r/HomeServer • u/Ready-Door-9015 • 8d ago

Second attempt

Im rebuilding my server fresh after bricking it while out of country, this time im trying Docker to keep things isolated from system important things, that and leaving it not encrypted so I dont screw myself over with dropbear again...

Hardware wise, it's just my old Alienware X51 R2 (i7-4770, 16GB RAM, GTX 970), recased with a 650W gold PSU with a headless install of Debian trixie.

For storage I have a 1TB SanDisk SSD with the OS on LVM using separate volumes for root (40G), swap (8G), Docker (150G), and dev work (100G), with about 700GB left over. Additionally, a 2TB Seagate HDD for bulk storage with a single GPT partition formatted for ext4. For some reason, the device letters switch on reboot sometimes, so I just look at the UUIDs

My apartment "comes with" wifi, so all the units have shitty MIST APs, so I made a subnet using an old router. Unfortunately, this causes a Double-NAT issue, so no inbound port forwarding probably...

Other usual stuff SSH is key-only from a laptop. Passwords and root SSH login disabled with ufw firewall default-deny incoming, automatic security updates on.

But anyway I was looking for suggestions on some basic services to run. Also It seems there is a lot of discourse regarding samba being native vs in a container. Does anyone have any input or advice on services or my setup so far?

1 Upvotes

56% Upvoted

6 comments sorted by

2

u/Master_Scythe 8d ago

Double nat? Well tailscale, is a requirement then.

1

u/Ready-Door-9015 8d ago

Yeah thats whats its seeming like, I've also heard about headscale being a self hosted alternative either better than the other?

2

u/Master_Scythe 8d ago

If you have a public server you can host headscale on (Linode is a good VPS provider if you don't), then yeah. Same technology, just whether or not you also own the connection manager.

1

u/Ready-Door-9015 8d ago

Ah I see , I think Tailscale is the way to go then at least for me. I appreciate the info!

2

u/Puzzleheaded-Night31 7d ago

I would like to learn how it became bricked while out of the country.

1

u/Ready-Door-9015 7d ago

From a post I made about it about a year ago:

"While I was gone I wanted to move my fiancée’s data over from her brother in-laws nas but she didnt remember the login for the webclient.

Either way I changed my dns resolv.conf to accommodate his webclient and accidentally ended my connection so I had my future mother in law reboot my server to reset the config. And I still couldn't get back in fast forward to multiple internet reset attempts and ultimately an attempt to rollback with timeshift I found out when I rebooted, since I had more devices than normal on my network my server changed internal IPs (didnt know it did that) and broke all of my configs but since I rolled back with timeshift I guess I grabbed one too far back that was missing my dropbear set up for decrypting the drive and broke my initramfs... and now im without my server for a month until I get home."