Start Self Hosting

Re:Start Self Hosting by macinjosh on Wednesday March 23, 2022 @03:33PM (#30782344)

I hear a lot of stories like this. I've been self-hosting for a few years out of my home. I have a symmetrical gigabit fiber connection. My IP changes very frequently (DDNS and a low TTL solves that problem for my use cases).

_anyway_

I haven't been hacked.. yet. /me knocks on wood

The precautions I take are basic:

  - Use unique and secure credentials on each service I expose.
  - I only expose ports 80 and 443 to the public. 80 HTTP redirects to HTTPS/443
  - I keep my software updated (docker-compose pull)
  - Nightly backups to cloud storage and local disk
  - I "airgap" my home network from my hosting network. There is no shared hardware between them including firewalss/routers, switches, etc.

I figure cloud services and SaaS get hacked anyway. I can't enumerate the breaches my data has been a part of. If my self-hosted stuff gets hacked at least I can do the forensics and actually see what happened and what was accessed. With a 3rd party all I can hope for is what their PR department lets out.

[ Parent | on HN ]

Re:Start Self Hosting by Gigachad on Wednesday March 23, 2022 @05:40PM (#30783798)

The first hack I noticed was that someone had set a password on my redis server because the default was no password and I had accidentally exposed it to the wider internet. This was exposed for 6 months before this happened. Who knows what else was accessed without me knowing.

[ Parent | on HN ]

Re:Start Self Hosting by account42 on Thursday March 24, 2022 @05:36AM (#30787750)

It's pretty silly how many services are public by default when ideally they should only listen on a unix domain socket (or nothing) until you configure something else.

[ Parent | on HN ]

Re:Start Self Hosting by aimor on Wednesday March 23, 2022 @03:49PM (#30782508)

I'm interested in how you set up your home and hosting networks without any shared hardware. I've been running my own websites from home for awhile on their own machines, but never considered they could be on a completely separate network all the way up to the modem.

[ Parent | on HN ]

Re:Start Self Hosting by macinjosh on Wednesday March 23, 2022 @08:03PM (#30785102)

My ISP provides me with PPPoE into my house. I have that Ethernet going into a small switch which both networks connect to via a firewall. Each network establishes its own PPPoE session and receives its own (dynamic) IP address.

[ Parent | on HN ]

Re:Start Self Hosting by sgarman on Wednesday March 23, 2022 @03:39PM (#30782401)

IMO separate hardware for your self-hosted network puts you into a whole new class of hosting at "home."

[ Parent | on HN ]

Re:Start Self Hosting by macinjosh on Wednesday March 23, 2022 @08:14PM (#30785156)

Not necessarily. For my use case it’s one extra 4 port gigabit switch and a single pc that runs everything containerized including the NAS, firewall, and apps.

[ Parent | on HN ]