DontTakeMySky

I run Debian on most of my systems and run all of my services in docker (with rare exceptions for node_exporter or stable core tools). My base systems get automatic security upgrades, and then I’ll manually check in every few weeks whenever I feel like it.

My services in docker are version locked to a specific major version (when there’s a tag available) so I can usually re-pull to get minor version updates freely without breaking issues. My few more finnickey services get manual upgrades from me every 6 months or so only.

I usually stick to an OS version for as long as I can, and to that aim I stick to LTS versions with long support windows.

4 major versions in 12mo is…a lot. Especially if those include breaking changes for you. Yikes

A Windows VM running Windows terminal, SSH’d back into the host, obviously.

Honestly I stick with whatever the default is and never had a problem that led me to find anything else.

Many registrars let you buy a domain and set up dynamic DNS for it within their system so you can own a domain and get dyndns on it.

Otherwise you could accomplish it with a VPS but you’d only need the smallest one available because it would just need to run nginx to forward to your home ip (and a small tool to update that IP when it changes). So you could probably get something for less than $5/mo.

I see you got your answer, but I’m adding on for anyone else that comes across this.

For me, I learned the most when I had a disposable and replaceable system. When I was dual booted I was too scared to touch anything in case it fucked everything up. Once I started poking round on a Pi, LiveUSB, etc it was a lot easier to learn because I could always restart.

Id start there with something like Mint or Ubuntu. Then set it up in a way where you can easily replace your OS so you can reset it often and fuck around. Then just learn as you go.

How long are folks planning to wait before migrating to something new? I suspect this is still safe for at least a few months before things fall out of date, right?

Or I guess it allows wire guard to update freely so it’s probably safe until something specifically breaks.

Just be careful you don’t get their “smarthome” line, at least for cameras. It doesn’t require Internet to operate, but it requires Internet for configuration and management.

I’m not sure if that’s the same with their doorbells, but it was true of their wifi cameras.

I wonder if you could copy (or buy used) some crypto mining rigs for this. I’m not sure if there’s some kind of bottleneck im not aware of though.

That’s a shame. I didn’t realize it was that locked down. Ive had a lot of terrible routers but all the ones I remember allowed me at least a port forward.

I think OP can accomplish some of the same result if he can get a cheap VPS to connect through (have the laptop Wireguard to the VPS, then have a proxy on the VPS forward to the laptop over the VPN, but that’s probably not worth the hassle for a starter project unfortunately.

With most consumer wifi networks you can usually enable port forwarding. That would let you access services from anywhere.

Personally I would set up a Wireguard VPN server on the laptop and enable port forwarding only for the Wireguard port. This will let you access your laptop from anywhere, and it will protect you by limiting your attack surface (basically you only need to have a device Wireguard connection and you don’t need to worry as much about securing every other service you want to run).

Then I’d set up dynamic DNS with any DNS provider so you don’t need to keep track of a changing IP.

Then you can install whatever services you want on the laptop and you’ll be able to access them from anywhere by connecting to the Wireguard VPN. It does mean you can’t easily let a friend access a service on your laptop, but the tradeoff is you don’t have to worry as much about security while you’re learning.

Personally I like to keep my data on a separate system because it helps me keep it stable and secure compared to my more “fun” servers.

That said, being able to run compute on the same server as storage removes a bit of hassle.