• 0 Posts
  • 25 Comments
Joined 3 months ago
Cake day: March 28th, 2025
  • SirMaple__@lemmy.catoSelfhosted@lemmy.world•3-2-1 Backups: How do you do the 1 offsite backup?English
    2·
    2 months ago

    I use Proxmox PBS for all my backups. Datastore is on my file server at home. I sync the datastore daily to a little NAS at a family members house and to a super cheap storage VPS on the other side of the country. I also do a manual sync to an external drive that keep offline at home.

    Any super important documents such as tax records, health related files, backup of the data volume from vaultwarden, or anything related to wills & estates get backed up as well to 2 USB thumb drives that are LUKS encrypted. I keep 1 in my go bag and another is hidden somewhere… Thumb drives get updated once a month, or sooner if anything major changes.

  • SirMaple__@lemmy.catoSelfhosted@lemmy.world•CrowdSec vs Fail2Ban - What to use?English
    2·
    2 months ago

    No problem. It’s a great piece of software. I have it monitoring logs for nextcloud, vaultwarden, mailcow(postfix & dovecot), basic nginx proxies (just to be safe and for rate limiting). I have 4 OPNsense and 1 Debian bouncers.

    I had an issue with so a note about setting up the bouncer on OPNsense. If you have the LAPI on a different machine you can currently only connect OPNsense to it using the command line. The LAPI options in the web interface are for defining the interface to bind to and run the LAPI on OPNsense itself. Which isn’t an issue, I just wanted it on a VM so it’s easier to keep online instead of it going down if the OPNsense it’s on fails. Plus I like to keep SSH disabled on my OPNsense devices and spend a bit of time using cscli on the LAPI VM from time to time.

  • SirMaple__@lemmy.catoSelfhosted@lemmy.world•CrowdSec vs Fail2Ban - What to use?English
    1·
    2 months ago

    I’ve been thinking about going this route. What size subnet are you banning? /24?

    Only thing stopping me is I selfhost email and don’t want to ban say a whole subnet from Microsoft/Azure and end up blocking the outgoing servers for O365. I’m sure I can dig around and look at the prefixes to see which are used for which of their services just haven’t had the time yet.