• 1 Post
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle




  • I’m somewhat paranoid therefore running several isolated servers. And it’s still not bulletproof and will never be!

    • only the isolated server, ie. no internet access, can fetch data from the other servers but not vice versa.
    • SSH access key based only
    • Firewall dropping all but non-standard ports on dedicated subnets
    • Fail2ban drops after 2 attempts
    • Password length min 24 characters, 2FA, password rotation every 6 months
    • Guest network for friends, can’t access any internal subnet
    • Reverse proxy (https;443 port only)
    • Any service is accessed by a non-privileged user
    • Isolated docker services/databases and dedicated docker networks
    • every drive + system Luks-encrypted w/ passphrase only
    • Dedicated server for home automation only
    • Dedicated server for docker services and reverse proxy only
    • Isolated data/backup server sharing data to a tv box and audio system without network access via nfs
    • Offsite data/backup server via SSH tunnel hosted by a friend













  • I agree on the horrible experience. However h264 rips in Usenet lack in quality from my perspective. Data rates for 1080 are often too low and close to 720 rips. For me rips 8-12GB in size deliver the best ratio for my screen solution, and are efficient for storing.
    H265 would be better but my hardware lacks in decoding capability (raspberry 3).
    Everyone has different requirements driven by storage, hardware etc. One click Hoster costs 50 EUR/year for 170GB per day. Usenet indexer 5Eur/Month + 25EUR for 150GB

    Glad if you can advice on cheaper solutions. And good private trackers!