BoofStroke

For actual sysadmin stuff? Ansible vaults. Things that are managed otherwise either in ssh blowfish encrypted files or the company 1password thing (not my choice)

Looks like the subject of a future defcon presentation.

Many of her other songs have a Lana Del Rey vibe.

Borg for files. Proxmox snapshots for the VMs.

Right?

This is why i always push back that if you want it, I’m going to implement it properly, or at least in a way I can change easily later. I’m not going to make my own life difficult on your whim.

Web developers are the worst. Especially the ones that call themselves full stack. </sysadmin rant>

Plex, channels, mail, calendar, contacts, wiki

Shield in the main room. Onn everywhere else.

On the flip side, The Margot Robbie account created Now Lemmy Explain.

I still just use :X with vim on a server I can ssh to.

And unsurprising

To do it right, use a write blocker and clone it. Then lock the original away and have fun with the copy.

Back to the root of it: security is a process, not a product. Good security means having sysadmins, network admins, developers, and non-technical employees doing things with infosec in mind.

Humans are not identical. I didn’t want to spend the money on AXS, but stage 4 arthritis in my thumb and an lrti surgery means that or no mountain biking because it hurts too much to shift.

Having gear that you have to fight with adds nothing to the sport.

Rack mount server class machines at home generally aren’t great options. Definitely stick with tower/mini designs.

That said, for a home server a general workstation may be best. I personally have a System 76 Thelio. I added a second drive and installed proxmox with a ZFS mirrored pool.

https://system76.com/desktops

Nature isn’t base 10. Why must we try to make it so?

My phone syncs to my nas with auto sync via SFTP when at home.

I have an rclone job on another system that then syncs the nas to rsync.net.

There’s borg in that mix too but out of scope for your question.

Self documenting systems ftw.

You can ship to Graylog with netcat or filebeat. Then you can do all of your graphing, searching, and analysis there.

I use it. No complaints here. They’ve recently reduced their rates. The alternatives are more involved and more expensive. I put my remote Borg repos on rsync.net

Because I use Borg I don’t really need their zfs snapshots but those are pretty cool too.

I have multiple Borg repos, so rather than add a remote for each I just rclone everything at once to rsync.