- 0 Posts
- 6 Comments
That reminds me of work. I’m old, young me has been through the mistakes and the pain of wanting to control and self-host everything.
Now I manage a team of young idealists who have not yet been burned sufficiently hard by reality and I feel like I spend half of my time denying them permission to add new self-hosted services to our stack.
Just last month a young padawan was pissed at the spent on an external auth service and had been pushing hard for a self hosted OSS solution which he was convinced he could handle by himself (which was most likely true, from a purely technical standpoint).
Since he wouldn’t let it go, I “punished” him by having him spend one day in excel and powerpoint to prepare a cost benefit analysis to present to the architecture review board, including server cost, backups, redundancy, security, monitoring, pen-testing, auditing, his time and all the bells and whistles we needed to be compliant with all the ISO-x we have to be. (we’re in a banking related field).
Our estimated internal cost ended up about 6x the one of the SASS solutions and still wasn’t as reliable.
Most people don’t understand the amount of effort it requires to run a secure & reliable system and if I had a dollar for everytime I heard it’s as simple as “docker run”, I could retire early.
A) Set up a wiregard VPN server in your remote instance. Or better, get a VPN provider, the VPS is kinda pointless.
B) Assuming you’re using docker as you should to run your home server’s service, use gluetun to connect to the VPN and route your docker traffic for the instances through gluetun. This will ensure that you have a dead man switch when/if the VPN goes down.
C) set-up a reverse proxy to access the various instance from the outside if that is something you need.
Here’s a fully developed config, you can use a jumping point.
Can’t answer your question but I got a refurb corporate m715 for 60 bucks, I haven’t bothered upgrading the 8Gb ram^* and it runs a full dockerized arr stack, vpn and jellyfin without any issue. I don’t reencode and I don’t use 4k media, so I can’t talk about that either.
But if you’re looking for cheap that works, it’s not a bad little machine.
^* The system actually run on 6Gb since 2 are reserved for video and by the time I realized that everything has been up and running fine for a while, so I didn’t even bother rebooting in the bios to change it, I just added a bigger swap 🙄
But that’s also why you don’t know the commands in the first place, if you used them you would remember them. It’s self sustaining ignorance ;)
Ps: I kid, there a lot of stuff I don’t care to remember the cli for and I happily use GUI.
PPS:
docker logs -f container_name;)