On my machine it’s consuming about 0.5% - 1.0% of cpu time, which is higher than zerotier in the same machine (almost zero).
Tailscale does a lot more things than just tunneling though. For example, on default installation it’ll catch all outbound dns request on the machine and route them through MagicDNS (100.100.100.100).
Whelp, nextcloud isn’t known for being fast. I don’t have hundreds of thousands of emails yet so I can’t comment on that, but one thing for sure is as you put more and more data on it, you’ll have to add more CPU and RAM to it or it’ll getting more and more sluggish.
I think using container instead of VM should be better for maximizing resource utilization in a raspberry pi. Instead of partitioning your tiny 8gb RAM into 3-4 VMs with even tinier RAM each, you can run a dozen of containers and probably still have some free RAM.
Believe it or not, NextCloud. It actually can work as an email client. And it can sync calendars, contacts and todo list too.
I always look for excuses to get more servers, so if you ask me, I’d say yes, get that new server. There’s no such thing as having too much servers since there are so many things I want to self-host.
I also regularly tear down my servers and see how fast I can set it up again. Keep my deployment scripts up to date.
Here is the documentation, pretty bare though: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/oauth2.html
I use keycloak. Pretty steep learning curve, but once properly set up, it can do pretty much anything.
But if you’re in a pinch, NextCloud can act as an OIDC auth provider out of the box.
Does ssh works? If yes, you can use autossh to create persistent ssh tunnel to your VPS.
I don’t think you’ll miss anything. If pihole works for you, then there is no need to switch to adguard.
One thing I found helpful is configuring my router (asuswrt-merlin) to transparently route all dns request to my adguard instance. You might already heard that some apps and IoT devices tried to be clever and hard-coded their dns server so they can evade dns blocking (I’m looking at you Netflix). If your router support redirecting all dns request to a custom dns server, definitely use it!
Sounds great! By the way, if you’re using docker, be careful not to accidentally have a container open a port on all interface. Even if you have a firewall configured on the machine, sometimes docker can punch a hole without you knowing. Might be a good idea to run a port scan from an external computer from time to time just to makes sure no unwanted open ports.
Unfortunately, I can’t say for sure if your instance will reliably get the deletion requests and process them. I did a small test to see how deletion works a few days ago and it doesn’t seem to propagate reliably as the deleted comment is still up in another instances, even now, though other instance such as lemmy.world seem to delete it. Not sure where it went wrong either, could either a bug, instances get overloaded and didn’t receive activitypub message correctly, or OP’s instance was improperly configured, but I sure hope it’s just an isolated incident.
Like I said before, If this still worries you, you can just delete older image files in the pictrs directory every few months to make sure you don’t host user-uploaded files for too long.
If you look at the chart, pretty much nothing comparable to the same period last year. January 2023 is a lot higher than January 2022 for example. July 2023 is also higher than July 2022.
Some people say manually purging the activity table for entries older than a week or so should be safe enough.
The risk is pretty small IMO, especially if you (or your friends) are the only one that use your instance (with registration closed so no random users uploading stuff to your own instance). If you disable nsfw on your instance, the chance of storing illegal images should be pretty low, especially if the communities you subscribed are moderated as deletion from mods will eventually processed by your own instance. If this still worries you, just nuke pictrs directory every few months, perhaps automatically using a cron scripts that delete images/gifs older than a few months.
If you compare post per days from before the strike, it definitely falls. It’s no longer an upward trajectory despite subscribers growth.
If you look at the charts you linked, you can see the users activity (post per day and comments per day) is falling sharply since last month. Subscribers count mean nothing if a big proportion of the active posters leave.
This seems to be the easiest solution. Use the provided docker-compose file, then configure traefik to route requests to your lemmy domain to port 8536. How to do that depends on how you currently run traefik as there are multiple ways to configure it. Could be as simple as adding a label to the service named proxy in lemmy’s docker-compose file.
HomeAssistant should works great on this device. If you have a bunch of smart devices from different brands and want to consolidate them into a single local system, give HomeAssistant a go. There should be plenty of resource left to run pihole/Adguard as well.
I’m not sure if the GPU is fast enough to run the Steam Link client, but if it does, you can hook it to your tv so you can stream your PC games into the tv when needed.
You can also hook it into a TailScale network and set it as an exit relay so you can have a VPN from your phone/laptop that redirect all internet traffics through your home network. Very useful when you want to secure your connection when using public WiFi in a hotel or cafe.
I suspect it’s more like the workaround used by network operators to scale up IPv4 to serve billions of users necessitate more and more layer of nodes to route your packets through.
I just checked my AMD box and tailscale there can consume ~15% of cpu time when the tunnel is under active use. When it’s not used it’s ~1.5%. But it’s a low power old AMD cpu though (AMD G-T56N), so I’m not use if it compares to Ryzen 5. On my intel machine, it’s ~5% when under active use, and idle at ~0.5%.