Prioritizing de-clouding efforts

[email protected]

reusing passwords on internal

Please implement a password manager.

Bitwarden can do almost anything on the free tier and the few perks cost 10$ per year which arent even mandatory for actual usage.

[email protected]

May I ask why you'd want to selfhost bitwarden if the free hosted version is almost as good aside from the few unimportant paid perks?

[email protected]

Regarding mini PCs; Beware of RAM overheating!

I bought some Minisforum HM90 for Proxmox selfhosting, installed 64gb RAM (2x32gb DDR4 3200MHz sticks), ran memtest first to ensure the RAM was good, and all 3 mini PCs failed to various degrees.

The "best" would run for a couple of days and tens of passes before throwing multiple errors (tens of errors) then run for another few days without errors.

Turns out the RAM overheated. 85-95 C surface temperature. (There's almost no space or openings for air circulation on that side of the PC). Taking the lid off the PC, let 2/3 computers run memtest for a week with no errors, but one still gave the occasional error bursts. RAM surface temperature with the lid off was still 80-85 C.

Adding a small fan creating a small draft dropped the temperature to 55-60 C.
I then left the computer running memtest for a few weeks while I was away, then another few weeks while busy with other stuff. It has now been 6 weeks of continuous memtest, so I'm fairly confident in the integrity of the RAM, as long as they're cold.

Turns out also some, but not all, RAM sticks have onboard temperature sensors. lm-sensors can read the RAM temperature, if the sticks have the sensor. So I'm making a Arduino solution to monitor the temperature with a IR sensor and also control an extra fan.

[email protected]

Thanks for the tip on measuring temp of the ram, too. I will incorporate that into my monitoring scheme.

The mini pc I have has a good case design with a fan that blows across the ram, cpu and ssd. So I think it has good cooling, but I will definitely confirm with some monitoring.

[email protected]

Good call out on the smart values. That’s on the priority list for my monitoring scheme now too.

[email protected]

I don't want to spend a bunch of time troubleshooting something. Having a way to move my stuff to a different host when the host crashing is very nice.

[email protected]

Nice, my HM90s have a really great cooling solution for the CPU (big silent fan, fine finned heat sink). But no cooling on the bottom side of the main board, which houses the RAM, a NVMe and two 2,5" SATA SSDs.

As usual, the arch wiki is super helpful also for non-arch distros
https://wiki.archlinux.org/title/Lm_sensors#Adding_DIMM_temperature_sensors

[email protected]

I don't?

[email protected]

But you mention having vaultwarden and not connecting it to authentik. So you basically have bitwarden selfhosted.

[email protected]

Yes, but I don't plan to host bitwarden. I was referring to op's question regarding vaultwarden+auth. Sorry, I think I can't follow you

[email protected]

LDAP server is also helpful, even though you can just use the file backend of Authelia.

Samba4ad was easy to set up and get replicating. Switch over soon as you can.

[email protected]

Are both immich and photoprism container-dependent, or just immich?

(If they fail 27002, they're a hard no for me).

[email protected]

No, but Vaultwarden is the one thing I don't even try to connect to authentik

Implying you have it deployed in active use, no?

[email protected]

Yes, I think I'm getting your original question now.
I didn't even look into their hosting offers because I'm actively looking for things I can self host. It's the same reason I self host many things, I don't care if someone else offers it for free. I'm 100% owning it, I don't have to rely on someone else's server, and I enjoy the process of setting up my own infrastructure, figure out ways to make it reliable etc. It's also a learning experience for me.

[email protected]

Fair point.
Personally I wouldn't bother with critical stuff. If vaultwarden was down I'd have too much other issues I wouldnt want to deal with right now.

[email protected]

I thought about and tested that scenario, but all Bitwarden apps I'm using (Firefox Plugin and Android) keep a cache so Vaultwarden being down even for a few days is not that much of a problem as long as you don't need to change/edit passwords.

[email protected]

I'm not the guy you asked, but I self-host it because I like a couple of the features (like making an org for house stuff, and sharing that with certain family members), it's really awesome for OTP as well. I honestly don't know which features are the paid ones because I went straight to Vaultwarden as I knew I wanted it in house (physically) and Bitwarden didn't offer that.

agnos.is Forums

Prioritizing de-clouding efforts