/hsg/ - Home Server General

Mineral submerged servers are cool edition.

Home server general is a general thread to discuss building, setting up your own homeserver and maintaining the services and demons on it.
Discord: discord.gg/9vZzCYz

>hostan. installan. rebootan. crying about uptime.

Old news:
* OpenBSD working on raspberry pi now!
* remember to back your files in case you get rm -rf'd
* Update your linux kernel! The UDP PEEK bug is sicc.

Old Thread
PS: I only copied previous OP info lol
PS2: Sorry for missing the title.

Other urls found in this thread:

tls.imirhil.fr/
ssllabs.com/ssltest/
github.com/ran-sama/python3_https_tls1_2_microserver
safematix.com/security/scoring-a-100-100-100-100-on-ssl-labs/
forum.armbian.com/index.php?/topic/4689-server-nas-in-one-hardware/&do=findComment&comment=35594
forum.armbian.com/index.php?/topic/4089-espressobin-support-development-efforts/
forum.armbian.com/index.php?/topic/4753-espressobin-power-consumption/
cnx-software.com/2016/09/23/marvell-espressobin-board-with-gigabit-ethernet-sata-pcie-and-usb-3-0-to-launch-for-39-and-up-crowdfunding/
xu4.keltike.de/performance/odroidxu4-with-and-without-uas-support/
friendlyarm.com/index.php?route=product/product&product_id=186
wynandbooysen.com/raspberry-pi-ups-server-using-nut.html
kevinmarquette.blogspot.com/2013/11/rrdtool-server-dashboards.html
ebay.com/itm/1U-Open-Source-Server-Router-X9SCI-LN4F-E3-1220-V2-3-1Ghz-Quad-Core-8GB-RAM-1TB-/152732465082?hash=item238f9077ba:g:fioAAOSwcqBZ1oBX&autorefresh=true
twitter.com/NSFWRedditVideo

can any old pos be a server? how do i connect to it remotely? do i have to pay anything monthly to host it?

Thank you OP for the fix!

Also reminder that poorfags can have safe and fast raspi servers:
How many of you people pass these tests on your big machines?

tls.imirhil.fr/
ssllabs.com/ssltest/

Install on any hardware:
github.com/ran-sama/python3_https_tls1_2_microserver

>itt retards and poorfags will prove why they're poor and retarded

My objective is:
>NAS single board computer
>lowest possible power consumption

I've considered the Raspi3, but the horrible USB + ethernet bandwidth put me off.

Is the Odroid XU4 a good fit for my requirements? It has USB 3.0 and Gibabit ethernet. Any other suggestions?

Teach me your ways senpai. I have A+ too but only 9X average.

Told you last thread. Odroid XU4 is fucking awesome. Separate Ethernet bus from USB one. Also 3.0. It can run almost a full power with a chipset cooler. Also great and quick community. Which more do you want?

Is your openssl context missing something and what do you run?

>Told you last thread.
Yeah I've read your post. Thanks user. Just looking for more opinions, but I'm probably gonna get the XU4 yes.

>It can run almost a full power with a chipset cooler.
I'm getting the passively cooled one, since processing power is not my priority. Shouldn't I get it for any reason?

I'm not using that github. Just nxings with http2 and letsEncrypt.

Sorry then. About the cooler, you can get the Hardkernel one or search for some random at ebay at half price. Research if you don't mind the money

>About the cooler

Wait, but the passively cooled XU4 (model XU4Q), comes with the passive cooler, right?

I have an EspressoBin. It's cheaper than the Odroid and has GbpE, SATA, USB 3.0, as well as mini PCIe. The performance is great, but it runs very hot and can be unstable at times.

That's interesting. How's software support? Compared to Odroid.

I think it should, but I don't know since Igot mine on January. It came with a fan I replaced.

>mineral oil meme
lol, have fun replacing shit. mineral oil is fucking nasty.

There are a couple distros that already support it: Arch, Ubuntu, Armbian; I run Arch on mine. The drivers are already mainlined though, so it shouldn't be difficult to get it running on other distros.

>tfw want to build a server but can't find a use
What the fuck do you people DO ?

this [spoiler]lanigiro[/spoiler]

>I'm not using that github. Just nxings with http2 and letsEncrypt.
That is fine, but you should be able to set up a proper and safe one with nginx too!

safematix.com/security/scoring-a-100-100-100-100-on-ssl-labs/

Fix your shit fellow Sup Forumsentooman friend.

Edit: my bad wrong link

> still no CAA record

>still being a bully
I am poor and NOIP doesn't offer me to add one.

I think the other one is a little more useful on ym case.

ShouldI try harder or what I have already is enough?

nigger meme domains cost less than $10 per year

my server:
-website
-email
-owncloud
-pihole
-ftp
-openvpn
-samba (need compatibility with windows machines)

What else can I do? Any suggestions?

I'm kind of a cunt, speaking what ciphers I support as you can see here only two are allowed currently.

Any modern browser will support these two. They are even the ones suggested in the TLS1.3 drafts, so they are future ready.
Just kick out old ciphers, force TLS1.2 or higher only and check on that tls.imirhil.fr site which can be more specific where you have room for improvements.

