I have documented my journey here: https://wiki.gardiol.org/
On short, rent a vps and setup wireguard, then start self hosting everithing you can put yours hands on!!
I have documented my journey here: https://wiki.gardiol.org/
On short, rent a vps and setup wireguard, then start self hosting everithing you can put yours hands on!!
Daily toward all my three locations:
But not all three destinations backup the same amount of data due to storage limitations.
1 backup on a local, Independence disk. 1 backup on a HDD connected to an OpenWRT router at the other end of the house 1 backup on my remote vps.
Restic+backrest
Sftp for remote endpoint
I use and love nginx.
Maybe a bit more old fashioned than more modern solutions, but steady solid and versatile. I use it as reverse proxy ad well as proxy for php stuff and more.
Working on testing stalwart… And will need to organize and document properly my various nft rules and routing tables, because its slightly getting out of hand…
A forum is good for searches. Social media is good for blind repost and “me me me” posting.
That’s life
So sad we abandoned the forum approach.
After 20+ years of hosting my email in a similar way (postfix…) I decoded to explore the “all in ones” like stalwart and mailcow.
Stalwart looks promising because its a new approach, supposedly more streamlined and efficient. Will post back in a few months.
I am not worried about stalwart dual license, the overall feeling seems to be of trust.
I have started testing out stalwart, seems pretty nice, bit way too early to give you reasonable feedback.
If you are looking for an innovative approach to email server stalwart is the new boss in town.
If you want proven and stable, mailcow might be your easy choice.
Both can be deployed with containers, I did with podman.
Yes!
That’s it…
How did I forgot about that?
I assumed it was already set…
Need to double check all my setup scripts tomorrow…
Thanks!
Interesting enough…
tcpdump -i wg0
21:49:49.604220 IP 10.70.0.1 > dns.google: ICMP echo request, id 5337, seq 1, length 64
21:49:49.638242 IP dns.google > 10.70.0.1: ICMP echo reply, id 5337, seq 1, length 64
21:49:50.615200 IP 10.70.0.1 > dns.google: ICMP echo request, id 5337, seq 2, length 64
21:49:50.648361 IP dns.google > 10.70.0.1: ICMP echo reply, id 5337, seq 2, length 64
21:49:51.628391 IP 10.70.0.1 > dns.google: ICMP echo request, id 5337, seq 3, length 64
21:49:51.673502 IP dns.google > 10.70.0.1: ICMP echo reply, id 5337, seq 3, length 64
21:49:52.641711 IP 10.70.0.1 > dns.google: ICMP echo request, id 5337, seq 4, length 64
21:49:52.673321 IP dns.google > 10.70.0.1: ICMP echo reply, id 5337, seq 4, length 64
21:49:53.655076 IP 10.70.0.1 > dns.google: ICMP echo request, id 5337, seq 5, length 64
21:49:53.695391 IP dns.google > 10.70.0.1: ICMP echo reply, id 5337, seq 5, length 64
while on the other console, as user 1070:
ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
just gets stuck there…
This is baffling!
(stopping the ping also stop the prints in the tcpdump)
ip r add 10.0.0.2/32 dev wg0 table 1070
All the IPs behind wg0 can be pinged by user 1070 without issue, but nothing else
They do, check fittrackee they have a python sync to garmin, I use it
Does it integrate with Garmin as well?
Ah, maybe will upload some.
I wrote my minimal HTML+CSS dashboard with a touch of JavaScript and use it with pride.
Its blazing fast and quite customizable and no bells and whistles.
Here: https://github.com/gardiol/dashboard
You configure it with a touch of json.
Will look into mailcow as well!
Didn’t know of yunohost. Great tool! Not my use case, but good to know it exist.
Thanks indeed a brilliant report, you seems quite happy with it
And then the flying donkeys appeared in the sky with golden ribbons on the tails…
Seriously… If it where so easy to do…
Cloudflarw tunnels or tailscale is probably the best approximation
The VPS is required specially if you, like me, are behind CG-NAT with no way to escape from it. Using a VPS (or any other kind of server with a public IP). Using a VPS is the cheapest option…
residential IPs can be blocked for ports like 80, 443, 22 and the email ports in general (25, etc), using a non-residential IP could give a better experience. Moreover, even if not behind CG-NAT, having a public static and not-changing IP is a good advantage.
Everything is hosted locally! the VPS is only a tunnel between internet and the home server.