51
I made my home lab immutable with Terraform | XDA (www.xda-developers.com)
submitted 9 months ago by to c/selfhosted@lemmy.world
27 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 9 months ago (4 children)

I might be misunderstanding this concept but it seems like extra work, or a recipe for an insecure mess that could become difficult to maintain.

I run elk stack and log basically everything which has created a centralized point for observability. This lets me granularly investigate and thereby control the state of all of my networks services.

It's a little ram hungry, but I've got some overhead.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 4 points 9 months ago (1 child)

    I run elk stack...

    I had to look that up, so for anyone else:

    How does the ELK stack work? Logstash ingests, transforms, and sends the data to the right destination. Elasticsearch indexes, analyzes, and searches the ingested data. Kibana visualizes the results of the analysis.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 9 months ago

    I highly recommend it to anyone getting into self hosting, sysadmin stuff, cybersecurity, devops, etc.

    It's headaches, but once it's working, you will have ridiculously valuable experience for any org.

  • permalink
  • fedilink
  • source
  • parent
  • [–] [S] 0 points 9 months ago (1 child)

    or a recipe for an insecure mess that could become difficult to maintain

    The concept, or the specific setup the author of that article has? If you mean the latter, I'm not going to argue. But the concept? It shouldn't have any effect either way on security, but the whole advantage of it is that it's less of a mess. The same way that running a whole bunch of services on bare metal can quickly become a mess compared to VMs or Docker/LX containers, declared state helps give a single source of truth for what all the services you might be running are. It lets you make changes in repeatable and clearly documented ways, so you can never be left wondering "how did I do that before?" if you need to do it again.

    If everything you run is a Docker container, there's a good chance Terraform is overkill; a Kubernetes config will probably do the job. But depending on your setup there are a whole bunch of different tools that might be useful.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 9 months ago

    Kubernetes is probably overkill, docker compose will work fine for most home labs. But I agree with your point, declarative infrastructure makes life so much easier, even for home labs.

  • permalink
  • fedilink
  • source
  • parent