As I rely more on my home lab server, I’m starting to worry more about it getting stolen. If someone breaks into my home, I think the server will be a pretty attractive target.

Do y’all just stick it in a closet? That seems not great for cooling…

One of my neighbors recently got broken into.

    • lorentz@feddit.itEnglish
      0·
      4 days ago

      I have automated it with a small initramfs script which has half password and download the other half from internet. My threat model is to protect from a random thief. So they should connect it to a network similar to mine (same netmask and gateway) and boot it before I can remove the half key from internet.

      some security which is on my TODO list is: allow fetching the half key only from my home IP and add some sort of alert for when it is fetched.

    • glizzyguzzler@piefed.blahaj.zoneEnglish
      0·
      4 days ago

      One of the best uses of encryption is that you can pull drives that die and not have to try to wipe them as they die or smash them. They’re encrypted so it’s just gibberish. Mostly the reason to encrypt.

      I auto-unlock with two things: a USB drive I put in the computer that it looks for and another computer on the network that hosts an unlock file. I’m not defending against nation-states or the Gestapo, regular rubes won’t notice the pi zero hidden that hosts the network file. USB drive is for just-in-case so I don’t have to type that long ass password ever.

      I didn’t try hard, but I’m not sure how to make auto-unlocking more secure.