for example the podman process can still be running but binary inside the container shat the bed -- I need it to restart automatically

>>106524467
I tried this for my name. Some third party actually reselling it. they have no incentive to sell ever, renewing it costs nothing

>>106524536
kubernetes.

>>106524536
you can specify a health check in your container that runs periodically to query the status of whatever is happening in your container.

>>106524542
yeah, that was my worry. figured if i didnt hear anything id try to reach out in a few weeks, but i feel like thatd just renew their resolve to overprice.
squatters deserve death.

>>106521809
>>106523212
Serious question, why leave an open email instead of a contact form.
The aggression of spam has grown too intense and I don't honestly remember the last good communication I did with emails. My oldest email is almost 30 years old and there is hardly anything worth keeping as no friend of mine uses emails anymore.
I kinda want to self-host but at the same time I don't know if it's worth the pain.

>>106524536
Quadlets, Incus, systemd-nspaw

>>106524928
Pretty sure he wants to SEND email, not just receive it. Receiving is trivial.

>>106524962
Yeah, yeah, again, I understand.
But, again, it's too much of a hassle to keep it from being fucked up by the destination providers.

would the 1GB Raspberry Pi 4 B be enough to run SFTPGo as a read-only WebDAV server together with transmission-daemon torrenting onto a USB-attached NVMe SSD? I currently run SFTPGo on my PC, but it's inconvenient to have to keep the PC up whenever I want to watch some tranime on my tablet. (I did automate it somewhat, so that the PC won't go to sleep when I have an active session in SFTPGo but that's off topic)
I already have an NVMe enclosure sitting there unused, and my PC's mobo only has two M.2 slots, occupied by 2 TB and 4 TB SSDs. So I'm thinking of building this poor man's NAS as cheaply as possible while keeping the energy usage low. Then I could put another 4 TB SSD in the PC, or even a 8 TB one.
Or I guess I could skip the raspberry pi and attach the SSD enclosure to my Asus router and run SFTPGo from entware.

>>106525136
More than enough.

>>106525169
meaning I could go even cheaper? according to the spreadsheet in OP, the 4 B is the cheapest SBC with USB 3 (along with Pine64 Rock64 at the same price)

>>106524928
Decentralisation and professional communications.
The email cartel is gmail, ymail, outlook/live and icloud. The first step is getting out of their system.
Emails are a form of professional communications between parties, if the conversation needs confidentiality then it can switch to PGP or (even better) Signal.

>>106525215
You can torrent on anything. Even my dual core Atom 330 shitbox from 2008 can saturate 1Gbps, admittedly at high CPU.

>>106525350
>Emails are a form of professional communications between parties,
And Twitter is a PR platform rather than a social network, but nobody sees it that way either.

>>106524928
business wise I do use a contact form but that just relays to my email masking it for first contact. if it's a legitimate inquiry I will need start a dialog through email.

>Plex data breach
Another day I'm glad of being a jellyfinchad

do I preorder the Arc pro B50 and hope sriov is delivered Q4 or wait.

>>106524536
what about supervisord?

>>106526898
kek

>>106526990
What do you need SR-IOV for?

>>106527632
to have GPU acceleration on multiple vm's on a single card.

>>106527746
I think anon is asking use case. but instead of being an asshole he asked nicely.

>>106527791
that literally is my use case. right now I bounce back and forth using a 1080TI on 2 Linux vm's and a Windows vm. mostly for dev work but I do play some old titles occasionally. my jellyfin server doesn't transcode. with sriov I could just have them all have a slice of GPU and leave my 1080ti on the monitors.

what kind of used hardware should I be looking for if I want a large amount of cores for a low amount of money?

>>106528056
probably some 5-8 year old xeon or threadrippers

>>106528056
last I looked epyc 7001/7002 are dirty cheap. cores aren't everything though. sometimes clock speed is nice too.

>>106526990
preorder the b60 instead

>>106528607
I was looking at the 60 originally but it's not on preorder yet is it?

>>106528655
no, but it's half again as much vram, for less than half again the price, so I'd hold out for it.

>>106528699
you're right, especially since sriov features aren't even out anyways. I will wait.

cable management doesn't get better than this.

>all devices reset in cable hammocks for maximal passive air cooling
>I can easily access and view each device
>powerbar 1 is tier one - servers and internet
>power bar 2 is tier two - monitors, peripherals, laptops
>power bar 3 is tier three (fails if tier 2 fails) - lights

I need to find a curtain or something for the bottom shelf.

>>106529241
No, I literally can't do better than this unless someone shows me theirs.

>Nothing's on the floor.
>I can access power bars. I guess the Netgear managed switch is a bit hard to access, but it's ok, I never need to touch it, as all 6 ports are crammed
>I know where everything is

>>106529305
>nothing's on the floor
moving the floor up six inches doesn't change it being a nightmare. If you have that much hardware, you should have an actual organization to it instead of just "on the shelf"

>>106529340
How can a man organize this any better? I'm actually curious. I'd appreciate photos of this many devices and cables being organized.

