Weekly maintenance: Wednesday (possible downtimes ~ 10 to 20 minutes)
¶ Homelab Services
This page is here for transparency.
Miniflux,Linkdingare available through a membership
¶ 👾 Selfhosting
- Servers are hosted by an Individual.
¶ Our servers
| Server | Type | Location | Monthly Cost | Size |
|---|---|---|---|---|
Choco |
VPS | DE (EU) | ~ 3 EUR | 1CPU 2G |
Shiva |
VPS | DE (EU) | ~ 3 EUR | 1CPU 2G |
Yuna |
Dedicated | SK (EU) | (electricity) | 2CPU 24G |
pve |
Dedicated | SK (EU) | (electricity) | 8CPU 16G |
And bunch of LXC containers
¶ Aditional storage
- AWS storage for static files currently ~ 6 EUR / month
- CDN for my projects and website ~ 1 EUR / month
¶ Backups
- Daily backup with Restic and backblaze b2 storage, currently ~ 2 EUR / month
- Weekly backup goes to NAS
¶ Where are my data stored?
- Our server are running in datacenter in
Falkenstein, DE (EU), Slovakia (EU) - For backups we using Backblaze with location set to EU-Central
Amsterdam, NL - All static files from mastodon instance are server from Amazon AWS S3 storage (
Frankfurt, DE) trought Cloudfront.Europe>Amazon Simple Storage Service (Frankfurt)/S3 (Frankfurt)/Amazon CloudFront
¶ How do you protect my data
- Every service you using here will automatically forcing to use SSL encryption (HTTPS).
- Servers are backed up periodically
- Services: backed up once per day (if not stated otherwise) to offsite location.
- Servers are backed up weelky (whole machine)
- All data backups are encrypted.
- Root has disabled remote access to the server
- To access the server remotely using SSH, you must be authenticated with an ssh key.
- Access to the server via SSH is only allowed via VPN (access to port 22 from the Internet is blocked) or intranet.
- Access from the internet require admin to use 2nd fator authentication.
- All ports are blocked except those required by the server to provide services.
- Servers (if required) only communicate with each other via local network and/or VPN.
- Servers are running on separated network (VLAN) and don't have access to other networks except the internet.
- Virtualized machines cannot access Main host's network
- Access to Services (the public ones) are through proxy. Direct access is disabled whenever it is possible.
- Access to the Admin setion of services is protecte by Zero trust principles
For more information read https://www.0x0.sk/tos/
¶ So how much is cost this fun?
Current pricing as bellow
All prices above are with DPH on monthly basis, Currently it is ~ 30 EUR per month for cloud services. It will be probably a bit more when I count domains.
We will scale up as we need more resources or servers.
¶ Chagelog
-
January 2025- Added more information to How do you protect my data section.
-
November 2024:- Services between on-prem and cloud are now using VPNs (Tailscale and Twingate) to connect each other
- Added authentication with MS365 Tenant to the Forgejo
- Accessing to the Admin pages of forgejo now requre user to be in specific tenant group as this pages are behing Cloudflare Zero.
- Updated configuration of WAF for Git server because that breaking repository clonning trough https
-
February 2024: Drone was replaced with it's opensource alternative Woodpecker- Gitea is now replaced with Forgejo
- Moved all my services (on dedicated server) behind Cloudflare and personal services now require access through VPN (Tailscale) and closed all opened ports on my router.
-
March 2022: GitLab was repaced with Gitea. Planing to change Authelia with Cloudflare Zero Trust hosted service. -
January 2022: remove unused services and downscaling servers- GitLab Hosting is now discontinued and will be replaced by Gitea