• 1 Post
  • 363 Comments
Joined 3 years ago
cake
Cake day: June 26th, 2023

help-circle
  • Yes, it is normal.

    # fail2ban-client status sshd
    Status for the jail: sshd
    |- Filter
    |  |- Currently failed: 10
    |  |- Total failed:     4433
    |  `- Journal matches:  _SYSTEMD_UNIT=ssh.service + _COMM=sshd
    `- Actions
       |- Currently banned: 27
       |- Total banned:     668
       `- Banned IP list:   2.57.122.194 45.148.10.183 195.178.110.30 2.57.122.208 92.118.39.195 103.74.123.88 92.118.39.23 2.57.122.196 92.118.39.197 45.148.10.151 92.118.39.236 178.20.210.185 68.178.161.186 80.94.92.183 92.118.39.63 2.57.122.197 2.57.122.191 2.57.122.189 80.94.92.171 94.156.152.18 14.225.7.70 45.78.198.199 211.253.9.160 159.224.213.138 1.214.42.172 103.239.165.114 77.239.111.233
    










  • you don’t really need to scale a homelab that much

    Maybe. But you never know this beforehand.

    if something breaks, you just want to quickly fix it manually because “doing the Ansible” is more of a pain

    In most cases you just need to replay a playbook for quick fix. But I agree that the proper fix will likely take a longer time (while downtime is much shorter).

    now idempotency and documentation-as-code is out of the window.

    Let @BruisedMoose@piefed.social decide.

    P. S. I don’t like Ansible, other tools can be easier to use. But I don’t want to recommend something concrete.


  • It is hard, if even possible, to keep documentation up-to-date. Better use a configuration management system (salt, ansible etc.) for your servers. Yes, you need to learn how to use it. Yes, it will take a longer time to make changes in your configuration. But as a result you’ll have a self-documented configuration-as-a-code that will allow you to scale your setup as you need. Reproducing something won’t require reading your notes, remembering your actions etc.