Update SERVER.md

This commit is contained in:
Minecon724 2025-07-31 15:01:23 +02:00
commit 3c01f270b5

View file

@ -2,39 +2,18 @@
Raspberry Pi 5 with a 120 GB SSD[^1] running latest Raspbian[^2]
## Setup
Everything is in a single [docker compose project](/git724/git724/src/branch/master/setup/docker-compose.yml):[^5]
- forgejo - what you're looking at
All is a single [Docker compose project](/git724/git724/src/branch/master/setup/docker-compose.yml):[^5]
- forgejo, of course (~~[forked](https://git.m724.eu/Minecon724/forgejo)~~ Not right now)
- mariadb
- nginx - web server, it supports http3 (github doesn't)
- acme.sh - renews ssl certificate
- valkey
- nginx - the web server, supports http3
- acme.sh - manages the TLS certificate
There's also a VPS:
- is a router / gateway
- is connected to the RPi by WireGuard[^4]
Due to ISP, there's a VPS in front[^6] connected to the server by WireGuard
Backups are done with a cron job every 3 days. Backups are encrypted locally with `gpg` and uploaded to a server.
Total cost: raspberry pi + 17.80 yearly for the VPS
### Software
Software is generally updated as soon as a new version is available.
Unfortunately, [Forgejo is forked](https://git.m724.eu/Minecon724/forgejo) because some things in vanilla aren't to my liking. \
However, changes are minimal.
---
Related services:
- Nameserver: [deSEC](https://desec.io) (DE)
- Mail: [MXroute](https://mxroute.com/) (US)
- Registrar: [Spaceship](https://spaceship.com) (US) (planned move)
It may seem that the ideal solution is for everything to be domestic; however I need to cut costs at every possible step, so.
Backups are scheduled every 3 days, encrypted locally (gpg) before uploading to a cloud server.
[^1]: SATA adaptered to USB 3
[^2]: No, it's Raspbian
[^4]: Precisely the RPi connects to it because NAT (also why it's necessary)
[^5]: I'll probably switch to podman next Debian release
[^2]: It's Raspbian
[^5]: Running with podman-compose
[^6]: HTTPS traffic is still e2e to the Raspberry Pi