ICINGA/NAGIOS? you can even feed data already collected by Prometheus to it if you want.

Ahh age of switching PSUs and led lights. 20 years ago you will notice it in an instant.

A4-6210 with build in GPU has TDP of 15W. There is no point to optimize anything it is seeping power already. may be try to use tlp to limit max charge level of the battery ( i’m not sure is you laptop is supported). You can play with governors too, but I personaly will not bother. You obviously need multiuser.target but not GUI.

With raid 10 - i would not risk it . With RAID6 ( obviously not on BTRFS) it is fair game if you have solid return policy for drives which are DOA. Go for SAS drives, they are cheaper (but generally hotter and nosier). And look for old-new-stock on specialized sites, no one in enterprise needs say 8tb drives, so they selling them cheap at times.

Get drive, connect , run long smart self-test ( for 18tb it is probably take a day). If it passed you are reasonably sure that it will not die soon. And keep running these test regularly, as soon as they start failing, replace.

Bump root cert to 10 years and use intermediate with shorter lifetime. root cert should be stored and processed off net.

It would be useful to know laptop spec. In general, do not bother power consumption should be lower enough as it is.

to stop guessing what HDD to replace when one failed. VM can’t see actual HDDs as SMART is not getting forwarded.

I guess HE is still providing free IPv6 via IPv4 tunnels.

Biggest problem will be BW and latency to your lab from the Internet. I would use dedicated hardware and subnet for it. Security wise, if you can make your site 100% static it will help a lot with security. I’m personally set on AWS S3 + CloudFlare combo with static site generator running in my lab. Yes it is not really “self hosted” but worries free solution for me.

both works. Just do not forgot to assign fake serial numbers if you are passing disks. IMHO passing disk will be more performant, or may be just pass HBA controller if other disks are on different controller.

ZFS or BTRF mirror will know which side is at fault due to checksums. I’m more concern about simultaneous falures of two disks. Rebuilding of a RAID puts lots of pressure on remaining disks, so probability that remaining one dies too is much higher. with RAID6 3 disks need to die to lost date, which is less likely but not impossible.

I would not trust these kind of dives in the mirror. IMHO RAID6 is the only way.

LE only certify your domain name, you may want to put more (like company name) to cert and it is where classic certs providers come to help.

ZFS ZIL will not help in this case.

Usually it can be solved by talking to hotel stuff. you are paying for that service and can expect it be suitable for any legal use.

Nope. You do not need physical access for it, just root access. and you HW is compromised with only means to recover it is SPI flashing of CPU.

3600 was released in 2019. And it they was making it for at least 2 years.

You need to be a root to exploit it, but if it get exploited any way to get rid of it is to throw MB to trash.

Why use SSD OS (unless he is using windows ). System can do to USB stick and rest od data to disk, and SSD may be a good option.

Does not really matter what wording they will put in. It is clear that project will go to pay or get nothing way. So just start working on decommissioning it. Free software really need better ways to pay developers, that will allow to avoid crap like that.

I would add LVM to the list of software raids, and remove btrfs as poorly engineered.

couple of old 2.5 HDD + usb to SATA converter. But Pi5 is hardly suitable to host anything. May just get old PC (which gives you HDD too). There are plenty for < $100 or even free. But you are going to pay more for power.

I do not see why it will cause any problems with exception of stacking mapping layer. I wonder can LVM do it natively without adding intermediate block device of 2 x 2G?

Stay with TP-Link. Ubiquity done some strange things recently.

Many sells, some just wipe them, some just contains encrypted data. If you happy with just used drive eBay is full of surprises.

Some diagram would help. Are you trying to use your server as a switch?

Why create yourself a headache and still get substandard and no-warranty drive. If you want cheaper drives go for reconditioned/refurbished/used drives. Same risks, better product. Old enterprise SAS drives are cheap and many still have plenty of heath in them.

Do you plan to compress video ( which generally already compressed format) when saving to remote location? I do not see use case for it, as you ether use lossless compression and not compressing it in any meaningful way, or just re-encode to different format and loose quality. Second option is simpler to achieve by re-encoding before sending out.

Yes, it will. Will it make any difference for you, depends of what are you doing. I would not use surveillance drive in to server, they are way too specific. Outside of that prices is pretty much same per TB/(Warranty Year) accross the board.

I done some excessive research couple of years back on the topic. you can find it here https://blog.holms.place/2022/05/01/hdd-storage-cost-comparation-may-2022.html. I do not think situation have changed match since than. Price per TB/Year is nearly constant past 8GB size.

Also consider looking to re-certified drives, or even refurbished drives. you may save hips on them. But it depends on how much you value your data, how much redundancy in you storage pool and how good your backup strategy.

Syncthing sync files, it is all does.

Look to other orchestrations solution too, like SALT. If you need to manage a lot of servers it is live saver. Setting up is only first step.

Usually just plug/unplug couple of times is enough. No fancy chemicals.

Run long smart test on the disk and check smart data after that. Other possibility is ZFS pool is nearly full.

Depends what are you doing. Something like keep base os patched is pretty much nil efforts. Some apps more problematic than others. Home Assistant is always a pain to upgrade and something like postfix is requires nearly 0 maintenance.

circular dependency seems to be the case. I guess adding second external resolver to /etc/resolve.conf will help. Second entry will not be used unless first one ( pi-hole) is responding. But it need to be tested.
BTW, why do you want to send host’s DNS via pihole?

what exactly do you mena under subdomains? Any DNS provider will support adding NS entries for subdomains if you want to host you sub-zone somwhere, And any should allow you to use names with “.” in it for “fake” subzone, like
a.subzone1 IN A x.x.x.x
a.subzone2 IN A y.y.y.y

nope, it is very deeply customized debian. Need to be installed from scratch.

Open source projects need to make money somehow. I found VyOS method quite acceptable. They giving good instruction and tools to build your own stable ISO. So do not be lazy or contribute somehow. Unfortunately their paid support costs too much. I was considering trying to push VyOS to be used as virtual router at my work, but it costs more than Cisco C8000v

Try VyOS. I run it on APU2 myself. No GUI no convolution.

Very strange line from specs.
USB Driver Windows XP/7/8/10/11, Linux (driver free on Raspberry Pi Raspbian system)
Does it mean binary blob driver only? and you need to pay for it to use it on PC?