combine your VMs with a little layered LXC garnish for that special touch :-)
Comment on Improving security by separating server duties
sznowicki@lemmy.world 2 weeks ago
I personally go with VMs. Except of some services that I run on Hetzner.
I got one Debian server that runs multiple VMs with tailscale. Then one Hetzner VPS with Caddy. This one acts as a public gateway.
Some things are still running bare metal, like Immich or Jellyfin because of apple hardware. However the level of entropy I have now is th opposite of all eggs in on basket. I sometimes forget what do I have where and have to look it up in my docs.
qprimed@lemmy.ml 2 weeks ago
LewdLemon@sh.itjust.works 2 weeks ago
This sounds a lot like my second option, except yours is a little more custom-made. What do you use to set up and run your VMs?
You can install qemu/libvirtd on the server and control it using virt-manager over ssh from another client. I used that setup long ago to access a vm i was experimenting with using multiple clients from different locations.
sznowicki@lemmy.world 2 weeks ago
virt-manager for qemu. I also did some cloud init script with LLM to have a nice way of spinning up new vms with a server user, ssh and my access keys. VMs have also on big advantage. It’s easy to back up entire qcow2 disk image and then if necessary move entire VM to a different host.
LewdLemon@sh.itjust.works 2 weeks ago
Ah! I use virt-manager + qemu on desktop Linux, mainly to try things and and contain dodgy software (Windows). I didn’t know it was commonly used on headless servers. Thanks for pointing that out!
sznowicki@lemmy.world 2 weeks ago
My Debian host has GUI installed. Sometimes it’s handy when i connect keyboard and mouse to do some repairs.