I'm a noob and started my learning in July. I've loved it. Still learning. Did a lot of dumb shit. Got lots of useful services up and running. Happy to point you to resources I used if you want to shoot over a DM.
I've got to figure that out still. Each step is a lot of learning and troubleshooting. I've changed the SSH port, deactivated root login, deactivated password login and left the passkey token on only my desktop PC with Fail2Ban. I'm waiting till I have another weekend I'm not at work to figure out VPN access. I'm using Synology reverse proxy so I hope I'm secure enough for now anyway.
OK, so I've spent a load of time on this today. Searching for "self-hosting security" mostly brings up mostly home surveillance camera results.
I've found this resource and have implemented his recommendations. Finally a good resource and I'm feeling much better after hardening SSH access, closing open ports in the firewall, installing Fail2Ban, etc.
How can security be made accessible? I'm a noob at self-hosting (I can deploy Docker containers and all that). There are loads of guides for beginners. I haven't found any accessible info about security to learn from in an incremental way. Surely the advice can't be that self-hosting shouldn't be done till you've done a undergraduate qualification worth of learning about cyber security first.
If you're getting a mini PC then your NAS can be older and really underpowered since it's literally just housing your HDDs and not running compute heavy tasks.
You might need a bit more horsepower if you want to use Immich AI and PaperlessNGX AI.
eBay has been great and secondhand tech is worth taking the (small) risk on for the big savings. Get an old NAS that still gets firmware updates. Synology has worked great for me since it handles reverse proxy safely without me trying to learn that myself and doing a bad job to leave my server exposed and vulnerable. Get a mini PC suitable for your needs. I got a 12th gen Intel one earlier this year for £230, many companies dump "old" stock that's perfectly functional. Look out for which CPU has a good enough iGPU for your needs if you need something like Jellyfin video transcoding.
I don't plan on having more than 7-8 services running: Immich, Nextcloud+office, firefly, audiobookshelf, paperless and a maybe few more if they're useful.
This will change when you get confidence and start realising how much good stuff is out there.
I'm a noob with this stuff who has recently self learned some of this and got a decent server setup running. Feel free to DM if you want detail about my beginner resources, how, what and any other questions.
I started with a Synology NAS. I don't know about your specific NAS, but NAS hardware can be underpowered and quickly becomr too underpowered for the stuff you want to deploy.
People online recommended a mini PC for and keeping the NAS as just a NAS. I thought I better double check what's suitable for my needs......R.Pi, DIY build server computer, NUC , Unraid, TrueNAS, HexOS, etc.
So I put in loads of work to come round to realising the initial recommendations was correct. I've kept my Synology for only NAS and use a dedicated mini PC. I've put Debian on it as my server OS. No RAID configurations, but critical data is backed up across 2 to 3 different devices and media.
Super happy (and quite proud) of my setup. It is slowly expanding.
I would recommend taking it slow, document steps you take (because you will fuck up and need to redo things), backup all important data and keep it completely detached from the devices you're tinkering with, find suitable and appropriate beginner guides. Don't go underpowered, and don't get caught up with very advanced user setups with huge overkill.
It really has been a lot of fun. Welcome inside the rabbit hole.
People tend to jump to recommend therapy, but that isn't affordable, accessible or required for every problem.
Pleased to see your recommendation start with self help. The majority of our issues need thinking, reading, listening, digesting, processing, rethinking, getting perspectives, looking at resources, revaluating our lives.
Some might need professional help or medication, but the idea of self help with resources doesnt get mentioned enough. Philosophy is a great thing to get into to explore new ways to think about issues.
A lot of things I've done may well be very poor practice. But at least I've got this thing off the ground and am learning from there. If I couldn't make a start then I wouldn't go down this rabbit hole at all in the first place. Without trying, implementing, breaking and making mistakes.....it's not like I would have browsed Stack Overflow for months. I have no programming or PC qualifications. Self teaching ain't easy. AI did a lot more heavy lifting initially. Now it mostly double checks my YAML draft and makes sense of error logs so I can be pointed in the right direct to know where to even start reading.
Sold on the importance of data privacy from content creators (I think it started with Techlore on YouTube). Once you're convinced on the ideology, then finding the tools and means is just the grunt work from there on out.
I moved to Mailbox.org, slowly started degoogling, stopped using Amazon, left Reddit after the API changes, switched to Linux after Steam Deck desktop mode gave me confidence, got a Synology NAS, realised docker was a thing on Synology, outgrew the NAS and got a mini PC server........the journey continues. Now I need to set up home assistant, Synapse Matrix server and see about changing to Graphene OS when I next change my phone.
Normies find it triggering if things take extra steps or aren't proceeding in the normal way they expect.
My family (and wife especially) get triggered......."why can't we just be normal and use Netflix, why do we have to tolerate any buffering on your Jellyfin thing. What was the email address you use again? Why don't you just use WhatsApp like everyone else, no one uses this Signal nonsense. I'm sending you photos on Google Photos or WhatsApp, why should I have to figure out adding them to you NAS drop folder. What is this MailBox nonsense, why don't you just share your calendar from google calendar".
A lot of tech tools are social tools. Other people don't want to think about this stuff. They don't care about stuff that doesnt affect them. They don't care about my FreshRSS feeds, that doesnt affect them. But they do care that I can't send them photos on Google Photos.
Everyone's wrong here. New users should try to look up some basics, and existing advanced users should tolerate beginner difficulties and not say anything if they can't support and welcome the beginners. It would be perfectly acceptable to have a self hosted noobs community so advanced users are isolated from noobs if they want to be.
Frankly, this has been a longstanding barrier for me in adopting Linux and self hosting. Communities can be really unhelpful. It's not like hobbyists are starting with reading an organised textbook. Knowledge is picked up piecemeal and sometimes there are glaring holes in beginner knowledge. For Linux adoption and self hosting, AI has helped me a hell of a lot. I wouldn't be able to do any of this without AI. In my mind, this is a perfect use for AI. I can ask my dumb beginner questions without annoying AI, and it's a very low risk situation for when AI gets things completely wrong and it doesnt really matter much. Also I find it amusing that I used the big tech company's tools to move to platforms that deny big tech companies from exploiting my data, which is now safely local.
Isn't this something Linus Media Group is focusing on by investing in HexOS.....lower the barrier for entry. I see no sense in turning away people who are interested in privacy and security. Communities should really have a "gates open, come on in" attitude.
Never knew who to tell this to, so I always kept it to myself. Probably not the theme you're looking for, but here goes:
....
Edit: changed my mind. Redacted.