My computer collection has grown somewhat out of hand. I bought all these Lenovo laptops for $40 each thinking I'd be dropping them off places, but things haven't worked out.

I'm considering getting rid of the Lenovo pre built with the 1660ti. It's being used as my main server, hosting several sites - some of which you might've visited. The ethernet port is blown out and the USB adapter is a serious constraint (as is the neutered lg1151 proprietary motherboard).

Then there're the dedicated boxes for security cameras; pozzed wireguard clients; gitea, photos, music, and movies (fuck immich, fuck jellyfin, fuck navidrome, fuck nextcloud. I prefer to roll my own lite web servers without mandatory thumbnails, transcoding, album directories, and php decaybloat).

I need about 20 more years of this until I'm bored of tinkering with this stuff, and even then

Thank you for viewing my serverpost.

>>106529392
Stop being an autist and set up a quorum of proxmox nodes with automatic fail over for your Web services

>>106529473
proxmox? I barely know her!

>>106529473
>proxmox
Pleb.

>>106519829
They only need to send a single 24 bit packet once every min or so but their position always changes, it will suck if I need to use raspberry pi's because they have access to EIGRP

But meh looks like i will need to hand program some sort of routing table protocol that fits on like 4 mbs

Is a firewall necessary if you don't have any ports forwarded from your router?

>>106529675
Do you trust every single piece of hardware and software on your LAN?

>>106529693
In as far as they're all under my control and I don't run random shit from the internet

>>106529513
What do you use?

>>106529513
gonna roll your own system? Work is already done, you could spend that effort doing something else meaningful. Insert suggestions below

>>106529675
do you have any software listening on any ports?

Is a pre-built NAS from Synology really a bad idea like the wiki says? I have an old tower but I live in a dusty home and I don't really have room for it anywhere. I don't think I need transcoding because the stuff I watch isn't incompatible with other devices and if I needed to upgrade the RAM that should be fairly cheap. What should I do?

>>106530073
Do you like vendor lock in which automatically means getting squeezed? If so go right ahead.
Otherwise look elsewhere.

What's a decent Android SSH client?

I'm setting up a Minecraft server and World of Warcraft server for my mom and me to play on. I might need to make adjustments while I'm visiting.

>>106523316
>>106524179

NTA, but is there a way without a VPS?
I looked into something like Cloudflare Tunnel, but I wouldn't want cloudflare looking into my traffic.
I've been looking into something like it but truly e2ee, instead of just between client <-> cloudflare and cloudflare <-> server.

>>106530399
You can use ssh on termux

What cheap 2.5g pci-e card for pfsense/opnsense?

>>106530966
Skip 2.5G and just get a used X520/530 10G NIC or X550 if you want RJ45 instead of SFP modules. They are dirt cheap my entire network is running on used 10G NICs, even switches and routers have come down significantly in price.

I need help planning a server. Budget is around 1.5k euros, could go higher if reasonable.
Main purpose is recording livestreams from several sites via avtdl and storing them locally, requiring a lot of storage space.
Picking hardware for it isn't the problem as it is basically just another NAS, but I'm not sure how to combine both tasks in one system.

>>106531525
>requiring a lot of storage space
>Budget is around 1.5k euros

>>106531634
If you could point out where my retardation is I could work on improving it. An old file server draft I came up with a year ago featuring four 18 TB drives would cost me 2k right now, which I thought was a bit too much back then.

>>106531758
HDDs, especially high capacity ones, have become pretty expensive. Just bought a bunch of 22TB drives, exact model that I bought ~one year ago from the same vendor is now almost 100€ more expensive per drive and they weren't cheap a year ago either.

>>106530743
I'm the guy who gave specifics. Idk how to do it without another node somewhere.
I don't use CF tunnels either because I don't want their binaries on my machine.

If you find a way, let me know!

>>106531825
Oh well, guess I will allocate some more of my fun budget to my server.
I still need to figure out how to configure it all though. Any flavor of Linux gender dysphoria can run avtdl, but I'm not sure how to include a proper NAS into it as well.

>>106518956 (OP)
are cheap 200W FlexATX PSUs any good? do they have low idle power draw? or do they just sit at 200W at idle?

>need new Jellyfin/Emby client hardware
>check latest Android/Google/Whatever the fuck TV boxes
>it's yet another ARM A55 SoC straight out of 2017 for One Hundred fucking Euros plus tip plus tax plus shipment out of China
>b-but it supports AV1 in the video decoding ASIC
Suck my hairy fucking nutsack you assholes, and the same goes for people who keep buying and enabling this shit. Profit margins for these shitty devices must go through the roof considering they're mass-produced plastic pieces of FUCKING SHIT.

