• 7 Posts
  • 191 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle







  • I agree that desktop/ATX tower PCs are the most useful form factor, you can stuff all your old junk hardware in there and offer it a second life without much investment.

    However with current electricity prices buying more power efficient hardware can be a better medium-term investment. 1kWh bills at 0.2516€ currently where I’m at (~EU average price), assuming an average power consumption of 50W this gives you (50×24×365)/1000×0.2516=110€/year. At this rate a 200€ investment in hardware would pay for itself in 2-3 years.

    Buying a <100€ setup is not worth it for general purpose servers in my opinion, it will either be underpowered or power hungry.

    My current solution is to to run all my services in KVM (libvirt) VMs on my beefy desktop computer which is already on most of the time anyway. Best of both worlds.

    If I had to redo everything I would probably buy a NUC/mini-PC with a good CPU, 64GB RAM and low power consumption, stash a single huge SSD in there, migrate my VMs there and call it a day. But this is not a cheap setup.







  • You can definitely replace senders with correct mail addresses for relaying through SMTP servers that expect them (this is what I do):

    # /etc/msmtprc
    account default
    ...
    host smtp.gmail.com
    auto_from on
    auth on
    user myaddress
    password hunter2
    
    # Replace local recipients with addresses in the aliases file
    aliases /etc/aliases
    
    # /etc/aliases
    mailer-daemon: postmaster
    postmaster: root
    nobody: root
    hostmaster: root
    usenet: root
    news: root
    webmaster: root
    www: root
    ftp: root
    abuse: root
    noc: root
    security: root
    root: default
    www-data: root
    default: myaddress@gmail.com
    

    (the only thing I changed from the defaults in the aliases file is adding the last line)

    This makes it so all/most system accounts susceptible to send mail are aliased to root, and root in turn is aliased to my email address (which is the one configured in host/user/password in msmtprc)

    Edit: I think it’s actually the auto_from option which interests you. Check the msmtp manpage



  • Usually you would have a second DNS resolver configured in /etc/resolv.conf (or whatever name resolution config system you are using, resolvconf, systemd-networkd, etc). The system will fall back to this resolver if the first resolver fails to respond (and/or replies NXDOMAIN, I’m not sure. The exact order and fallback conditions may vary depending on which system you use). This can be another dnsmasq instance, a public DNS resolver, your ISP’s resolver, etc. This allows at least basic DNS resolution to work before your dnsmasq instance comes back up.

    I would also add automatic monitoring for dnsmasq (either check that the service/container is running, or check the TCP connection to port 53, or check that DNS resolution is working for a known domain, etc)



  • Not an answer but still relevant: I actively avoid enabling unattended-upgrades for third-party repositories like Docker (or anything that is not an official Debian repository) because they don’t have the same stability guarantees, and rely on other upgrade notification methods instead.

    how bad of an idea is this to run a DNS in docker and use it for the host and other containers?

    Personally I would simply install dnsmasq directly on the host because it is one apt install and a configuration file away. Keep it simple.