Cloud security geek, cigar smoker, amateur electric bass player, hoping to be an ally where I can. he/him

  • 3 Posts
  • 5 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle





  • I am looking for curation and durable content here.

    For me, Reddit was a curated source of information. You have these communities full of knowledgeable people. If you went into that community you’d either find the info you need, already asked and answered, or you could ask and get a good answer. Discord is just real-time chat. It has virtually no search engine find-ability, no categorising, tagging, or reasonable way to go back and find something someone asked a year ago that was answered perfectly. Many of the social media are really personal and ‘now’ oriented. I’m eating a donut. This person pissed me off. I’m getting married, etc. Video streaming platforms have individual creators, who often have a theme, but they don’t have communities or top-down categorisation. And video sucks as a searchable archive. It’s really hard to know that 17 minutes into this video with a clickbait title, there’s a really useful nugget of information. But Reddit (and now its federated clones) is user-curated and categorised. If I jump into a Windows-oriented community, I won’t find a bunch of Linux stuff. If I want to look at a sport or a hobby or politics, there’s a place to go. But it’s not one creator/curator. It’s organic.


  • 321 strategy: 3 copies of everything important, 2 on-site, 1 in cloud. I have a TrueNAS Scale NAS running RAID5 on ZFS. All the laptops, desktops, etc. backup to the NAS. (Mostly Macs, so we use time machine over the network). So the original laptop/desktop is 1 copy. The NAS is a second copy on-site, and then TrueNAS has lots of cloud options. I use Amazon S3 myself, but there are lots of choices.

    Prior to this I had a Synology NAS. It was “small” (6TB), so it has a RAID mirror of 6TB drives and a single 6TB external USB that had a backup of the mirrored pair (second copy on-site). Then I also used Synology’s software to backup to S3.

    For my Internet-facing VMs, they all run in xcp-ng and I use Xen Orchestra to manage them. I run regular snapshots nightly, and then use NFS to copy them to a cloud server. That’s sloppy, and sometimes doesn’t work. So the in-the-house stuff is backed up well. The VMs are mostly relying on Xen snapshots and RAID 5.


  • I’m with you. Same vintage IT guy, self hosting similarly. I dunno. I throw a lot of stuff up on my xcp-ng box. Some is important. Some isn’t. I’m doing all manner of old-school firewall and perimeter security and not worrying a ton about logging in my containers. I guess I’m just fatalistic. If I get hacked to the point that I’m digging through logs to figure out what happened, I’m kinda fucked. So I focus more on backup and restore. Can I restore to a known good state? But I hear you. Kids these days with their containers and their pipelines and their devops. Back in my day…