I think what you’re looking for is a firewall. Learn about ufw here.

Or, to simply answer your question,

sudo ufw allow from 10.10.100.0/24
sudo ufw enable

Or just use internal ip addr for service.

Yes. You can also set the LAN aside from HTTPS access.

Can’t use markdown in a title my friend.

They are not the hardest but it’s definitely one of the most fragile ones.

Besides from iOS/macOS, Fastmail seems to be the only choice.

If you’re going to rely on external mailserver anyway, I don’t see no point not to use cloud providers with markdown notes. (almost) Perfectly cross platform.

N3 supports only ITX boards.

Source

After I watch something (usually tv episodes), it gets auto-deleted after 3 days. torrents seed for 14 days.

What’s deleting? I have never heard of such concept.

Call me pessimistic but I think if something is too good to be true, it isn’t.

These things usually limit you one way or another which is going to be pain in the ass to deal with later. They are also not going to last long.

Seems kinda sus. Rather stick with Linode or Vultr…

Are you saying this because i dont know much about firewalls and VPNs right now? Or because i dont have a good backup solution? Or something else?

Yes.

Backup sounds to be enough but I still advice you not to. You can familiarize yourself with security in general before you do something as critical as a password manager.

Sorry, but I sincerely hope you just don’t selfhost Vaultwarden.

Its just a shitty laptop with a slow ass HDD, and who knows how much life its got

I think your main problem is going to be a reliability than security when this is the case. What is your plan for backup? You will be locked out, possibly permanently if you lose Vaultwarden data. Judging by your comments, you really, really don’t want to selfhost password manager of any sort.

is it okay to have a subdomain to connect to vaultwarden?

A lot of the people would disagree but I think so, yes. Provided that you have set up all the security measures such as firewall/fail2ban, you’ll be fine.

Am i better off just trusting bitwarden and sticking with them?

I think of it as a matter of personal preferences. But honestly, if you had to ask this without your own basic plans for security, I’d advice you to stick with Bitwarden. You’ll just sleep better, that’s all.

Does it make sense to mix my uses, i.e. media server, open project, etc. co-existing with file server for my docs and general files. Can I segregate portions for only local access?

Yes and yes.

I don’t have tons of time to maintain this. Nextcloud hasn’t been a pain, I log in here and there and make sure everything is updated (nextcloud and the server) and I run the NextCloud security scan to make sure I get an A+. Does it make sense to go for something like the better Synology NASs that can run docker images or would it provide better affordability/functionality to use a mini-pc or a FBmarketplace/craigslist slim pc hooked up to a drive enclosure or something else frankenstein-y. I don’t mind doing basic maintenance, but I can’t afford to spend every other weekend rebuilding things.

Most of the time, setting up for the first time and tweaking for maybe couple weeks top is a pita. I have not spent more than an hour a month after the initial setup phase. Realistically, you wouldn’t need more than what I spent.

I had one time that my OMV fucked up my docker containers but spent about 30 min and it was back to normal. All the other problems were network problems which will happen even if I used Synology.

I have a dead WD MyBook Live and MyBook Cloud on my shelf. WD never updated them to fix the critical security issues, I missed the 40% off upgrade window, and they’re not safe to run with network access. They also sucked even when they were new. I want to avoid products doomed to become dead-end abandonware before I’m ready to upgrade. Are there NAS brands that are known to be better/worse with this? How does homemade NAS fare as far as hardware support and having to upgrade/rebuild when OS versions change.

In the end, if you go with the premade NAS, you will want Synology. There are no real competitors in the market atm.

Homemade NAS has been constantly getting better. Trunas is amazing. OMV is nice although I’m using it just because I’m too lazy to upgrade to Truenas.

I can’t say anything about other NAS brands but homemade NAS is going to get basically the best and the fastest updates there is, depending on the OS of uour choice. They will be painless for most of the time.

Can I purchase/build a simple NAS that I use for storage and serve the files for my media server through a different device like my laptop? Is this better/worse than just streaming from the NAS itself or will I not notice in most cases?

If you’re using homemade NAS, that will be more than enough. If you’re using something like Synology, you’ll be fine but also want something better depending on your usecase.

It sounds like some of the pre-built machines can use drives of different sizes which would allow me to re-use the barely used drives inside of the WD devices. Do any of the self-build solutions allow for this

Check out Unraid. I personally would not do that though.

I would LOVE some book/media/community recommendations for digital hygiene and how to handle store, backup, maintain the deluge of information in our modern lives.

Ask here!

Feel free to ask more/correct me.

I swear you will never, ever be satisfied with anything you do with your mindset. Just chill. It’s a hobby. There is no right way to do it.

There are bazilion things to learn and not enough time. You can’t expect to do everything what enterprise level sysadmins do with big money to spend or, for that matter, to do something that seems like everyone’s doing. We do what we can.

One day you start with Ubuntu and then you hear all the crap about it and you use Debian. It’s all fine but then you use Alma/RockyLinux because that’s what real servers are using. And then you set up 30TB of zfs storage for what, 20-30gb worth of some family photos. You learn shell and python to automate simple things but everyone’s using Rust now so you have to use Rust because python is a slow crap. You want fancy website? How about learning JS, TS, React, Vue, Angular, Svelte? Why stop there? Learn Node/deno. Are you into home automation? Learn how to solder things to Arduino. Why are you not using Proxmox? Learn how to use that too. Do you even firewall? Learn pfSense. Docker’s nice but real servers use K8. Learn that too.

Next thing you know you now own a whole rack of machine that costs more than what most of the small companies have and an imposter syndrome.

Have fun. This rabbithole is sure fun but you will never catch up everything.

If you just can’t avoid the IP changes, that can be a vaild option. Thank you for your insight!

Obviously you can. But I can’t see the point of, especially if that service is Pihole nonetheless.

Another tip: IPs don’t change that often than you think. It is static as long as you have a constant connection, which is almost always the case when you use a router. Ensure that the router has little to no downtime and you have a semi static ip address(I have mine for +2 years now). But it is strongly adviced to have some kind of solution in case it actually changes.

Raspberry Pi NAS is fun but barely usable, not to mention Plex/Jellyfin.

It’s slightly out of topic of selfhosting but have you tried Obsidian?I personally feel like personal wiki must be in Obsidian.

Porkbun is great. Definitely cheaper. A bit outdated UI but we all know that’s the kinda one you really trust.

Behind Zerotier. Although I’m thinking of just exposing it because honestly if you setup right you kinda don’t have to worry about it that much.