Any reason why a HP 759505-001 Dual M.2 SATA PCIe Riser wouldn't work in a consumer motherboard? Feels like a more trustworthy solution for a few bucks more than Ali M.2 SATA to 2.5" adapters.
>picrel
doesn't seem to have anything other than BMC functionality, no controllers onboard either. Only seems to uses 3.3V and 12V (with step down) to power the drives and then outputs standard SATA for data.

Seems to be pinned like this
B1 - X (nothing)
B2 - X
B3 - +12V (can't tell where it goes?)
B4 - Ground?
B5 - SMBus clock
B6 - SMBus data
B7 - Ground?
B8 - +3.3V
B9 - TRST
B10 - X
B11 - WAKE

A1 - PRSNT
A2 - X
A3 - +12V
A4-A11 - X

>why M.2 SATA?
I have a couple M.2 SATA drives laying around that are otherwise resigned to glorified flash drives

w0t do you need a server for when you can just upgrade your PC? isnt it just a pc in another room? or sometimes, the same room?
what's the point lads?

>>106532014
What do you expect from your NAS? Just file sharing? Apps/VMs as well? In the former case look into the various NAS OS that are out on the market today or if you're comfortable set it up yourself. In the latter case definitely proxmox. You could then use ZFS for the drives, e.g. RAIDZ1 or RAIDZ2 for fault tolerance, and for NAS functionality SFTP/SMB and a webui aren't hard to setup. It all really just depends on what you want out of the system. The base parts aren't that expensive necessarily but HDDs will bleed you dry if you don't want to gamble on recertified Seagates which are pretty cheap but only come with 1Y warranty.

>>106532495
There's an answer for that in the OP. Finish your homework, then try to be snarky.

>>106532455
>Any reason why a HP 759505-001 Dual M.2 SATA PCIe Riser wouldn't work in a consumer motherboard?
Lack of PCIe bifurcation but honestly most motherboards support that nowadays, I even remember at least one or two A series tier shitboards supporting splitting the x8 or x16 slot into 2xx4 and 4xx4 respectively.

>>106532539
so its for people to pirate movies ok got it
very gay to spend $1000s on that

>>106532540
>Lack of PCIe bifurcation
It doesn't use any PCIe data pins though? Data is exclusively handled through SATA ports on the end of the card.
My concern was whether or not there was some proprietary gotcha regarding power or something, there seems to be a lot of these cards around for cheap so I figured it's either because something is up with them or simply that M.2 SATA was a flash in the pan.

>>106532620
OK so what are you gonna do with it?
Hard mode: without talking about "movies" or whatever crap you can watch from plugging in a new hard drive
INTENSE mode: Without saying "uh it's what you do on a normal PC but instead of just doing it you spend hours of your life and tons of money"

just wondering what the justification is here

>>106529539
What? Why you need a routing table for this?

>>106532574
M.2 sata was just a flash in the pan
I saw those same cards because I was looking for some cheap bifurcation cards and it caught my eye but it is just SATA hence why they are cheap.
The PCIe pins aren't going anywhere, it's just taking power which kinda makes it a waste of a slot IMO

>>106532559
Not many are spending $1000s of dollars.
For a majority, the home server stuff falls into a few categories of hardware
>old pre-builts
>reused desktop PC hardware
>mini PCs
>raspberry pi or other SBC
All of which aren't necessarily expensive. Even building out something with "server grade" equipment doesn't have to be expensive.

There is a few people with more money than sense that will spend thousands on hardware but even in those cases there are more hobby shit and luxuries that people spend alot more on and use less.

>>106533656
>which kinda makes it a waste of a slot IMO
100% for any other machine, but it's going into a Skylake machine that narrowly missed out on an M.2 slot and otherwise isn't using it's PCIe slots.
Didn't want to run possibly questionable Aliexpress adapters with 5V step down in someone else's machine, so this is a cheap reliable solution. Also wanted to make sure I didn't miss something, so thanks for the sanity check.

>>106533956
I was on the same boat
I wanted a quad M.2 card which mean drives need some type of step down and they can't pull that much 3.3V from the slot alone.
Chinesium cards where like $37 from Amazon so I just straight up bought one of the Asus cards for $54
They are so much better built with what looks like 2 separate phases with a ton of input and output capacitance.

>>106533726
>For a majority, the home server stuff falls into a few categories of hardware
>old pre-builts
>reused desktop PC hardware
>mini PCs
>raspberry pi or other SBC
Just get another monitor though?

Been starting to work towards making a home sever but i am completely lost
I'm i heading toward the right paths when it comes to building a pc so far, any big fuck ups so far or one's i should look out for?

Also fuck you American's are lucky parts are so over priced here in bong land

>>106534161
>Chinesium: >:(
>Chinesium (ASUS): :D

>>106534793
Do you want a server, a workstation or a gaming desktop?
What do you want to host?

>>106531457
How cheap are we talking?

