my adventures in #selfhosting - day 89
Oh #PeerTube, you are making me do mental somersaults as I strategize about the best way to self-host my videos.
This newbie wants to ask: how many VPS’s are too many for someone who has little coding experience and has been self-hosting for just 3 months?
Fedi friends, I’m thinking of signing up for a THIRD VPS
Why?
My current setup:
5€/month Debian VPS with #YunoHost, where I’m self-hosting #GoToSocial (this account), #Friendica, #Pixelfed, #Fail2Ban and #LinkStack.
5€/month Ubuntu VPS where I am self-hosting my (upcoming) #Ghost blog (this will make me save a ton, compared to my current Ghost Pro plan).
Back to PeerTube: I could easily upgrade my #Debian VPS and install it there - the costs would be minimal and I would double my RAM and storage. But I am afraid of PeerTube’s consumption when it comes to bandwidth. As in: if I upload a video that for some reason becomes really popular, or if a bad actor decides to DDOS my channel, would that take down all my other self-hosted Fediverse instances? Since they are on the same VPS?
I could limit potential issues by having a dedicated VPS just for PeerTube.
What would you do?
And do you have recommendations for Europe-based VPS’s with affordable plans? (aside from Hostinger) I was thinking of #Hetzner…
#MySoCalledSudoLife #AskFedi
@rainer Ja, die können scheinbar auch ganz übel Traffic generieren. Dank etwas Caching sind sie – von der Last her – nie negativ aufgefallen.
Übrigens: Interessanten Ansatz, die User-Agents via #fail2ban zu blocken
(Und ja, ich kenne die «klassischen» (D)DoS-Angriffe seit Jahrzehnten. Und weiss auch, wie man (aus Versehen!) einen aufs Nachbardepartment absetzt…)
So I go to fold some laundry, and come back to find 25 IPs from the same subnet (VPN provider) banned from my web cluster. They were all scanning for Wordpress vulnerabilities on one of my hosted websites (https://coolmic.net).
Just another day in the life of a sysadmin
One month later...
Just to put in perspective the one fail2ban rule from this post has blocked 658 unique IP addresses.
https://seanland.ca/posts/2025-02-06-the-power-of-one-fail2ban-rule
Good morning Fedi friends!
I was just checking my #Fail2Ban logs and I'm a little taken aback by all the failed login attempts.
Asking the more experienced amongst you if this is normal?
The screenshot is from my Ubuntu VPS (which has been active for less than a month):
total failed: 737;
total banned 142.
By comparison my other VPS (the one with YunoHost on Debian) has the following stats:
total failed: 530;
total banned: 106.
I would definitely beef up my security even more but I don't really understand the security guide on YunoHost. If you have tips for TRUE newbies, I'm all ears :)
"Look ma, I'm coding!"
Happy to report my #Fail2Ban installation was successful and I've enabled one jail so far.
Now off I go prepare for my Stanford in Florence Zoom call. Will I mention my FOSS journey? You bet!
#MySoCalledSudoLife
my adventures in #selfhosting - day 77
This morning I'm attempting a manual install of #Fail2Ban (that is, with commands, no YunoHost) on my #Ubuntu VPS.
I've been greatly enjoying Fail2Ban on my #Debian VPS and I'd like to extend the same protections to the VPS with my self-hosted #Ghost blog.
I hope nothing goes wrong because I have a video call with Stanford students at the study abroad program in Florence at 11am (for a women in cinema class, I'm invited every year)... so I don't wanna feel distracted by tech issues, ha!
#MySoCalledSudoLife