So i've been hosting a modded Minecraft server for my friends and me on weekends. While it's been a blast, I've noticed that our current setup using LAN has its limitations. My friends have been eagerly waiting for their next "fix" (i.e., when they can get back online), and I've been replying with a consistent answer: this Friday.

However, exploring cloud providers to spin up a replica of my beloved "Dog Town" Server was a costly endeavor, at least for a setup that's close to my current configuration. As a result, I've turned my attention to self-hosting a Minecraft server on my local network and configuring port forwarding.

To harden my server, I've implemented the following measures:

1. Added ufw (Uncomplicated Firewall) for enhanced security.
2. Blocked all SSH connections except for the IP addresses of my main PC and LAN rig.
3. Enabled SSH public key authentication only.
4. Rebuilt all packages using a hardened GCC compiler.
5. Disabled root access via /etc/passwd.
6. Created two users: one with sudo privileges, allowing full access; the other with limited permissions to run a specific script (./run.sh) for starting the server.

Additionally, I've set up a fcron job (a job scheduler) as disabled root, which synchronizes my Minecraft server with four folders at the following intervals: 1 hour, 30 minutes, 10 minutes, and 1 day. This ensures that any mods we use are properly synced in case of issues.

any suggestions of making the computer any more secure, aswell as backup solutions? thanks!

--added note, what hostnames do you guys call your servers? I used my favorite band albums and singles for hostnames.

but stackoverflow how i fixy the brokey!

Hello and good evening self hosters! so i recently new to self hosting, i just installed my CM3588 DIY NAS with a bunch of services which is very addicting!

but i digress, so i recently found out today that we pay $11 a month to rent our router for our house. Which i personally think is ridiculous! So i am looking into buying to own, not renting to burn money. However the router seems to get internet from the ISP through moCA which looking at router that support moCA are rather limiting in speeds and very expensive. So my query for this fine, fine community is if i were to buy a coax/moCA adapter that then coverts it to Ethernet and then plug it into my router and and then by proxy my access points. would it work, wifi 6E looks super nice and there are very few options that are very pricey for modem/router combos that support moCA.

I am open to alternatives and ideas, and please correct me if i made any mistakes on terminally or my diagram

thanks folks!

Edit--- my current router is a ARRIS Surfboard TG3452 DOCSIS 3.1 Cable Voice Gateway Modem Router with 802.11ac Wi-Fi & MoCA 2.0

So

ok, so i have recently took the plunge into self hosting with my raspberry pi. i got an SMB share Running with anonimus permissions (so anybody on the network can access the drive) and i install CUPS and the necessary driver for my Epson ET-2800 (btw download it via apt, i spent 4 days trying to get it to work from Epson website, which BTW was useless because it had x86 driver and arm v6 and my pi 400 is arm v7.) anyway i digress, so the main problem and i cant find any documentation (at least some i can understand) is that i add my printer via gnome "printer settings" and it add it and shows up fine. but when i go to print it cancels job? however i know the driver and cups works alteast of the pi server, if i ssh into it. and run "lp testdoc.txt" (which is a text file i made to check if im loosing my marbles) and it prints without a hitch. i have also done "sudo usermod -aG lpadmin root" so i believe it has something to do with cups permissions. any help would be very appreciated.

my cups config file

LogLevel warn PageLogFormat MaxLogSize 0

Allow remote access

Port 631 Listen /run/cups/cups.sock Browsing On BrowseLocalProtocols dnssd DefaultAuthType Basic WebInterface Yes

Allow remote access...

Order allow,deny Allow all

AuthType Default Require user @SYSTEM

AuthType Default Require user @SYSTEM

JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default

Order deny,allow


Require user @OWNER @SYSTEM
Order deny,allow

Browsing On BrowseOrder allow,deny BrowseAllow all

AuthType Default
Require user @SYSTEM
Order deny,allow


AuthType Default
Require user @SYSTEM
Order deny,allow


Require user @OWNER @SYSTEM
Order deny,allow


Order deny,allow

JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default

AuthType Default
Order deny,allow


AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow


AuthType Default
Require user @SYSTEM
Order deny,allow


AuthType Default
Require user @SYSTEM
Order deny,allow


AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow


Order deny,allow

JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default

AuthType Negotiate
Order deny,allow


AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow


AuthType Default
Require user @SYSTEM
Order deny,allow


AuthType Default
Require user @SYSTEM
Order deny,allow


AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow


Order deny,allow

Sorry if this isnt exactly perfect topic for this community. But i bought a t440p because of libreboot, and am waiting for it to come in the mail. Im very excited and have watched a few videos about it. I purely bought it because of the privacy that can be had

So my mother recently bought an ET-2800, By HP we had an HP printer before and we got a new one because the old one would not work with my sister's Windows 11 Laptop. So I had to set it up for my mother, the manual said you can use it without the app. But there was no way to physically do that. Anyway, I downloaded the app on my phone (android) and the app would not connect to the printer. So I used my mother's iPhone and it would connect. The setup process was stupid proof. And after I got it all full of ink, it was very painless. However, this is where the H in HP should stand for HELL. Because a few months go by and my sister and my mother need some papers printed. No problem. I thought to myself, so my sister tried to print it wirelessly. Couldn't find the printer, I said ok maybe it's a dumb driver, USB didn't work either. I asked my sister to send it to me, so I can print it on my w540 running rocky 9. Rocky picked up that I needed drivers and installed them. Wireless didn't work but wired showed up, I thought sweet I can just print the paper and get back to what I was doing. However, when I clicked print, the printer would grab the paper and run it though but not put ink on the paper. My mother asks me to forward the email to her to try to print it on her phone. I send it, and it prints, and the paper come out how it should with ink and the paper is finally printed.

After this experience with this printer, it makes me rather aggravated at this purchase, and no longer want to buy from HP. I have looked at Brother printers and there are no Proprietary ink cartage, and or laser printers. I purely wanted to talk about my experience with HP printers and would like to know what others have for a printer for recommendations, for when eventually HP kills support and makes it a paper weight, I've read many negative experiences with HP printer, specially from Lois Ross man and their anti consumer products.