Interesting writeup, thanks! I thought maybe dropping connections with those user agents would be the best but idk. My sites have not been targeted yet fortunately.

To expose your stuff to the outside internet, you need to actively set port forward in your internet router, you won’t do that by accident.

Ouch!

Did autotune touch the interfaces?

Nice! Hosting your own Fedi stuff feels great.

I’m using the Hetzner nameservers, it’s not exactly DynDNS but they have a DNS API and I just have a cronjob set up that checks every five minutes if the IP is still correct and updates otherwise.

Using this in the cronjob: https://github.com/FarrowStrange/hetzner-api-dyndns

Don’t worry, I didn’t :)

Yes, but that’s a supported way to install Proxmox.

https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_12_Bookworm

You have some options that aren’t in the installer e.g. full disk encryption

Your CPU should be perfectly capable of that. I ran Proxmox with some VMs and containers on an i5-2400 with 16GB RAM just fine.

You could run on bare Debian as well but virtualization will give you more flexibility. If you get a Zigbee Dongle or the like, you can pass it through to the VM Home Assistant is running in.

I don’t know MergeFS but usually the recommendation is ZFS.