DDOS can happen just from a script hammering on an exposed port trying to brute force credentials.

What?

I’ve popped up a web server and within a day had so many hits on the router (thousands per minute) that performance tanked.

Yea, no, any exposed service will get hammered. Frankly I’m surprised that machine I setup didn’t get hacked.

Interestingly (I just found this out) Android permits 1 VPN connection per user profile.

So I run a VPN in my regular profile, and found my work profile wasn’t using it. So I installed Tailscale there, and it works only in the work profile, while my regular VPN only works in my main profile.

If always assumed VPN config was a system-wide thing.

Can Proxmox with some containers/VMs address your needs?

Its what I’m running for a media server (a VM) and some containers for things like Pihole and Syncthing.

Professional self-hosting was the way it was done until SaaS took off over the last 20 years - we just never called it that, because it was the only way to do things at the time.

Now we say things like Cloud or On-Premise. And as another commenter proposed, call it “Private Cloud” to sound fancy (wel, it’s not the same thing, but it sure sounds good!).

To my thinking, self-hosting means consumer-level hosting of services for a person, family, friends, generally at home, with VPS as an alternative server host.

Oh man, this is brilliant!

Haha, everything about that story is awesome, right down to the lost and found Jabra ear bud (does Jabra exist any more? At one time their ear pieces were the best).

Yes, re-silvering takes fucking forever. Even with my little setups (a few TB), it can take a day or two to rebuild one drive in an array. One.

I can only imagine how long a PB array would take.

Lol, sorry, I really tried to make it clear what I was doing, honest, I did! 😄

Yes, I have 3 local devices that replicate to each other, one is RAID5, (well, 2 are, but…not for long). And one of them also does backup to a cloud storage.

Not ideal, because 3 devices are colocated, but it’s what I can do right now. I’m working on a backup solution to include friends and family locations (looking to replicate what Crashplan used to provide in their “backup to friends” solution).

I run RAID5 on one device… BUT only because it replicates data that’s on 2 other local devices AND that data is backed up to a cloud storage.

And I still want it to be RAID 6.

Blame your company for not configuring that shit, or choosing to let MS handle it all.

Personally, no company should be using Office 365 and external mail. Bring that shit back in house.

No Know (wtf autoincorrect?) why bringing it in house costs more? Because it’s worth it, for the control.

Except I don’t want it in a OneDrive folder, I want it in My Docs. Which you now have to browse for every fucking time.

Well, I don’t, because I reconfigured that shit.

There’s a Sync thing client for Mac and iOS(Möbius).

Yea, more like the kind of thing that boots up once a day, does something (say, is a backup destination for something else) then shuts down.

“Intestines” lol. I like it.

Hahaha haha, right, right, hahahaha

And that’s a different animal (moving the goalposts, which is an excellent idea, but OP didn’t even think of doing this).

OP asked about exposing a local port, which is a Bad Idea 99.9% of the time, especially for someone asking why it’s a risk.

Using a VPS with reverse proxy is an excellent approach to adding a layer between the real resource and the public internet.

By learning before you take on the risk.

It’s not like this isn’t well documented.

If OP is asking this question, he’s nowhere near knowledgeable enough to take on this risk.

Hell, I’ve been Cisco certified as an instructor since 1998 and I wouldn’t expose a port. Fuck that.

I could open a port today, and within minutes I’ll be getting hammered with port scans.

I did this about 10 years ago as a demonstration, and was immediately getting thousands of scans per second, eventually causing performance issues on the consumer-grade router.

Tailscale is Wireguard (or I should say it uses Wireguard, just provides automation around client config).

I’m with you… Let’s make this happen

And there simply aren’t enough mechanics now, hasn’t been for at least 40 years that I know of.