Sounds very cool! If I understand correctly, you are running docker directly on the bare metal Stormux, so no VM in-between. You mentioned using some external provider for backup storage, how exactly do you do the backups themself? Do you have a script/tool that saves the config and app data for each of your services?

If you are afraid of your PC infecting itself by background outbound connections, you should not turn it on at all. Running 24h vs 6h a day barely makes a difference in this regard - yes, there are fewer “random internet noise attacks” in less hours, but if your LAN is that dangerous, the computer should not be on for 5 minutes. Either you trust your LAN enough to have a computer running, or not.

Double that if you haven’t disabled UPnP on your ISP router which is probably on by default.

Talking about the sane defaults I mentioned earlier - my router has it off as a default. But if it wasn’t, my approach wouldn’t be to turn devices off¹ but change the router setting.

¹ I actually do turn off/plane mode all my non-server devices when I’m not using them but not for that reason.

I thought about and tested that scenario, but all Bitwarden apps I’m using (Firefox Plugin and Android) keep a cache so Vaultwarden being down even for a few days is not that much of a problem as long as you don’t need to change/edit passwords.

No. What kind of attack are you afraid of by idling a computer connected to your ISP router?

Yes, I think I’m getting your original question now. I didn’t even look into their hosting offers because I’m actively looking for things I can self host. It’s the same reason I self host many things, I don’t care if someone else offers it for free. I’m 100% owning it, I don’t have to rely on someone else’s server, and I enjoy the process of setting up my own infrastructure, figure out ways to make it reliable etc. It’s also a learning experience for me.

wtf is that 😄

But I agree, random hardware in your LAN is more of a security threat than anything coming from outside in many cases.

Most ISP routers have sane default settings and block all incoming traffic, you don’t even reach their log in interface. If they are somewhat updated you’ll be fine in most cases.

Against random internet noise? Yes, absolutely

How, if it’s not exposed to the internet? Burglars?

Yes, but I don’t plan to host bitwarden. I was referring to op’s question regarding vaultwarden+auth. Sorry, I think I can’t follow you

I don’t?

No, but Vaultwarden is the one thing I don’t even try to connect to authentik so a breach of the auth password won’t give away everything else