I have an ubuntu that runs a whole jellyfin/arr/torrent docker stack and used to use it as my main work and backup server.
I decided it would be best practice to host my work data on a separate machine in case anything would ever go south virus wise.
I only download and host movies, shows and music there and its all being played through the jellyfin docker.
Am I being overly cautious? Can I even get a virus like that? Has that ever happened?
Or should I continue to separate work and entertainment?
More details on my setup:
i3 12100
NVMe 500 GB hosting OS and docker files (including jellyfin cache for snappy access)
5x4TB HDD mergerfs and snapraid
You are not being overly cautious. You should absolutely practice isolation. The LastPass hack happened because one of their engineers had a vulnerable Plex server hosted from his work machine. Honestly, next iteration of my home network is going to probably have 4 segments. Home/Users, IOT, Lab, and Work.
Proxmox has a virtual monitor in its web interface, so you can access the desktop of a virtual machine that way. It’s a little clunky but works ok for quick configuration. Alternately you could remote desktop into the virtual machine.
Quicksync is a little more tricky. GPU pass through is a pain, and I’m not sure off the top of my head about that. You can Google “proxmox quicksync passthrough” and see if any solutions will work for you. There’s a chance that all you would need to do is set the processor type correctly in the virtual machine settings, but I’m not sure.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
You are not being overly cautious. You should absolutely practice isolation. The LastPass hack happened because one of their engineers had a vulnerable Plex server hosted from his work machine. Honestly, next iteration of my home network is going to probably have 4 segments. Home/Users, IOT, Lab, and Work.
How can anyone run a Plex server on their work machine? And why doesn’t their IT dept monitor their devices?
Thanks. I mean I probably don’t have that threat level, but you are right - it also feels good to have isolation.
The downside was the cost of the 2nd machine (~400$) and running it (~5$/month) and the time involved.
But I tend toward thinking it is the right choice
Have you considered replacing the OS with proxmox and running everything in virtual machines?
I haven’t. I always liked to have the possibility to use GNOME on my machine. That wouldn’t work then if I were to have a Ubuntu VM, right?
And do you know if I would I get quicksync access to the i3 for transcoding ?
Thanks
Proxmox has a virtual monitor in its web interface, so you can access the desktop of a virtual machine that way. It’s a little clunky but works ok for quick configuration. Alternately you could remote desktop into the virtual machine.
Quicksync is a little more tricky. GPU pass through is a pain, and I’m not sure off the top of my head about that. You can Google “proxmox quicksync passthrough” and see if any solutions will work for you. There’s a chance that all you would need to do is set the processor type correctly in the virtual machine settings, but I’m not sure.