Devices

Tags:
Categories:

This section discusses suitable devices for hosting home services.

Hardware Platforms

There are many options for home-use devices: retired laptops,闲置 desktops, development boards, NAS devices, soft routers, Macs, etc., all of which can host services.

Hardware choices in 2024 no longer need to be limited to x86 platforms. ARM platforms have matured with advantages including low cost, sufficient performance, low power consumption, and rich ecosystems suitable for home use. Unless you must run legacy software, ARM platforms are excellent choices.

Installing Windows/Linux on Apple devices or running Hackintosh on non-Apple hardware requires technical expertise, suitable for users comfortable with system modifications.

Device Selection Criteria

  • CPU: Prioritize power efficiency/performance ratio
  • Memory: Minimum 4GB baseline
  • Storage: Consider redundancy and expandability
  • Network: Gigabit Ethernet essential
  • Cooling: Reliable thermal management for 24/7 operation
  • Noise: Acoustic requirements depend on placement location

Operating Systems

Linux offers the best ecosystem with abundant tools. Command-line operations suit users with technical backgrounds. Non-professional users might consider Ubuntu Desktop. Black NAS systems are viable but require self-troubleshooting.

Windows has the broadest user base. Most requirements can be met through IIS (Internet Information Services) with simple mouse operations.
Windows installation reference: massgrave.dev

Apple’s ARM CPUs make Mac Mini a cost-effective hardware option. However, macOS requires alternating between GUI and command-line interfaces, suitable for technically proficient users.

System Selection Recommendations

  • Beginners: Windows + Docker Desktop
  • Advanced Users: Ubuntu Server/Debian
  • Stability-Centric: RHEL/Rocky Linux
  • Specialized Needs:
    • Media Server: unRAID
    • Storage-Focused: TrueNAS
    • Full-Featured NAS: Synology DSM

Recommended Devices & Systems

Professional users have diverse requirements, while non-professionals primarily need NAS devices. Simply search for “NAS” on e-commerce platforms and purchase according to needs.

For budget-conscious users: repurpose闲置 devices or purchase discounted hardware from second-hand markets. Windows Server 2022/2025 or Black NAS systems can be installed with technical effort.

Data Security

Hard Drive Failure

Initial drive failures often manifest as intermittent read errors. Waiting until complete failure risks expensive recovery costs and potential irrecoverable data.
Recommend purchasing a RAID enclosure. With 5-year drive failure rate at 10%, dual-drive RAID reduces effective failure risk to 1%. As long as drives don’t fail simultaneously, data remains recoverable through replacement.

Data Theft

Unencrypted data on stolen drives creates significant risks, especially for sensitive materials like confidential documents and password backups. Enable drive encryption to mitigate losses from theft.
Encryption incurs system resource overhead. Performance-sensitive users might disable encryption but must prioritize physical drive security.

Multiple Backups

Local storage isn’t foolproof - risks include theft, natural disasters, and ransomware attacks. Implement multi-location backups using reliable cloud services for critical data.

Network Security

Avoid Exposing Public IPs

Some network configurations assign public IPv6 addresses to devices, making them vulnerable to port scanning and potential exploits.
Unless specifically required, configure IPv6 in NAT6 mode for address translation to prevent direct IP exposure. For external services, use DMZ hosts. For personal use, consider WireGuard/Tailscale/ZeroTier VPN solutions for secure home network access.

Software Installation Caution

All software (mainstream or niche) may contain vulnerabilities. Regularly update software, remove unused applications, and avoid granting unnecessary privileges.

Firewall Usage

Disabling firewalls creates immediate convenience at the cost of security risks. Invest time in configuring firewall rules rather than leaving them disabled.

Security Software

Free security solutions offer basic protection better than nothing. Consider tools like Huorong Security or 360 Security.

Security Recommendations Summary

  • Network Segregation: VLAN Partitioning
  • Access Control: Reverse Proxy + Authentication
  • Monitoring: Hardware Status Alerts
  • Backup Strategy: 3-2-1 Principle
    • 3 Copies
    • 2 Media Types
    • 1 Offsite Copy
Device Classification