Update SERVER.md
This commit is contained in:
parent
00b7335d33
commit
3c01f270b5
1 changed files with 10 additions and 31 deletions
41
SERVER.md
41
SERVER.md
|
@ -2,39 +2,18 @@
|
|||
Raspberry Pi 5 with a 120 GB SSD[^1] running latest Raspbian[^2]
|
||||
|
||||
## Setup
|
||||
Everything is in a single [docker compose project](/git724/git724/src/branch/master/setup/docker-compose.yml):[^5]
|
||||
- forgejo - what you're looking at
|
||||
All is a single [Docker compose project](/git724/git724/src/branch/master/setup/docker-compose.yml):[^5]
|
||||
- forgejo, of course (~~[forked](https://git.m724.eu/Minecon724/forgejo)~~ Not right now)
|
||||
- mariadb
|
||||
- nginx - web server, it supports http3 (github doesn't)
|
||||
- acme.sh - renews ssl certificate
|
||||
- valkey
|
||||
- nginx - the web server, supports http3
|
||||
- acme.sh - manages the TLS certificate
|
||||
|
||||
There's also a VPS:
|
||||
- is a router / gateway
|
||||
- is connected to the RPi by WireGuard[^4]
|
||||
Due to ISP, there's a VPS in front[^6] connected to the server by WireGuard
|
||||
|
||||
|
||||
Backups are done with a cron job every 3 days. Backups are encrypted locally with `gpg` and uploaded to a server.
|
||||
|
||||
Total cost: raspberry pi + 17.80 yearly for the VPS
|
||||
|
||||
### Software
|
||||
|
||||
Software is generally updated as soon as a new version is available.
|
||||
|
||||
Unfortunately, [Forgejo is forked](https://git.m724.eu/Minecon724/forgejo) because some things in vanilla aren't to my liking. \
|
||||
However, changes are minimal.
|
||||
|
||||
---
|
||||
|
||||
Related services:
|
||||
|
||||
- Nameserver: [deSEC](https://desec.io) (DE)
|
||||
- Mail: [MXroute](https://mxroute.com/) (US)
|
||||
- Registrar: [Spaceship](https://spaceship.com) (US) (planned move)
|
||||
|
||||
It may seem that the ideal solution is for everything to be domestic; however I need to cut costs at every possible step, so.
|
||||
Backups are scheduled every 3 days, encrypted locally (gpg) before uploading to a cloud server.
|
||||
|
||||
[^1]: SATA adaptered to USB 3
|
||||
[^2]: No, it's Raspbian
|
||||
[^4]: Precisely the RPi connects to it because NAT (also why it's necessary)
|
||||
[^5]: I'll probably switch to podman next Debian release
|
||||
[^2]: It's Raspbian
|
||||
[^5]: Running with podman-compose
|
||||
[^6]: HTTPS traffic is still e2e to the Raspberry Pi
|
Loading…
Add table
Add a link
Reference in a new issue