• 0 Posts
  • 47 Comments
Joined 6 months ago
cake
Cake day: April 5th, 2024

help-circle










  • hsdkfr734r@feddit.nltoPeople Twitter@sh.itjust.worksClimate change deniers
    link
    fedilink
    arrow-up
    12
    arrow-down
    14
    ·
    edit-2
    1 month ago

    It’s not black and white. Renewable energy is better than burning oil, agreed.

    But i.e. there is no recycling process for old wind turbines (carbon fiber) - they need to be replaced after 30 years or solar panels (composite material). And e-cars need batteries which need lithium (mines). Also rare earths are needed for generators and electric motors - rare earths are… rare and the production requires lots of energy and produces toxic waste (in China… which has kind of a monopoly on it. )

    Maybe solvable problems in the long run but currently these are unsolved issues…










  • One aspect is how interesting you are as a target. What would a possible attacker gain by getting access to your services or hosts?

    The danger to get hacked is there but you are not Microsoft, amazon or PayPal. Expect login attempts and port scans from actors who map out the internets. But I doubt someone would spend much effort to break into your hosts if you do not make it easy (like scripted automatic exploits and known passwords login attempts easy) .

    DDOS protection isn’t something a tiny self hosted instance would need (at least in my experience).

    Firewall your hosts, maybe use a reverse proxy and only expose the necessary services. Use secure passwords (different for each service), add fail2ban or the like if you’re paranoid. Maybe look into MFA. Use a DMZ (yes, VLANs could be involved here). Keep your software updated so that exploits don’t work. Have backups if something breaks or gets broken.

    In my experience the biggest danger to my services is my laziness. It takes steady low level effort to keep the instances updated and running. (Yes there are automated update mechanisms - unattended upgrades i.e. -, but also downwards compatibility breaking changes in the software which will require manual interactions by me.)