esperal@pawb.social 2 days ago
This was the final push that convinced me to rebuild my server from scratch! I started doing so 3 weeks ago :D
I was running my containers on a single good old Debian, that I replaced with Proxmox. I set up several VM that don’t share anything between them :
- One for all the services I don’t really care about, like game servers and utilities with no personal data.
- A second one for services in need of a GPU passthrough (Immich and Jellyfin) and partial access to some of my data (photos and movies in this case)
- And a third one that gets access to all my personal data, only hosting a container for WebDAV access and a web file browser. I might hide these two services behind a VPN in the future if I feel like doing so, for now it is still to practical to have them freely available…
- A last VM is running network related app like my reverse proxy.
I should have done this years ago, but I’m still learning and learning costs time :p
Next I want to hide all of Internet facing services behind an identity provider/application proxy (I don’t really know if it is the right way to name it ?) like Authentic to totally block access to any content from unauthorized visitors.
I guess I’ll be mostly fine once this is done ^^
Ferrous@lemmy.ml 2 days ago
Your separation between VMs is exactly what I want to do. But given how I’m still rocking a single truenas machine running all my containers, I’ve got a quite a bit of setup to do… Like you said, rebuilding everything is a slog.