I dunno, a friend runs nginx and he made it work with A+ 100/100% as well after just removing support for outdated ciphers.

>$10 per year
You have my attention. Where did you purchase yours and do they need a full record for your name and address?

Thing is I try to test on that French web and it gives me a timeout.

Doing a 24TB pulldown. Would kill myself if I didn't have 300mbps

Just retried it, still works. Does your server drop the connection to it or maybe your ISP?

>Where did you purchase yours and do they need a full record for your name and address?
Literally any DNS registrar for common TLDs? And they will accept anything you put in for the records.

I don't know, it just refuses to test because "timeout after 10 seconds"

You can find domains on sale for 0.99$

Guess I use the address of a hotel and pay in some untraceable currency if they let me.

namecheap, internetbs.net
.info domains are less than $3.
and letsencrypt certs are FREE

>Guess I use the address of a hotel and pay in some untraceable currency if they let me.
Prepaid VISA gift cards and I have the university of Mogadishu in Somalia as my address.

Thanks that is a good start for me then.

whats better than a espressobin

I'm seeing I'm lacking some good certificates like TLS1.3, SSL 2 and 3. I will research tonight.

I've been reading a little and seems like it is good to have those certs deactivated. I don't know if I will try harder since I'm already at A+

You don't know shit about security!

That's a dual-core A53 @1.2GHz. The specs read like a decent OpenWRT router concept but I'm skeptical that it has the ponies to max out bandwidth as a fileserver let alone OpenVPN.

>can any old pos be a server? how do i connect to it remotely? do i have to pay anything monthly to host it?
Yes. SSH. Only if you want a static IP and even then it depends on your ISP.

>TFW you don't have any excuse to have a home server
I already have a VPS because reasons, so anything I need to host or access remotely can go there
I only have one computer in use, so I don't really need a fileserver for my home network
If I just want to mess around, setting up a VM with vagrant takes less effort

So why do you have a homeserver? Files? Host your own website locally? Just for fun?

In my case:
>NAS
>Nextcloud for files, calendar and contacts
>VPN
>Torrents
>IMAP email server
>Media server

that shit is more for bragging rights than practicality desu
negated by your shitty free domain

regardless, heres my main web server

nextcloud instead of owncloud
znc
torrent client
nfs
bookmarking
rss aggregator

...

What makes nextcloud better than owncloud? Is it really worth the jump?

namesilo has domains at $1.89 that dont go up when you renew, and include free whois privacy.
personally I use internetbs because it worked out cheapest for my .de

i have no idea, i dont use either

>>Nextcloud for files, calendar and contacts
I'm trying to make Nextcloud for myself but I can't see myself using it. Although it would be a nice project, I don't want to make something for nothing.

How good is its sync among devices?

>So why do you have a homeserver? Files? Host your own website locally? Just for fun?
Exchanging files with friends and putting sensor data online so I can access it from far away.
Get into RRDtool, you'll love it.

>2016
jeez, why the FUCK didn't I know about this before?

>amlogic
>armada
How well are they supported by which distros? Issues with bootloaders or binary firmware blobs?
If I'd get one I don't want to be stuck on a cool *NIX box with no updates after just a year.

Namecheap sold .XYZ domains for 88 cents

not him, I haven't got one, but there are some benchmarks out there, that show them at more than 1.2Gbps, running "very stable" on armbian.
support:
forum.armbian.com/index.php?/topic/4689-server-nas-in-one-hardware/&do=findComment&comment=35594
forum.armbian.com/index.php?/topic/4089-espressobin-support-development-efforts/

power:
forum.armbian.com/index.php?/topic/4753-espressobin-power-consumption/

speeds:
espressobin.net/forums/topic/performance-router/

Are those ethernet ports connected through an internal switch? Making the CPU and OS handle the bridging stuff can bog down things you know.

Here is mine. Its consumer grade stuff running FreeBSD. This setup was virtualizing most stuff with bhyve but I got away from it because virtualization doesn't cope well with a silent computer.

Todos:
- de-virtualize the firewall to my new Alux APU.
- implement VLAN on the Jails (through vimage) to get a proper DMZ again.
- segregate at least one of the Samba4 DC instances into some kind of SOC hardware independent from the rest.

cnx-software.com/2016/09/23/marvell-espressobin-board-with-gigabit-ethernet-sata-pcie-and-usb-3-0-to-launch-for-39-and-up-crowdfunding/
read tkaiser's comments

that massive useless space and the transparent holes are really bothering me

Are any anons running mail servers at home, are you doing it with a restrictive ISP? I believe mine blocks port 25 unless you have a business line which is usually twice as much for half the speed. Is the only option I have to go with is a VPS, or is there something I'm missing knowledge wise to host my own?

Try to use Submission or SSMTP ports instead.

I know its lazy I'm keeping the size as it is to include some pics later idk.

says it runs hot and unstable.
Nice, thanks. If I'm reading this right, tkaiser says the Armada 38-series can move 255MB/s and the XU4 is similar but faster over USB3. The EspressoBin is the 37-series, though.

