The idea would be to put something like postmarketos or armbian on it so it actually is a supported platform.

It does nothing but serve photo. Background tasks are minimal and many of them only run once on new photos.

Haha, all good

Yeah, I keep a oneplus 6t to test Linux images, but maybe it can do other things for a bit…

Postmarketos runs well on it.

I love this.

As I get older, I realize that the myriad of lower-power devices I have a perfectly suitable to fill roles in my infra in this way.

A shebang needs a bang!

#!/bin/bash

I don’t think anyone’s afraid of the machines taking over, but human stupidity in over-relying on them.

Be aware that there are still some bugs to workout, the menu options break some of the yaml configs if you had those already.

I’ve been down this rabbit hole and it’s not a good option for standard matx or mini itx. Best I did was get a supermicro board and a supermicro 1u half-depth chassis. It was OK for a while, but the HDDs did not cool off very well.

I’ve now not got a nas just as fast with a radxa rock 2a, a penta sata hat, some FPC cables between them and some cable bodging in a jonsbo n1 case. Drives are happy, less power consumed.

Do you mean we Lemmy users shouldn’t do this, or IaC shouldn’t be done in homelab? I don’t understand your objection.

Ansible with incus, be still my heart!

Running suricata on your wan interface is just generating a ton of noise and will be really confusing for you if you haven’t reviewed packet inspection alerts before. Not a lot of value in it unless you have many users “phoning home”.

Just run it on the lan interface.

Your approach of deny all until something complains is pretty much the most solid way to get a grip on security.

I assess and recommend security practices for a living, and I would say the most important first step is understanding where your data lives and where it goes. Once you know that, the rest is relatively easy with the tools available to us.