🇨🇦

  • 0 Posts
  • 14 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle








  • Darkassassin07@lemmy.catoSelfhosted@lemmy.worldHow do you keep up?
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    3 days ago

    OS updates I only bother with every 6-12mo, though I also use debian which doesn’t push major updates all that regularly.

    As far as software goes; pretty much everything is in a docker container with watchtower automatically pulling new updates to those nightly at 4am. It sends me email notifications, so It’ll tell me if an update fails; combined with uptime-kuma notifying me if any of my services is unavailable for whatever reason.

    The rest I’ll usually do with the OS updates. Just because an update was released, doesn’t mean you’ve gotta drop everything and install it right this moment.




  • Regular DNS can be monitored, intercepted, and modified however your ISP decides, even with you specifying custom DNS servers.

    I run pihole on my LAN, with cloudflared as its upstream DNS. Cloudflared translates regular DNS into DOH using cloudflare and quad9 as the upstream DOH providers (configurable).

    Pihole DOH with cloudflared

    Finally I block all port 53 (dns) traffic at the router so it cannot leave my LAN. All LAN devices that want regular DNS are forced to use the LAN DNS server which wraps their requests in DOH for them. (as well as blocking ads, tracking/telemetry, and known malware sites)