>>106536252
I bought a 8 port 10G SFP switch for ~140 a few months ago. Could have bought a 16 port one for ~300. Meanwhile I paid ~700 for a 4 port one about a decade ago. Obviously pricing might be higher depending on where you live, if you're in Aussieland you're fucked anyways.

>>106526898
remember to transcode on the fly, even when it's unnecessary, Chad!

>>106535678
I loathe Asus, but Fleabay sellers want too much for the HP and Dell equivalents

>>106523125
>>106530743
>How the fuck can i bypass the lack of a static ipv4
>I wouldn't want cloudflare looking into my traffic
Unless you're gonna host the static IP box yourself (you can often do this and sometimes it's even free, check with your ISP about what's in your plan as well as promotional business offerings), you're always gonna have to trust whoever provides the box that you don't own proxying your traffic from point A to point B that they're not MITM'ing you or logging both ends of the transaction. Pic related, replace tor with "vpn" and make it one node.

If it's any comfort, most providers explicitly don't care what you're doing, so long as your traffic isn't impacting other customers and is reasonably VPN'd such that in transit could say "we don't know the specifics, could've been anything" in court. Cloudflare, tailscale, VPNs and basically all others in this space really want to be a dumb pipe as much as possible, because the less dumb the pipe, the more liability they are felt to command for anything happening on that pipe.

Use a VPN and don't kick the beehive by sending a massive and unthrottled 100% up-down through your connection at all times in a way that impacts other customers in your area or building, and they'll quite happily let you be.

>>106534793
Looks overpowered. If recommend use an old gaming PC or ex government workstation to stuff around with, see what you want to achieve before you drop money on new gear.

>>106534793
For Christs sake, anon. Get a N100 with 1TB and call it a day. Then expand accordingly.

>>106518956 (OP)
reminded me of this https://www.youtube.com/watch?v=MmPtfy9P714

>>106537989
>>106537889
>>106535693
id like to most use it for archiving stuff and being able to access my archive to watch ofc, but id also like to set it up as a thing where my younger siblings can be able to play games on it (wii,xbox,gamecube ect) around the house (mostly cus i dont rlly like them going on youtubeslop so i give them stuff to do

i already have like 500gb worth of stuff archived on my main pc and would like to move it out for more space!

>>106534793
how hard is it to get a server license in bong land?

>>106539555
im hiding from the fed's as we speak but were thuging it out in my basement with a bullet proof door hidden under the queens palace

I realize this is the HOME server general, but I figured you guys would have the most expertise on this.

Because of recent geoblocking I'm considering renting a cheap non-EU/UK VPS to use as SSH SOCKS5 proxy. I've never rented a VPS before as I have my own home server but that obviously won't let me access things from a foreign IP. Do you guys have any recommendations for a (non-EU/UK) VPS service that's cheap, easy, and ideally doesn't glow too brightly? Usage is very light so specs basically don't matter.

>>106539585
>any recommendations
stab your parliament representative

>>106539553
wanted to add my budget is a maximum of like 800 pounds <3

>>106539553
Do the games need to run on the server, or does the server just need to make the files accessible via the network to be played on other systems? Because for just storing data and sharing files over the network (i.e., a NAS) you need basically no processing power or RAM. Take any old PC you have lying around or can get for cheap. The only thing to watch out for is that you want enough SATA slots.

You'll want to set up a software RAID5 or RAID6 via mdadm, meaning you need X+1 or X+2 HDDs of the same size connected to have X * size storage space. (For example, 5 HDDs of 8 TB each give you 32 TB (4*8) of storage space in RAID5 or 24 TB (3*8) in RAID6.) RAID5/RAID6 keeps your data intact even if one drive fails (or two drives fail in case of RAID6) but requires you to use more drives for the same amount of space.

Don't forget the SSD the OS runs on has its own SATA (or M.2) slot, and some motherboards disable certain SATA slots if you have an M.2 drive connected. There are PCI cards that give you extra SATA slots if you need more.

>>106539777
The game's are going to have to be run off the server because they do not have pc's just me, it kinda want it to be like a bunch of gaming systems in one

>>106539817
Well, then the specs would have to be whatever the games require, plus enough SATA slots and a bunch of HDDs. The overhead from NAS functionality is negligible. Obviously, do make sure the thing is ethernet-connected for the NAS aspects.

It seems you're describing two radically different use cases, though. Wouldn't it make more sense to build two machines, one with cheap used hardware but multiple HDDs in RAID5/RAID6 shared over the network, and one as the gaming machine which loads the games from the server?

>>106531457
somebody last thread said the X540 uses a lot of power and it gets real hot is the x550 better? I don't really need 10G on my router my comcast is limited to around 300mbps and my NAS+ PC only have 2.5G

>>106539981
Honestly, might be a better plan, it would
help to understand it easier with a cheap storage like the previous anon talked about then focus on the gaming stuff later

>>106539994
NTA but I'd say get what you need now for cheap and upgrade later also for cheap. 10GbE will be the norm in maybe 5 years. 5GbE is only now being rolled out to new mainstream motherboards, and 2.5GbE prices, particularly for switches, have gone down quite a bit. It will happen again for 5 and then 10GbE eventually, future proofing in this case just means you'll spend more now (assuming inflation doesn't wreck us all until then ofc).

