The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

You have registers upstairs right? That should provide enough flow so you’re not stressing your system

Right here @dingus.

During the summer, close the down stairs registers.

Also yes, if your system can, leave the fan blowing, that way you keep the air circulating.

Our thermostat is downstairs, and this is what we do.

Sigh, kinda… but don’t forget to factor in your backup costs too

And as soon as that’s working; they’ll break something else

Same OS, you just flip the disk over to install

I don’t use b2, rather; I have a personal account. Backing up 3 computers and they’ve never said anything over years So. Yeah it’s fine

Longer lasting I think; leave it powered on and warm.

Best in reality; buy 3 drives, and after you do a backup move one off site.

3-2-1-1

I love pihole, for my family it is better as it helps on all the devices. Being able to block malware and tracking is nice too

There are options good and bad.

I’d back up just the dockers. The OS can be rebuilt easily enough. Yes Rsync the data

Or. Shut it down, pull the SD card, put it in another computer and rip it as an image, Full bootable backup

I would do the first not the second.

What u/JoBo said.

I’d look at your wiring. My first thought is there is a short being crated as you walk over that area. It is pressing the wires together

And to be honest I really can’t think of anything else.

Yes I’d look at the floor in the loft. I’d also guess that’s easier than taking apart the ceiling.

I’d also poke in and around the wiring harness for the alarm

Ooo. Thank you.

Kindle screens are very good , but eff Bezos

An iPad is versatile, but then Apple…

But FOR ME, I cannot read books on a computer screen, it is just too awkward.

So yes I iPad.