SayCyberOnceMore

  • 11 Posts
  • 569 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle




  • I’ll come at this from a different PoV.

    You’re not going to see an Arr stack running on proxmox in my (professional) environment.

    Yes, Proxmox is making progress there, but you should get some “VMs on ESXi” experience. The free one doesn’t have vCenter, but it’s definitely a tickbox for me as an interviewer. (Hopefully this was on your course)

    Also, get a (small) active directory with 2 or 3 VMs running. Play around with RADIUS, Group policies, etc.

    Do some backups, destroy something and do some restores. I want to hear stories of how you recovered from a disaster. A missing file doesn’t count, I’m saying a failed drive, ransomware (simulated… but… the point is, you need long-term backups) … maybe overwrite 0’s on some of your parents media files and recover them… that’ll get the stress levels up 😉

    Good with the Ubuntu LTS… but do vary the versions (ie support old tech and new)

    1 single HDD? I’d recommend you RAID up some more… or at least take my recommendation on testing your backups

    Also good experience: get a firewall in there somewhere. Try pfSense (or OpnSense) to restrict traffic between some VMs / containers… then you’ll be good for DevSecOps too.







  • I have pfSense as my firewall, running OpenVPN and I just connect when I need to.

    Phone’s running trackercontrol all the time to block stuff and I’ve disabled most of google on it, so I’m not too concerned whilst I’m out and about… most apps I use are local-data anyway, ie CoMaps not google maps, etc… so I’m using ~1GB/month.

    Syncthing only syncs on known wifi, so when I’m home it updates with a NAS and 2 laptops (and photos with 2 tablets), so there’s always something it’s syncing with.







  • To help with the overwhelm, If you scanned these important documents then I’m presuming you still have the (paper?) originals?

    Treat them as your source of truth and work with them first - some might have superceeded your backups anyway.

    Then, as others have said, follow the 3-2-1 principle, but keep one of the backups as plain and simple files (.pdf I presume)

    If you lock the files in an app, you’re making it even more difficult to restore them later.

    Personally, I put my files (ie. .pdf, .jpg, etc) in encrypted online file storage (Hetzner) and I made sure I keep instructions elsewhere on how to get them back again (in case I’m… not able to)

    Keep it simple