>>106524536
docker compose if it's just one container with a restart policy. Add a healthcheck that checks whether the underlying executable shat the bed and you're gucci, that's gonna look like.

services:
service_name_here:
image: whatever_your_image_is:version
container_name: service_name
ports:
- your_port_config_here
restart: on-failure
healthcheck:
test: ["CMD-SHELL","whatever shell commands you wanna run as a proxy for health service here"]
interval: 10s
timeout: 3s
retries: 18

exit(1)s will already restart with the above, but if you also need stuck process checking, If you control the executable, easiest bozo healthcheck is
>"just write timestamp to file during run starts and completions of your EXE to a file with a fixed name"
>test is "cat the current timestamp file, parse to datetime, verify datetime is valid and datetime isn't older than 2 hours or whatever",
>and if so, declare the stuck process unhealthy"
Piss easy to code and just werks.

>>106540739
>yaml
I want to go back in time and murder the fuck that came up with this visual atrocity.

>>106524215
>any tips to keep the final cost down but keep the owner from bailing?
Don't haggle much, use mmo rules. Make one lowball offer in case they're idiots, get a counter offer, make the fair counter-offer you'd actually take as best-and-final, answer objections about fairness cooperatively as your new offer is more than fair, but don't budge on price, then just walk away with "I think we're too far apart. thanks for your time" if they say no. there are other domains and the finality of it sometimes gets slowpokes to move.

>>106540841
Yeah it's pretty awful, but at least the experience at runtime is just 'docker compose up -d', and then you're done forever after that as long as your server's still up.

>>106539585
cheapest diy vps that aren't sketchy are gonna be hetzner or digitalocean typically.

hetzner includes 20tb traffic per month, do 2tb per month, either are gonna run you about 6-12 bucks a month.

>>106540841
>>106540933
There are alternatives. You have json, toml, xml, ini, pkl, nix and many others, pick your poison.

>>106539777
What show is this?

>>106520152
Server recycler. Cheap copper 10 GBASE-T.

>>106541366
json lacks comments, inis lack good nesting, pkl and nix adding computing to a config without differentiation of execution sections and config makes it insta-retarted, and also nix no comma lists make my skin crawl

>pick your poison
maybe I'm too much an old-head but if we're not doing xml because it sucks or json because we don't wanna, and we fucking INSIST on shoving compute in a config or computing our configs, I wish we went more general, bit the bullet on meta-generation as a thing we do, and we'd just redid T4 text templates again but without the headers (or only sane default headers), better escape sequences, and we put it on the parser intelligently JIT compile at runtime with caching rather than demanding pre-compilation.

What is the deal with intel i226-V ethernet cards listing skylake or higher requirements and no amd support? Is this also true for the intel 10g cards? I cant find much information about it

>>106542053
Windows driver requirements, I assume. Linux shouldn't care.

>>106542064
I would be using an ivy bridge cpu and opnsense you wouldn't think I should have a problem but I know intel-aviv has done a lot of anti consumer fuckery in the past I wouldn't put it past them to put some type of hardware limitation in the chip

>>106533481
I don't really need a table as much as I need a way for each ESP32 to rank it's connection to each other ESP in a dynamic way

>>106542104
Having such a restriction on a PCIe NIC would only work against themselves.

>wanted to quad psu my disk shelf just for the extra fans
>maybe it will keep a little cooler and therefore keep the fans quieter?
>the good delta ones (which i have in mine) tend to list for $40-50
>not worth $100 just for this
>see a listing for 2 from an ewaste/decom reseller
>pictures all show delta psus clear as day
>description says 2x delta tdps-580bb 580w psu for netapp ds4243/4246
>$60
>fucking sold
>wait a week
>finally shows up
>open up the box
>fucking shitty power one spaxrtx-04g psus
>wtf
>go back and check listing
>see at the very bottom in 10pt font "may receive other manufacturers than pictured"
>oh fuck you you shitbag
>let me plug them in just to see how bad they are before i bother
>yep just as bad as everyone says
>louder at idle than the deltas are at full speed on startup
>normal 200w idle with 24 drives jumped to 320w
>yeah fucking no
>ebay
>purchases
>psus
>return
>didnt match description
>not going to paste it but filled out 496/500 characters in the return reason box with everything i could possibly fit in there on how deceptive and bullshit their listing was
yes i am still mad >:(

>>106529539
>They only need to send a single 24 bit packet once every min or so but their position always changes
>>106542281
>I need a way for each ESP32 to rank it's connection to each other ESP in a dynamic way
Are you trying to do some sort of mesh networking? If so, might it be easier to use Thread with one of the ESP32 models that supports it?

