The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

C/accidentalrenaissance

5 days to boot. Damn. The dedication to get it to work is amazing

I hope he doesn’t have to patch it….

As above; intel will be SO much easier

Macs don’t have a bios. But they boot easily into Linux (again intel)

Enjoy

Sort of like the difference between the cathedral and a bazaar?

Oh dear god. He’s about to speak in a human voice and send me on a quest, isn’t he?

Um. Yep both of those are good.

Right. And oddly I couldn’t even do that. FF wouldn’t even acknowledge that there was a certificate.

It showed an https but blocked the page and would not show the certificate at all

Did a full reinstall of the cert CSR — new cert fixed the issue.

Just very odd FF Bx

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

Is there a thing that you do?

Are you looking to sysadmin or dev or something else?

Libreoffice. Librewolf but then I deal with students… ymmv

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

While I appreciate that these benchmarks matter to someone; I’m more interested in hey it runs and is reasonably supported, not requiring hand rolling any config

Hey this XX runs fine.

Thanks. I’m aware of the actual lifespan.

/s

I must have dropped that…

With the lack of moisture and high sodium, the hamburger is immortal; the fridge will suffer a circuit board failure when the power goes out; and those trucks are designed to be planned obsolete in 5 years

So hell if I know. ¯\_(ツ)_/¯

Sorry for being “that guy”. But don’t use google maps if your primary concern is privacy?

Try magic earth

They use Open Street Maps instead both they and Apple say the app does not send your data back to them.

Sigh, kinda… but don’t forget to factor in your backup costs too