You can set up firewall rules to redirect the traffic destined for public DNS servers to your internal DNS server.

Not sure how to construct that rule in the unifi firewall but it comes down to “any outbound traffic on port 53 that’s not destined for the adguard server, redirect it.”

I just use ssh for management. Monitoring is handled by nagios.

Shouldn’t use the Xfinity router anyway, that thing is fuckin garbage.

This is the one I’m using as well. I use it to keep my work laptop running Linux in sync with the various Windows desktops I use in our offices. Works great for keeping my work keepass vault in sync.

Mail server, but mostly because deliverability in this day and age is a nightmare. If you’re some one off running your own mail server in 2023 be prepared to deal with many headaches around IP reputation.

You don’t need to be home for a cron job to run.

USB has a bad habit of randomly dropping off the bus until you reseat the cable or reset the device.

If you’ve got a copy of the data that’s local, why are you opening up ports? Just run the backup job internally.

I’m also not fond of using SBCs as a NAS, by nature their I/O is extremely limited. It will probably work as a backup, but man do I not trust a USB interface at all.

I also recommend not relying on email for notifications - too unreliable. I use the healthchecks.io docker image and have it send me notifications via Pushover when something fails.

Wow what a throwback

All the servers I’ve spun up in the past few years have been Debian instead of my usual Ubuntu.

The last straw was kinda when I learned that installing docker via the install menu gives you the snap version instead of the normal one, with no indication that this is the case.

As others have said, bitwarden. I’ve also heard good things about roboform.

I really love that bitwarden is not only open source but has been professionally code reviewed, and can be self hosted if you’ve got the knowledge to do so.

Of course, if you’re self hosting it make sure you have a solid backup strategy for your vault.

Doesn’t come with a power adapter and has weird power requirements. Wouldn’t power up at all with a standard 5V 1A wall plug, needed 5V 4A.

Apart from that it’s been perfectly fine. I wish other OS than the armbian they provide supported this CPU.

freshRSS. I’m using the linuxserver.io docker image.

Nothing is really too much.

I have too much hardware to swap out to go 10G networking or I totally would.

The point of my homelab is for me to learn and break stuff in a safe environment, so if that leads me down a Kubernetes rabbit hole at some point so be it.

If you have a Synology their Surveillance Station product is amazing and will work with basically any IP camera brand.

I’d run my own mail server if deliverability wasn’t such a huge hassle.

Basically if you’re not google or Microsoft… Don’t even bother.

I only rolled my own Wireguard VPN because I wanted to learn how things worked on the backend - I’ve suggested Tailscale to many other people, its just a really well designed product.

It’s astonishing to me how much they’re giving away for free.

I’ve been testing some alternative SBCs like the OrangePi 5.

Currently mine is a fallback DNS server and reverse proxy for my network, trying to come up with some other uses for it.

They’re still low power ARM boxes, but they’re much cheaper than the RPi is at the moment.

I have an rsync script that pulls a backup every night from my truenas server to my Synology.

I’ve been thinking about setting up something with rsync.net so I have a cloud copy of my most important files.

I really hope you have that backed up

I’m using DuckDNS, it has a plugin for pfSense / OpnSense.