I use wildcard certs. I don’t know if this completely fixes the issue, though.

Depends on your needs. I have a couple LXDs that only need 512MB each… But I did upgrade mine to 16GB.

Yeah, one of the USFF or whatever they call them.

I got an HP ProDesk 400 G2 with an i5 6500T, 8GB of RAM and a 512GB SSD for 99€. Works beautifully, and while it’s not as efficient as a raspberry pi, it idles around 6-7w and can run a bunch of VMs with Proxmox.

Not only for Nextcloud, but I recommend setting up crowdsec for any publicly facing service. You’d be surprised by the amount of bots and script kiddies out there trying their luck…

I would recommend just setting up iptables & crowdsec. Open only the ports your services need, and add the relevant plugins to crowdsec. Nothing should come through.

If you have services that allow people to upload files, that’s a different story.

I used to have everything backed up to a 2TB USB drive. Which I accidentally dropped down the stairs. I lost thousands of family photos and documents. That changed my backup perspective.

I now have a Synology NAS, with 12TB in a RAID5 array (for a bit of disk redundancy). All my home devices, Proxmox servers etc back up here. The NAS also holds a few TB of media. Attached to it I have a USB hard drive (also 12TB). The NAS gets fully backed up to the USB drive nightly.

I also have a remote Raspberry Pi with a smaller USB drive (4TB) attached to it at my brother’s house (in another country), where I backup most of the contents of my home NAS. I don’t back up the media, just the important stuff. I might have to upgrade to a larger drive…