• 0 Posts
  • 13 Comments
Joined 7 months ago
cake
Cake day: April 5th, 2024

help-circle






  • One aspect is how interesting you are as a target. What would a possible attacker gain by getting access to your services or hosts?

    The danger to get hacked is there but you are not Microsoft, amazon or PayPal. Expect login attempts and port scans from actors who map out the internets. But I doubt someone would spend much effort to break into your hosts if you do not make it easy (like scripted automatic exploits and known passwords login attempts easy) .

    DDOS protection isn’t something a tiny self hosted instance would need (at least in my experience).

    Firewall your hosts, maybe use a reverse proxy and only expose the necessary services. Use secure passwords (different for each service), add fail2ban or the like if you’re paranoid. Maybe look into MFA. Use a DMZ (yes, VLANs could be involved here). Keep your software updated so that exploits don’t work. Have backups if something breaks or gets broken.

    In my experience the biggest danger to my services is my laziness. It takes steady low level effort to keep the instances updated and running. (Yes there are automated update mechanisms - unattended upgrades i.e. -, but also downwards compatibility breaking changes in the software which will require manual interactions by me.)


  • Seems like it’s a PCIe 3.0 x16 slot. Do you think I should expect a significant bottleneck here? Enough to make the 4070 Super not worth it compared to the 4060ti?

    If I understand it correctly, the pcie version affects the transfer speed for data (i.e. textures) between the system ram and the gpu ram, only. This shouldn’t affect game performance much if the gpu itself has enough RAM. When it has 12 or even 16GB I wouldn’t worry too much. The gpu doesn’t work slower if it doesn’t have to wait for data from the Mainboard.

    I tried to figure the measurement the best I could, I hope I’m right. Can’t really say regarding cooling, is there really a way to know beforehand?

    Measurements: 3 slots wide starting from the pcie slot measuring on the direction where the other slots are away from the cpu) . Height: Full height of a PCIe card. The limiting factor should be the length of the card.

    Cooling: if there is a second 120mm case fan that blows warm air outside of the case (besides the one in the psu) you should be fine. If not: can you add one in the case? Mainboards often have one or more pin headers to connect the fan to (should be 4 pins). Just check the thermal sensor readings of gpu, CPU, board and add more fans if needed. ;) the pc can’t break, it just gets slower or in the worst case does a shutdown.


  • Yes.

    Pcie x16 slot? (you could look up in the board manual how fast it is - number of lanes and pcie version. But basically the standard is downwards compatible - newer cards work in older slots, but slower. )

    Dimensions: does it fit in the case? Is the cooling (outtake of the case) sufficient?

    Power supply ready? Check if the psu (power supply unit) delivers enough power to supply the new gpu. Check if there are the right plugs/ cables to feed the gpu - some require one 75w-connector, some even two.





  • I assume you want to access a self hosted service on your local server from the Internet.

    To make the service accessible from the Internet multiple things are required:

    • the router can be accessed from the outside. Find your public IP in the router or use a find-my-ip website. Better: do both. This is the address you can use to access your router (or whatever service you choose to expose through it). Side note: If the Ip-adresses of your router and the one of the find- my- ip- site are different it could mean that your provider uses CG-NAT (because ipv4- addresses are scarce, the provider doesn’t give you a real publicly accessible address). This means you can’t access your router from the Internet. Try IPv6 or contact your provider to get a publicly accessible ipv4- address.
    • because the above mentioned IP- address of your router might change, dyndns is used. Configure it in your router and test it. Test if the DNS- name you have set up resolves to your ip- address (nslookup or ping it).
    • to make your service available to the Internet you need to configure port forwarding in your router (or add your server as exposed host - means all ports are forwarded to the Internet). This means the router passes request to itself on to your internal server. Careful: everybody can access whatever services you expose. Advice: it’s a good idea to use a VPN. Setup a VPN-server in your Lan and only port-forward its port in the router. Connect to the VPN from the outside - Afterwards use the internal services through the vpn- connection.
    • scripts and the internal ip: the dyndns name needs to be used instead of the IP. Find a way to make the scripts use that name to resolve it to your external IP.