>>106542581
I give you a 20% chance of refund.

>>106541256
Thanks. Hetzner was involved in a glowie cert swap MITM so I went with DigitalOcean. Turns out they have 'Droplets' which are basic installs of common distros you can spin up and destroy whenever you want and you only get charged for the time it exists (i.e. until it's destroyed), so this should cost me effectively nothing.

In case anyone's interested, these are the scripts I wrote to create, connect to (and get a SOCKS5 proxy) and destroy the Droplet:

(create.sh)
curl -X POST -H 'Content-Type: application/json' \
-H 'Authorization: Bearer 'TOKEN'' \
-d '{"name":"NAME",
"size":"s-1vcpu-512mb-10gb",
"region":"sfo3",
"ssh_keys":[KEYID],
"image":"debian-12-x64"}' \
"https://api.digitalocean.com/v2/droplets" | grep -o -P '\{"id":.*?,{1}' | head -n 1 | grep -o -P "[0-9]*" | tee droplet.txt

(getip.sh)
curl -X GET -H "Content-Type: application/json" \
-H "Authorization: Bearer TOKEN" \
"https://api.digitalocean.com/v2/droplets/$(cat droplet.txt)" | grep -o -P '"v4":\[\{"ip_address":.*?,{1}' | head -n 1 | grep -o -P "[0-9.]*" | tail -n 1

(connect.sh)
ssh -i KEYFILE -D SOCKS5PORT root@$(getip.sh)

(destroy.sh)
curl -X DELETE \
-H "Content-Type: application/json" \
-H "Authorization: Bearer TOKEN" \
"https://api.digitalocean.com/v2/droplets/$(cat droplet.txt)"

Restarted my home server today, now I get this error whenever I start qbittorrent's container
Container gluetun Error
dependency failed to start: container gluetun is unhealthy
Any idea what could've happened? I'm using protonvpn if it helps

Any slimsas / sff-8654 cable recommendations? Or are they all built equally good these days?

>>106543049
Check the logs for your gluetun container; do you see an error message in there?

>>106542848
keep mistyping, sorry. If you're doing >>106542848, it'll work, but you should consider managing lifecycles w/ Terraform/Opentofu, those scripts lack idempotent creates so if you run create.sh twice you'll being paying for orphaned infra; tf is good for avoiding this. too lazy to clean up mine but dumping from chatgpt It'll look a bit like

# main.tf
terraform {
required_providers {
digitalocean = {
source = "digitalocean/digitalocean"
version = "~> 2.0"
}
}
}

provider "digitalocean" {
token = var.do_token
}

variable "do_token" {
description = "DigitalOcean API token (can come from env DIGITALOCEAN_TOKEN)"
type = string
sensitive = true
default = null

}

variable "name" {
description = "Droplet name"
type = string
default = "NAME"
}

variable "ssh_key_id" {
description = "DigitalOcean SSH key ID or fingerprint (matches your KEYID)"
type = string
}

variable "keyfile" {
description = "Path to your private key used for SSH -i"
type = string
default = "~/.ssh/id_ed25519"
}

variable "socks5_port" {
description = "Local SOCKS5 port for ssh -D"
type = number
default = 1080
}

resource "digitalocean_droplet" "box" {
name = var.name
region = "sfo3"
size = "s-1vcpu-512mb-10gb"
image = "debian-12-x64"

# Accepts IDs or fingerprints
ssh_keys = [var.ssh_key_id]
}

output "ipv4" {
value = digitalocean_droplet.box.ipv4_address
description = "Droplet IPv4 address"
}

output "ssh_socks5_command" {
description = "Copy-paste to connect with a SOCKS5 proxy"
value = "ssh -i ${var.keyfile} -D ${var.socks5_port} root@${digitalocean_droplet.box.ipv4_address}"
}

You'd throw export DIGITALOCEAN_TOKEN=YOUR_TOKEN into your env vars, then use
>terraform init && terraform apply -auto-approve
to set up,
>terraform output -raw ssh_socks5_command
then paste to connect, and
>terraform destroy -auto-approve
would clean up.

>>106539553
>>106539777
>>106539817
I would go for an APU, I can play most of my games with my Ryzen 7 without the GPU, kinda regret buying it to be honest.
You can stream with Moonlight/Sunshine or Artemis/Apollo.

>>106539994
>>106540201
Yeah, why pay more, if you need more speed you can do some link aggregation until you have the need to update your infra.

>>106524511
Nice. I have a similar setup but with a single socket mATX Supermicro mobo. It's enough for the nexr few years at least. I got the smaller board because I was worried about power consumption. How many watts does your server consume? Also how's the horizontal CPU fans working out? Any airflow issues with them blowing air up instead of out the back?

>>106537869

Oh, hadn't considered it, is exposing your home server via tor a good idea assuming me (and non-normies) are the only target audience? Or are there any gotchas?