XU4 results:
>xu4.keltike.de/performance/odroidxu4-with-and-without-uas-support/

>I'm getting the passively cooled one
Apples to oranges but my C1+ with quad 1.5GHz A5 idles in the 60sC with a passive heatsink and runs up over 80C in the summer under load (locks up). Even a 1GHz underclock only bought ~5C of headroom.
In retrospect, I would want an active fan on the C1+.

you can use a cheap $5/yr vps just to tunnel the smtp traffic if your isp is unwilling to help
doesn't hurt giving your isp a call and asking for port 25 to be unblocked though, often its only blocked due to spam

friendlyarm.com/index.php?route=product/product&product_id=186

>Try to use Submission or SSMTP ports instead.
You still wont be able to do shit with it. Every mail server will try to talk to yours over SMTP.

smtps works fine in 99% of cases

So a friend gifted me a 1tb drive and I feel like building a small NAS for storing old games, music and jav, What's the cheapest way to go about this that wont look ghetto as fuck? (no sbc just connected to the hdd next to it, something in a proper form factor) or should I just go with some synology shit?

Feels like you should just buy a QNAP or Synology if you want pretty, yea.

The odroid-hc1 actually looks perfect for this

>can't see myself using it

You don't use any folder syncing software like Dropbox, OneDrive or Google Drive?
You don't sync contacts and calendars between your devices?

If you do any of the above, I don't see why you wouldn't see yourself using it.

>(locks up)
It doesn't throttle automatically?

Has no USB 3.0, which I wanted for my disk docks.

I actually used to use Dropbox to share random links.
And it is true I lack a proper calendar app since Sunrise closed down. And that it wasn't G's.

You may made a point user, thank you. I will looking it up again.

It should. (I'm the user on the XU4). Anyway, if you're having doubts you should take a look at Odroid's forum, since a lot of people ask that kind of questions and tink around with that details.

Any proper guides for setting up a single UPS over the network with NUT? Like ups is connected to xxx.xxx.0.101 (also hosts a bunch of other hosting stuff tldr 24/7 runtime) but there's also 0.100 which is my main desktop which I want the ups connected to 0.101 to monitor and shutdown.

If it's a 2.5" drive and this is not looking "ghetto" to you, sure.

wynandbooysen.com/raspberry-pi-ups-server-using-nut.html

looks okish

I setup a pi to handle mine, it was shockingly painless

Seems okay, I managed tl set it up on localhost but I expect issues over network

>I will looking it up again.
Do it. And it's extremely easy to install. Barely any config to do.

>take a look at Odroid's forum
Will do, thanks user.

Find me the cheapest 2-4 Intel NIC machine for setting up pfsense, qotom is chinese botnet, apu4 from pcengines(?) might have coreboot and ecc but very weak CPUs

And that's everything I know

Second hand Supermicro board, a compatible second hand chip with AES-NI and a second hand NIC card from eBay.

>Second hand Supermicro board

With IPMI I forgot to add. Fucking love IPMI.

>liking IPMI
>poor excuse not to use rrdtool and just ssh

kevinmarquette.blogspot.com/2013/11/rrdtool-server-dashboards.html

Any particular ones?

Something like this: ebay.com/itm/1U-Open-Source-Server-Router-X9SCI-LN4F-E3-1220-V2-3-1Ghz-Quad-Core-8GB-RAM-1TB-/152732465082?hash=item238f9077ba:g:fioAAOSwcqBZ1oBX&autorefresh=true

Dunno if you're in the US or not, but if I was in the US, I'd buy that for my PFSense box and stick my 4 port NIC card in it for even more ports. According to the description it includes the required riser card.

Isn't IPMI for lower level configuration? Rrdtool is OS level

>Isn't IPMI for lower level configuration?

Yes. Either through a web interface or KVM tool.

You're an idiot.

>having to fiddle everyday in his bios or raid settings
shitters detected

So how good are to link switches? I want to get their TL-SG1016PE 16-Port Gigabit Easy Smart Switch with 8-Port PoE+ for running 8 cameras and a few cat cables around the house. Will probably pair it with a ac68 router and try and get whatever modem, maybe even the ac68 modem router version. Obviously running the cameras to a nas. Apart from that idk what else to attach, maybe a web server but I don't plan to run my own mail server any time soon.

>mfw ISP blocks allmost all 65500 ports

It's gonns be tough telling them to open them up.

You're an idiot.

v p n

Okay, show me your shitty prebuilt server. I bet it lacks ECC mem.

Ecc lmao

...

And yes. It's ECC.

That's a lot of 2TB drives

>java ikvm viewer
>17+ terminal windows open
>fat menu bar
Thanks I vomited a little. Enjoy your furry porn raid on shitty 2TB "value" Seagates, lmao.

I believe that is what's known as "getting told".

>seagate raid
>told

>Calls out someone about their server.
>Gets fucking rekt.
>Still finds something to bitch about because he's poor as fuck.

I bet your "server" is made up of consumer grade parts you little fucking bitch.

Keep meme-ing kid.