• 123 Posts
  • 322 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle




  • I think you’re overthinking it. Wireguard is considered the “gold standard” and an excellent solution for what you’re trying to do. Open ports can be a concern, but an open Wireguard port is completely silent when not in use and does not respond unless it receives the correct access keys. That makes it invisible to port scanners.

    Wireguard on my OpenWRT router works flawlessly. If the router is working the WG endpoint is too, and there are no 3rd parties involved. Tailscale provides much the same thing, but as I understand it requires the involvement of multiple 3rd party services. I’ve been burned too many times by terms of service changes and security breaches so I wanted to avoid relying on any corporate entities wherever possible.

    Tasker brings up the tunnel on my phone automatically whenever I’m not connected to my home wifi and drops it when I get back home, so my home servers are always available. My biggest problem when not at home is Verizon’s crappy mobile network.

    IMO it’s worth the effort to properly configure Wireguard and get your servers working. Once you get it set up you probably won’t have to touch it for years.










  • After having my server fail to recover after a power failure while I was out of town for an extended period, I moved all important server apps to an relatively inexpensive (<$200) laptop.

    The battery is firmware limited to a 70% charge which means it will last for years with no significant safety concerns. Even at a partial charge, Debian indicates 7 hours of run time when the power fails (I’ve had none longer than 4), and it’s unaffected by power blinks. It saves a bit of electricity too and costs $150 less per year to run than my old UPS alone.

    It’s been running for nearly 2 years without a hitch.







  • I have both running right now. Mint on my laptop and media server. Debian only because it was previously required for Home Assistant support, (support which they’ve now dropped.)

    Both distros are extraordinarily reliable, but I much prefer Mint. Debian is more focused on security and some of the design choices focus on that over usability. My LAN is completely locked down and only accessible via Wireguard and the physical systems are only accessible to me, so IDK how much better security it provides in my situation. Mint has every package I’ve ever needed prebuilt while I have had to build some packages for Debian.

    Bottom line: As much as I like Mint, for me there is not sufficient reason to switch from Debian to Mint or visa-versa, but if I were installing from scratch I’d choose Mint every time.