>>106542053
>>106542064
>>106542104
I ran a 3570k with Intel x540 cards on freebsd. They ran fine. No clue about the i226 though, it's probably the minimum requirement for whatever version of Windows is the lowest that they have drivers for (ie. if the lowest Windows version they support is Win10, then the cards lowest requirement is whatever CPU that is required to run Win10).

>>106543207
Turns out it was just some bad timing on my hand, since proton died in that very moment and they still hadn't updated their status page. Went to sleep, woke up and now it's all working fine

>>106543179
It's not like you have a choice beyond uber expensive branded cables from Broadcom or whoever
That being said all the generic amazon cables I've bought over the years for like M.2 to U.2, or slimsas cables do seem to come from Amphenol, I haven't used any of them past PCIe 3.0 speeds but that's a secondary concern and I haven't had any disconnects or errors stemming from the cable.

Been working on a list of things based on some of yesterday's info from anons and stuff i feel im generally misunderstanding :p

>>106545346
Thanks, that helped me bite the bullet.
Went with c-payne cables in the end.

>>106546693
Do you actually need a server or is this a because-I-can project? It looks like the latter.

>>106547538
because i can and want to learn new shit :p

I have two public ip addresses my stuff is hosted on for redundancy two different isps.
What is the best method for combining the two with just one domain name, so if one goes down the domain name just points to the other one.
Like clients would have to wait a sec and then reconnect but it's better than currently distributing two different domain names/ips

>>106548582
haproxy
unless you want fail over instead of load balance

>>106548612
So for geopolitical reasons, the one isp is ~240ms to the United States and the other is 30, so for most purposes it would be a fail over.
I was also hoping to avoid relying on a single server for HA/failover. I can afford 1min of downtime to switch it at the dns level but idk what to use for that

Is it still worth it to shuck WD Elements drives? They still CMR & decent quality? Newegg has a deal on one, 20tb for $285 minus tax & shipping.

>>106544672
It's not a good idea on the basis that from a personal use standpoint it's gonna be hella slow and unwieldy and from a project or higher ideals standpoint it's likely going to be a more aggressive use of a network you wanna keep free for people who need it more.

>>106548684
>1min of downtime to switch it at the dns level
DNS propagation time is likely to be much longer than that unless the TTL is actually set for 1 minute. Which is itself undesirable because it effectively disables caching so browsers visiting your website will stall waiting on DNS all the time. Maybe that's acceptable in your use case, I dunno.

>>106521734
I don't do enough to need very detailed notes but I'd use Org-Roam since I like Emacs and have a bunch of stuff in org-roam already. Any good relational note-taking software should work though, vimwiki is alright for Vim. There's also Obsidian & Logseq.

>>106548582
If the DNS provider supports it change DNS records via API as needed and keep TTL low so changes propagate quickly.

I haven't found a better way to backup my truenas drives than mounting SMB in another VM and running a bash script to copy to my external drive.

What do you /g/entlemen use?

>>106523125
tailscale should work

>>106550191
zrepl or sanoid

>>106548787
Please respond

>update freebsd to new point release
>most of my I/O speed issues seemingly disappear
i wonder what happened

Hot take: used HDDs are totally fine for a home server. Redundancy is the key to safe data anyway, so why bother shilling hundreds of bucks per drive when you can get many more used ones in good condition?

>>106551001
they are really loud sometimes. like holy shit how are you still functional loud

>>106542848
>>106543254
Consider tacking on -N if youre only forwarding traffic.

ssh -D -N

Also, to run programs through your socks5 tunnel, it's as easy as,

proxychains4 python main.py

[proxychains] config file found: /etc/proxychains4.conf
[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4
[proxychains] DLL init: proxychains-ng 4.17
python stdout blah blah blah

I've been using vultr vps for years, and they're been reliable and cheap. Not sure about the glowing situation.

>>106551016
Eh, if they make sounds, that means they're working.

>>106551001
Because around here regional eceleb cancer has already driven up prices for used HDDs so much that maybe 100$ off per drive doesn't outweigh 1y warranty vs 5y with a new drive.

when i activate suricata on my opnsense machine, i can't enter 4chan.

it was nice knowing you guys.

Is it shit? I guess firmware updates dont exist?

>>106552675
I'm also sus about anything not Netgear. Is dlink or tplink or for managed switches? I filled up my 6 port quickly...

>>106521734
I use Bookstack for this. 100% local

How much space should a home server take up? I mean in units on a rack, I have two dell poweredge r300s from an auction, pennies each, but right now they're just sitting on a table and I want to get a rack, but I don't know if I should get one that's just 4u or 6u for a little expansion room or if I'll wind up needing something bigger like a 12u or 20u.

>>106552675
>random chink brand
>firmware updates
I wouldn't count on it, but if that switch uses an RTL9300-series chip (and I think there's a good chance it does), there's an ongoing effort to support them in OpenWrt.

