Cloudflare DDos protection isn’t a silver bullet; the attacks are distributed and come from shifting source IPs, and are sophisticated in that they exploit resource intensive queries specifically designed to overload a Lemmy instance. If lemmy.world were to pivot to some other instance, who’s to say the culprits wouldn’t just resume their efforts pointed at the new location? There are theories these may be carried out by the recently-defederated fringe hate communities

Ooh sweet thnx 4 the tip - will try this later! I was trying via the web dashboard which I’m pretty sure requires a subscription

Literally same. But I would still play the s*** out of an Oblivion remake.

I’m running netdata on each of my servers and it has every feature I need. If u choose netdata, make sure not to install the nightly builds since they get updated all the time and sometimes break features. One annoying thing with netdata is you have to pay a subscription for the option to disable individual alert types. I have a nearly full hard drive and there’s an alert for that which won’t go away. Same thing for temporary inbound packet drops which seems to happen everytime one particular Plex user forcibly transcodes content (they’re old and remote and won’t change their Plex client settings 😡). Each error they send you an email.

What are you running for your firewall? I’ve been curious about self hosting a Lemmy instance (currently have a few services like Plex, Minecraft, pihole, etc) but do worry about security

I use PiVPN (wireguard protocol) on the same pi I use for pihole exactly like this. Port isn’t forwarded, but I can split tunnel DNS for adblocking on the go and still ssh to my other server

Intel nuc10i7FNH on Ubuntu Pro running Plex, Tautulli, and a Fabric Minecraft server.

RPi3b+ running pihole/unbound and PiVPN