It’s pobably both

If you buy three of them you can set up a Ceph cluster I suppose ahah. That would solve part of your issue of having storage and compute on the same node.

If you don’t need enterprise level hardware and support, I can suggest MinisForum. They released the MS01 fairly recently and I believe it fits your specs.

https://store.minisforum.com/products/minisforum-ms-01

That’s the problem, if anyone somehow gets your root CA key, your encryption is pretty much gone and they can sign whatever they want with your CA.
It’s a lot of work to make sure it’s safe in a home setup.

I’m talking about home hosting and private keys. Not businesses with people whose full time job is to make sure everything runs fine.
I’m a nobody and I regularly have people/bots testing my router. I’m not monitoring my whole setup yet and if someone gets in I would probably not notice until it’s too late.
So hosting my own CA is a hassle and a security risk I’m not willing to put work into.

The domain certificate is public and its key is private? That’s basically it, if anyone gets access to your key, they can sign with your name and generate certificates without your knowledge. That’s my opinion and the main reason why I wouldn’t have a self hosted CA, maybe I’m wrong or misled, but it’s a lot of work to ensure everything is safe, only for a self hosted setup.

For self hosting at least, having your own CA is a pain in the ass to make sure everything is safe and that nobody except you has access to your CA root key.
I’m not saying it’s not doable, but it’s definitely a lot of work and potentially a big security risk if you’re not 100% certain of what you’re doing.

That sounds like a bad idea, you would need your CA and your root certs to be completely air gapped for it to be even remotely safe.

Well it’s a good step in the right direction, not a massive difference but still

Maybe it’s badly implemented where I work, but I feel it’s clunky and messy

Shhh we don’t talk about these !

There are two types of backdoors, the ones that were fixed and the ones we don’t know about.

It’s definitely freakish luck but at least it got found out. A closed source software would have gone through unnoticed.

If anything it highlights how great open source actually is when it comes to security. People saw it and immediately flagged it.

Just so you know, the load avg is not actually the CPU load. It’s an index of a bunch of metrics crammed together (network load, disk I/o, CPU avg, etc.). A good rule of thumb is to have your load avg value under the number of cores your CPU has. If your load avg is twice the number of your CPU cores it means that your machine is overloaded by 100%, if it’s equal to your number of cores, your machine is using 100% of its capacity to treat whatever you’re throwing at it.

To answer your question, you can probably run a script that fetches your 5 min load avg and triggers a reboot if it’s higher than a certain value. You can run it on a regular basis with a systemd timer or a cron job.

.*

If you feel like it definitely give it another go. Vim (or neovim) is just insanely good once you’ve developed the muscle memory for the keybinds.
It takes a bit of time and practice but it’s actually fairly user friendly once you understand how it works. (c for change, y for yank, p for paste, e for end, b for beginning etc.)

Powershell is so much more than bash, not in a derogatory way.
It’s a full fledged object oriented programming language, and it’s written in .Net I believe. You can integrate tons of plugins to manage your whole infra (exchange, Cisco, AD, VMware etc), just from the Powershell shell.
I hate it because it’s slow, clunky and overly complex for its prime use, which is scripting.

I see Powershell as a nuclear bomb. It is extremely powerful and complex and barely anybody uses it because of it.

I use it for foot navigation on hikes or to find things not on Google maps, like park benches or public toilets. Works like a charm. Never really used it for car navigation though, as it doesn’t work on Android auto. It’s very worth it in my opinion.