Recently I dug up an old PC and decided to install Ubuntu Server on i and use it as my server for hosting a website. I am using Nginx.
Does anyone have any general and/or security advice?
I am not expert, however I have been running a home server for quite sometime. I would suggest not installing the webserver directly on the hardware, but instead use something like proxmox, and create a container for a webserver. You are never going to get perfect security, however
you can have daily backups of you services, and if anything critical
does happen, restoring a previous backup is one click away. This is also useful not just for security, but if you simply goof up a configuration, same idea. If I plan to make any changes to any of my services, I have learned to take a quick snapshot, just to make sure I can restore back
to a working sate.
Hello everyone,
Recently I dug up an old PC and decided to install Ubuntu Server on it, and use it as my server for hosting a website. I am using Nginx.
Does anyone have any general and/or security advice?
Thanks.
Although I love the project. I would still say take a 5 USD/month server at CloudWays and save yourself much headache. You can still do all the nice
Unless you have a passion to learn and tinker, use Cloudflare pages and leave the worry to them.
neoshock wrote to poindexter FORTRAN <=-
I am not expert, however I have been running a home server for quite sometime. I would suggest not installing the webserver directly on the hardware, but instead use something like proxmox, and create a
container for a webserver.
Arelor wrote to opicron <=-
Having a virtual private server on rent is no replacement for proper practices. You should not count on having anybody backup your stuff.
Having a virtual private server on rent is no replacement for proper practices.
You should not count on having anybody backup your stuff.
Where I work at we have been pulling services off the cloud back into
our premises because budgetworthy cloud services are not that reliable.
Cloudflare is a Google-level threat to Internet privacy. I wish
everybody stopped promoting it.
If I had symmetrical networking at home with no bandwidth caps, and
could rsync between a VPS and home, I'd be all over it.
dflorey wrote to Arelor <=-
Where I work at we have been pulling services off the cloud back into
our premises because budgetworthy cloud services are not that reliable.
Seems to be a common trend lately - moving back to on-prem or a hybrid approach.
I work for an MSP and one of our key backup offerings was to resell
cloud backup solutions to our clients. To be fair, WE hosted the backup repositories in our private DC (I wouldn't want it any other way), but
the vendor (Arcserve) decide to completely axe the platform - putting
us in a position where we had to pivot to another product!
Cloudflare is a Google-level threat to Internet privacy. I wish everybody stopped promoting it.
What parts of CloudFlare don't you like? I'm genuinely curious...
It's the full-employment coventant for IT - spend months moving
everything to the cloud, knowing full well that in a couple of years,
you get to move everything back. Lather, Rinse, Repeat.
I don't have qualms with CloudFlare as an administrator, other than being extremely anti-user.
First of all, since a lot of webmasters are placing their sites behind CloudFlare for no practical reason, CloudFlare gets to see a whole lot of Internet traffic. Having too powerful entities watching and controlling Internet traffic is problematic. For example, CloudFlare can (and does) unilaterally decide which search engines are allowed to scan CloudFlared websites and everybody who isn't Alphabet, Microsoft or a big money
agency is just not going to reliably create a competing search engine because CloudFlare will axe so much of the Internet down for them.
Then there is the fact that their TLS acceleration plans are of dubious utility . The one in which they act as TLS terminators is specially bad: end users connect to CloudFlare using a TLS connection controlled by CloudFlare and the encryption is broken on the CloudFlare end. Then CloudFlare proxies the requests to the CloudFlared webserver. Mind you,
I think it used to be the case that the CloudFlare-WebServer connection was not necessarily tunneled. This represented a huge breach of trust - when I visit a random site and get an https connection, the expectation
is that your session is encrypted up to the web host. However, even if they are encrypting the backend connection now (which I doubt is the
case for all plans) it is still a breach of trust because the TLS connection is being terminated way before it reaches its destination.
Also CloudFlare (and many cheapo web application firewalls) will reject legitimate mainstream web browsers when it fits them. Are you using Firefox? Don't dare customize your browser too much because you may end
up getting captchaed to death. Don't dare visiting a CloudFlared site using Tor and Javascript disabled, even if the site itself is a static wallhanger.
Truth... Although I WAS expecting the "headache" and ready to deal with it since I love fixing shit. Thanks for your input though! :3Does anyone have any general and/or security advice?Although I love the project. I would still say take a 5 USD/month server at CloudWays and save yourself much headache. You can still do all the nice server stuff, but at least its backed up, always available etc etc.
Just my 2 cents, sorry if it doesnt align.You're good, I like hearing peoples suggestions on how I can do stuff more efficiently, so I'll be looking into what you suggested!
Unless you have a passion to learn and tinker, use Cloudflare pages and leave the worry to them.I do have that passion. Who doesn't want to learn?
Although I love the project. I would still say take a 5 USD/month serve CloudWays and save yourself much headache. You can still do all the nic
And then have an OVH like crisis when their datacenter burns to the ground
Where I work at we have been pulling services off the cloud back into our premises because budgetworthy cloud services are not that reliable.We are talking about hobby local home projects. 1) Internet will never be as reliable as at home 2) power outages are more common then any cloud service and 3) no time to spend on hardware or its issues.
If thats the case its a great way to go about it indeed ^^.Although I love the project. I would still say take a 5 USD/month serve CloudWays and save yourself much headache. You can still do all the nic server stuff, but at least its backed up, always available etc etc.Truth... Although I WAS expecting the "headache" and ready to deal with it since I love fixing shit. Thanks for your input though! :3
Hahah, well.. rJAM message reader is getting more and more polished. 132x37 mail reading is just soooo much better ^^. Cant be too long now.Just my 2 cents, sorry if it doesnt align.You're good, I like hearing peoples suggestions on how I can do stuff more efficiently, so I'll be looking into what you suggested!
Sharing is caring... So give me all of your fucking .MODs!!!
And then have an OVH like crisis when their datacenter burns to the ground
No, if you dont have your docker backup locally, to spin up in a minute or two at any other service you are doing it wrong. No crisis for me.
We are talking about hobby local home projects.
| Sysop: | RickV |
|---|---|
| Location: | Plymouth, MN |
| Users: | 7 |
| Nodes: | 10 (0 / 10) |
| Uptime: | 18:02:34 |
| Calls: | 107 |
| Files: | 856 |
| D/L today: |
32 files (13,717K bytes) |
| Messages: | 38,752 |