You can set up firewall rules to redirect the traffic destined for public DNS servers to your internal DNS server.

Not sure how to construct that rule in the unifi firewall but it comes down to “any outbound traffic on port 53 that’s not destined for the adguard server, redirect it.”

I just use ssh for management. Monitoring is handled by nagios.

Shouldn’t use the Xfinity router anyway, that thing is fuckin garbage.

Sounds like a cost of living adjustment to me.

I’d also like to know where these surveys are being run, as the COL varies wildly between states.

This is the one I’m using as well. I use it to keep my work laptop running Linux in sync with the various Windows desktops I use in our offices. Works great for keeping my work keepass vault in sync.

Mail server, but mostly because deliverability in this day and age is a nightmare. If you’re some one off running your own mail server in 2023 be prepared to deal with many headaches around IP reputation.

You don’t need to be home for a cron job to run.

USB has a bad habit of randomly dropping off the bus until you reseat the cable or reset the device.

If you’ve got a copy of the data that’s local, why are you opening up ports? Just run the backup job internally.

I’m also not fond of using SBCs as a NAS, by nature their I/O is extremely limited. It will probably work as a backup, but man do I not trust a USB interface at all.

I also recommend not relying on email for notifications - too unreliable. I use the healthchecks.io docker image and have it send me notifications via Pushover when something fails.

Wow what a throwback

People who value their sanity. WiFi is unreliable.

Who in the world is using a USB printer in 2023?

Ethernet bby

Depends on your needs and your threat surface.

Are you just an individual? Use Windows defender and ublock origin in the browser.

If you’re setting this up for some older folks create a separate non-administrator id for them to use day to day.

As a business if you need antivirus your really want something with an EDR team behind it looking for anomalies - not just virus signatures. Something like bitdefender EDR or Huntress.

Lemmynsfw.com has plenty

As others have said, bitwarden. I’ve also heard good things about roboform.

I really love that bitwarden is not only open source but has been professionally code reviewed, and can be self hosted if you’ve got the knowledge to do so.

Of course, if you’re self hosting it make sure you have a solid backup strategy for your vault.

Doesn’t come with a power adapter and has weird power requirements. Wouldn’t power up at all with a standard 5V 1A wall plug, needed 5V 4A.

Apart from that it’s been perfectly fine. I wish other OS than the armbian they provide supported this CPU.

freshRSS. I’m using the linuxserver.io docker image.

Nothing is really too much.

I have too much hardware to swap out to go 10G networking or I totally would.

The point of my homelab is for me to learn and break stuff in a safe environment, so if that leads me down a Kubernetes rabbit hole at some point so be it.

If you have a Synology their Surveillance Station product is amazing and will work with basically any IP camera brand.

I only rolled my own Wireguard VPN because I wanted to learn how things worked on the backend - I’ve suggested Tailscale to many other people, its just a really well designed product.

It’s astonishing to me how much they’re giving away for free.

I’ve been testing some alternative SBCs like the OrangePi 5.

Currently mine is a fallback DNS server and reverse proxy for my network, trying to come up with some other uses for it.

They’re still low power ARM boxes, but they’re much cheaper than the RPi is at the moment.