• 0 Posts
  • 112 Comments
Joined 4 months ago
cake
Cake day: January 2nd, 2025

help-circle




  • The proxmox server is connected to a router attached to a fiber ONT.

    If you want to be extra secure, there’s no reason the server needs internet connectivity/exposure at all (it should be safe as-is). Put it on its own VLAN with only specified ports open to your home LAN. That would be one extra layer from the internet - if admin/remote ports can’t be accessed via the internet connection LAN, then no way for an outsider to get into it (you’d have to provide other ways of accessing the server to admin it, either KVM, or a machine on that VLAN, etc).

    You DO NOT need to do this, just adding an idea about how to make stuff more secure.





  • I don’t disagree it’s a focus thing for many people. I’m often stunned at the lack of comprehension or attention to detail using any medium, even in person (also technical field).

    Like look, I just said to do what you’re asking would require 250 firewall rules…why are you now talking as if firewall rules aren’t required? I even went through the simplest math out loud during this meeting, so everyone would understand how I came up with that number and didn’t just pull it out of my ass.

    People pay attention to what they want to pay attention to (or as my grandfather would say - people hear what they want to hear). If those questions aren’t a high priority for their own work, they simply don’t see them.

    For OP: email is a terrible medium for such things, unless there’s been a conversation about it, and this is part of moving a project forward. Anything out of left field isn’t important to your audience, and… people dislike comitting to anything in email. As you work with people up the food chain, you’ll find less and less happens via verifiable comms like email (which is archived).





  • I don’t see how you wouldn’t have your email on an email providers servers - that’s how email works. You send an email via a provider, they forward it to the destination address you’ve included with the email.

    That destination address is another email provider’s server, which holds it until the receiver connects and downloads it. Email is a store-and-forward system, designed at a time when users weren’t always connected. It still works this way.

    Email is old, so the fundamental mechanics are pretty simple, and encryption wasn’t an option at the time - so it’s sent in the clear. Otherwise it would require both sender and receiver (either at both ends, or the servers) to agree on an encryption to use.




  • At idle, SSD is usually better (like you said if the SSD has proper power management, and that takes research to know).

    Spinning platters are generally still better for power per gig/terabyte, because write time they consume less power than SSD.

    I dont really look at drive power consumption, because even with ~10 drives running in my environment, a single cpu doing anything moderate blows away their power consumption numbers (I’ve tested, not that it was needed, heat dissipation alone makes it clear).

    I have a ten-year old 5 drive NAS that runs 24/7, and it’s barely above room temp. Average draw is a few watts (the number was so low I put it out of my mind, maybe 5 watts - Raspberry Pi territory).

    My SFF desktop is 12w at idle, with either 2 small SSDs (500GB each) or a single large drive (12TB). So much for SSD having better idle power.