It’s an EC2 nano instance that’s used only as a monitor for a few services that are running inside my VPN. It has served me well over all these years!
EDIT: before everyone starts screaming about “security”:
It’s not internet facing and no port is opened, all it does is fire up a notification if/when something doesn’t reply.
Even in the unlikely scenario that someone gain access to it that means that my VPN is already compromised, and I’ve got bigger problems to worry about.
Now for a relevant comment. I used to love those high uptime values as well, but I’ll echo the security sentiments of others in this thread. On the other hand, as you said it’s not public facing, so not as big a deal. I still think it’s kinda cool!
Well propegating the idea it’s cool to have years long uptimes regardless of the fact it may be practical for you in this instance iis nonetheless dangerous.
Just because it’s not public facing doesn’t mean that it’s not an issue. It might be less of an issue, but it is still a massive vulnerability.
All it takes is one misconfiguration or other vulnerable system to use this as a jumping off point to burrow into other systems. Especially if this system has elevated access to sensitive locations within your network.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
I logged in just to downvote.
Now for a relevant comment. I used to love those high uptime values as well, but I’ll echo the security sentiments of others in this thread. On the other hand, as you said it’s not public facing, so not as big a deal. I still think it’s kinda cool!
Thanks, I wasn’t expecting everyone to take this so seriously, it was supposed to be funny…
Well propegating the idea it’s cool to have years long uptimes regardless of the fact it may be practical for you in this instance iis nonetheless dangerous.
Just because it’s not public facing doesn’t mean that it’s not an issue. It might be less of an issue, but it is still a massive vulnerability.
All it takes is one misconfiguration or other vulnerable system to use this as a jumping off point to burrow into other systems. Especially if this system has elevated access to sensitive locations within your network.