A few links if you want to read further:
https://svanheule.net/switches/start
https://forum.openwrt.org/t/support-for-rtl838x-based-managed-switches/57875

>>106552675
Bruh, if there is one place I don't want unknown chinese products it's on my network.
I am already paranoid with my PC and I built it myself.

>>106553699
>of Chinese parts
>with Intel ME or AMD PSP

>>106552675
First question is what are you trying to do with it?

>>106553706
Exactly why.
I lie to myself that a good firewall with capture anything.
But lying that the network gear is not capturing my stuff is too much.

>>106553759
Define good firewall. Also do you know about MAC protocol 802.2?

i vibed/made something you guys might be interested in
it auto switches your mouse/keyboard to your second machine when you look at the screen its connected too

>>106553839
and of course i forget the link
https://github.com/copilotnewb/deskhop

it keeps all the functions of deskhop but adds a way of actually sending switch commands from a host pc
you can also buy the deskhop pre-assembled from elecrow or other resellers.

one of the most useful things i have bought in a long while, might try and figure out how to add copy/paste functionality later

>>106553991
There is existing software that does that, I forget what it's called though.

>>106554003
all the software versions suck ass and have latency
the base deskhop also works without having to install anything on the machines you plug it into so it works with linux/win/mac

https://www.friendlyelec.com/index.php?route=product/product&product_id=308
https://www.friendlyelec.com/index.php?route=product/product&product_id=309
which one is better value? to me it looks like the M5 is more extensible, but then it's only Gigabit ethernet, while the R76S has 2.5G

Are there wifi aps with dedicated backhaul radios that aren't locked to the cloud

I want a web based file manager for my storage server that I can browse through directories and upload or download content. What is my best option?

>>106554364
isn't that what copyparty was designed for?

>>106554364
like the other anon said copyparty is pretty good

>>106552675
you fucking retards will buy anything with an RJ45 connection on it without thinking twice or even once for that matter

does wireguard have acls? would it be much harder than tailscale? or do you guys just expose your coom services to everyone in vpn?

>>106555305
I would not delegate this to a VPN software but read on WireGuard namespaces.

>>106555305
>to everyone
what do you mean? I'm the only one using it

Asking around if a apu or a graphics card would be better for the following

>pi-hole
>video hosting
>video game hosting
>website operation
>picture hosting

what's the benefits/cons of each?

>>106556103
>pi-hole
>website operation
>picture hosting
Irrelevant
>video hosting
Only matters if you are transcoding
>video game hosting
An external GPU will probably be better but modern Ryzen Gs can run most games with reasonable FPS. List your games and checkbenchmarks.

>>106556118
Thank anon, quick and straight to the point

The Game's i want to host are going to be based of these:
wii
game cube
ps1 and 2
and maybe xbox 360 (doubtfull)

Yes i will also be transcoding

>>106556178
Ah, emulation has a much higher overhead. Check the emulations you want to use as some recommend specific builds.

>>106556270
i'll check that later these evening ^^

>>106556280
Read more here.
https://emulation.gametechwiki.com/index.php/Main_Page
Prefer things that have RetroArch cores.
https://www.retroarch.com/
There are not that many benchmarks for emulations, but as you can see you will probably be fine with an APU.
https://www.youtube.com/watch?v=h66gd8kVlZ0
I myself have a last gen Ryzen and I often forget to enable the eGPU.

>>106556324
>retroarch
disgusting

>>106556541
Feel free to suggest something better.

>>106556610
not running game emulation on your server, ideally. Failing that, individually tuned emulators, without the obnoxious of all of retroarch.

>>106556654
Life is too short for this shit.
If you have the machine, may as well use it for it. Buying consoles is a waste of money.

>have ran out of things i want to install
its over

>>106556711
No you run the emulators on the local machine, not the server. Doing it on the server introduces network latency and generally runs worse. Even the server focused emulation things will tend to run that in your browser instead of the server itself.

>>106523311
this is happening to me right now on hetzner, somehow my whole block got added to spamhaus

>>106557363
Hetzner asks for ID when you sign up and they consider you high risk yet they constantly get abused by spammers. Are leaked IDs that fucking common?

How much is too much for a Banana Pi R3 Mini running openwrt (firewall/routing is disabled)?
Currently:
>samba4 server
>uhttpd server
>supports php
>python flask api

What I want to add:
>freeradius3 server
>openldap server
>snmp trap server


>inb4 why go with a Banana Pi r3 mini for this
Because i originally got it for being small and having two ethernet ports so i could set one of them up to mirror decrypted ssl traffic to it

>>106554202
unifi aps do this. but the backhaul radio is 5ghz in my wifi 6 ap which is really gay

>>106557391
idk but im considering just getting another cloud ip and deleting my current one ive used for years (that is now in a poisoned block). im just afraid of contacting their customer service in case they think im part of the problem