☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot) - GitHub - azukaar/Cosmos...
If you have your own self-hosted data, such as a Plex server, or may be your own photo server, you expose your data to being hacked, or your server to being highjacked (even on your local network!).
It is becoming an important threat to you. Managing servers, applications and data is very complex, and the problem is that you cannot do it on your own: how do you know that the server application where you store your family photos has a secure code? it was never audited.
Even a major application such as Plex has been hacked in the past, and the data of its users has been exposed. In fact, the recent LastPass leak happened because a LastPass employee had a Plex server that wasn't updated to the last version and was missing an important security patch!
That is the issue Cosmos Server is trying to solve: by providing a secure and robust way to run your self-hosted applications, you can be sure that your data is safe and that you can access it without having to worry about your security.
Yeah, no, thanks. That sounds 100% like some snake oil salesman trying to sell me nord vpn or some trash because HaCkeRs.
You know your way around, I'm sure of it. But I don't, and I don't have the time.
I want to self-host but don't have the time to do it by manually by myself, I really appreciate the container automation it provides. I tried before doing it by using Docker Desktop, Podman Desktop, CasaOS, and failed miserably with all of them, or in the case of CasaOS it just didn't automate enough. Cosmos targets oblivious users like me and it's not wrong, it's just different.
Then let me tell you this: Cosmos does not solve any of the risks they paint in their vision. You are lulled into a false sense of "security" after they frightened you.
I tried it 3 months ago. It looked nice had some cool features, but It didn't fit into my personal selfhosted Home server.
This is more or like to help less-tech savy people to secure their infrastructure, which is a good point, but can't replace a complex wireguard, VPN, opnsense, 2FA , self-signed CA, docker installation.
It's a bit like Nginx proxy manager, it's good enough, does what it is suposed to do with minimal user inputs. Less prone to error, security issues...
After getting burnt on the unRAID license change and the restriction on security updates, I figured there had to be a simple os that I can essentially set, forget, and easily update when I need, which also uses SnapRAID. I might just try this out.
There must be a term for middle-ground people like me. I've used computers my whole life, as a kid I portfowarded to host WC3 servers, as a teenager I self-hosted minecraft servers both on my pc and rented linux servers. I'm a software developer and I've dabbled in dozens of technologies and have a decent understanding of so many computer/IT related things that most people don't even know exists.
I'm trying to say I think I'm a tech wizard but putting me in the "less tech savvy" bucket with my mom feels weird. Self hosting was a nightmare to get setup. There's just too much shit to learn and when all you want is a Sonarr/radarr/jellyfin setup you're just figure out the important details and get the damn thing working before you forget it all.
I like having all the customization available to me but I only want to learn details that are relevant to what I'm trying to do. It's like game developers using Unity instead of writing their own physics engine. Yeah sure I could study real hard and painstakingly implement my own engine but it's going to take fucking forever and there will be ever-present hidden issues plaguing me as I make the part of the game I actually care about.
A power user is a user of computers, software and other electronic devices, who uses advanced features of computer hardware,[1][2][3] operating systems,[4] programs, or websites[5] which are not used by the average user. A power user might not have extensive technical knowledge of the systems they use[6] but is rather characterized by competence or desire to make the most intensive use of computer programs or systems.
I've been slowly dipping my toes into self hosting.
What are the risks or disadvantages of using something like this? My plan has been to run debian with whatever services. Reading about this, it seems very complex and that makes me worried that it is more to go wrong.
On the other hand, it'll be 10 years til I learn how to do all this myself.
The main disadvantage is it will be very hard to debug and fix when something breaks.
You don't need 90% of this stuff for starting some services if you wanted to do it from scratch, just learn how to use docker compose and a reverse proxy and you'll be all set. You can always add more on later.
The main disadvantage is it will be very hard to debug and fix when something breaks
This has been my experience self-hosting the normal way though lol. Yeah I've learned a bit but it's not really an area of expertise I'm super keen on expanding. Getting my self-hosted server up was a bloody nightmare. Sharing drives, hardware pass-through with proxmox, containers, samba, mounting drives. There's an endless list of services and configurations that I fucked around with until I got it working, never 100% sure which changes were actually necessary. If an issue comes up I have to relearn the 90% I've forgotten and try and remember wtf I did to get it working in the first place.
All of this is the experience of someone who is more computer literate than 90%+ of the population.
Even learning docker-compose is a task in itself because you need to become accustomed to linux text editors and the linux file structure (which btw is still a complete fucking black box to me).
The need for an app like Cosmos is obvious. There are a million ways to fuck up your home server trying to do it yourself and most of the time you're just following tutorials made by other people. Why not just have an app that follows those tutorials for you and guarantees it's done correct and securely?
I really like the idea of cosmos. My first go with it resulted in the app crashing every 10 seconds after I installed Jellyfin. Ill have to give it another go
And here I am running a bare metal k3s cluster fully managed by custom ansible playbooks with my templatized custom manifests. I definitely learned a lot going that way. This project looks like it has just about everything covered except high availability or redundancy, but maybe I missed it in the readme. Good work but definitely not for me.
I'll have to try it out, I like the monitoring as for my use I didn't need grafana, and the auto update option so I can remove watchtower. I use npm and portaner so this would take care of them as well.
[🆕 Cosmos 0.12 - HUGE update! All in one secure Reverse-proxy, container manager with app store, integrated VPN, and authentication provider, now has a Full Monitoring suite with alerts and notifications (including presets for anti crypto miner hacks!) 📈📊 ~reddit