switching to a khadas vim4 myself.

should be fine, if you don’t like how warm it gets a set of small heatsinks for amplifiers will run you a few bucks and takes all of 10 seconds to install.

i like both the argon and the simple heatsink setups, either work great. i did end up adding an additional heatsink to the argon, the flat case does not provide great heat exchange in an enclosed space.

you can do passive cooling as well, just all depends on how hot the location gets.

ipv6 and reverse proxied. yes.

seconded for hashicorp, you can do secrets and env vars while cutting your teeth but you should be on a path to learning and setting up secure secrets vaults.

don’t touch it till you need/want to. I had a system I wanted to expose to the internet on a vlan buried in my network, so ipv6 looked like the quicker of the 2 options. turned out to be right.

worrying my head off about security because in the old days IPv6 had some issues esp with bascially putting every device on your network on the public internet with no firewall.

learned that years ago hardware makers started defaulting to blocking all traffic from the outside when ipv6 is enabled. Once I felt comfortable just turning it on I found it pretty easy to grasp esp when the addresses stopped liking like random junk to my eyes.

Once I knew how things worked actually exposing a specific system or port set to the internet was super easy, much easier than NAT + firewall.

with my ISP. v6 unexpectedly brought a new level of privacy we had not had before. When you geolocate the IPs they show up in ISP datacenters all over the country. One day it looks like we are in VA, the next we are coming out of Seattle. We have yet to notice any speed or routing issues. IPv4 and IPv6 play well together though once you turn on v6 you might find yourself turning it on for more vlans than you planned because you want the features!

It’s always those details. I want the gpu so I can do transcoding of new files. Is you don’t need a gpu go for the 100

this is the usecase i want a personal unit for. I have a Pi4 which I use mostly for Ci/CD and maint but sometimes there is just no way to easily get something to run on ARM and I’m firing up a 800watt PC or a 160watt laptop again.

IMO either of the Intel options we are discussing here will work well for you.

Just local, streams 4k fairly OK but will studder sometimes, not enough to be a problem in general but if you want a perfect image full time you might be disappointed.

Its primarily a media player and runs 8 and 16 bit emulators. Haven’t tried anything more ambitious yet. It streams content from my NAS just fine. I don’t think multiple users would work on it for video streaming however others uses maybe.

Have a J4125 driving an entertainment center fairly competently, was eyeing a N5105 as a personal device.

yes, ill admit i didnt do it myself until recently when I didnt want to do yet-another-nat-entry and decided to join modern networking.

should have done it years ago.

first day my instance was all over the map syncing, there are a few general mismatch bugs, a couple are caching. The big one is posts on one instance not propagating to all other instances, in particularly the home instance where the thread started.

trying to do simple things seemed like a fight, working examples I found hard to come by.

Nginx “just worked”

the most confusing thing was figuring out scriptable processing (and the lua vs JS back and forth, go with njs) however there are entire repos of common examples and solutions which made it much more manageable.

i put this down to maturity and age, older projects just often have more docs, and thier code bases have been molded to fit more cases (esp the strange ones) better.

When it comes to cloudflare, Im not sure you have much of a choice, I ran across errata RE: Caddy a fair bit when setting up my latest proxy through them.

Make sure ssl is set to full or strict If using local certs as well. Want to skip local certs? Use cloudflared

depends on what your apps are doing, a lot of the servers ive installed i seem to need to force to use more memory instead of some internal disk cache it already has. its adjustable and youll know when you need it.

Got so tired of fighting caddys inadequacies and went to nginx. Worth it.

depends, a server is just a server. Its more about how you setup your domain and secure your site. My domains are all anon and I run my servers through cloudflare. You don’t really see the actual server itself, just cloudflares gateway.

monitoring can be done with the network. control can be managed there too, force them through a proxy and route all port 53 traffic to your DNS. don’t let anything out that does not go through your proxy and dns.

there are also instructions to spin up ansible within a container on the host so you don’t have to install anything else on the target and use only 1 machine. I havent tried it though.