• 8 Posts
  • 6 Comments
Joined 3 years ago
cake
Cake day: January 14th, 2022

help-circle
  • I’m glad you asked, its always good to learn new things! The idea behind having a drive that automatically decrypts on boot is so you have data protection at rest when the server is off but still are able to have the server start up and run the tasks it needs to do without having to input a password before the machine starts up. Encryption keys are stored in the TPM which is usually stored on the CPU and the data should still be protected by the login prompt unless there is some type of bug that bypasses the login prompt.

    So imagine a scenario where the power goes out, even just for a small amount of time. The uninterruptible power supply connected to the server allows for clean unmounting of the filesystems and then shuts the server off. The server then comes back on when power is detected from the grid again. If an encrypted drive doesn’t have automatic decryption and requires a passphrase before boot, the services that I’m self hosting aren’t running. I’m wanting to run home assistant and a security camera NVR so that could mean that I’m stumbling around in the dark tripping over things to get to the server to type in a passphrase, or there could be a robbery and I now have no evidence of who the culprit might be.

    Having the drives automatically decrypt in a safe manner helps ensure higher availability (without me spending a small fortune in additional hardware costs because you can usually throw money at a problem to fix it), and data protection in the event of a smash and grab robbery.

    The alternative to automatically decrypting drives while ensuring my services work after power failure is to not encrypt the drives at all.

    Let me know if you have anymore questions. Thank you for your post.











  • Stremio is essentially a glorified torrent client with a nice UI. It runs locally on a device connected to the tv you want to stream to. It behind the scenes searches trackers and downloads from torrents of the content someone wants to watch in a netflix like UI. Someone that wasn’t technology literate wouldn’t know they were pirating content from torrents if you didn’t tell them.

    A solution is that you manage the server and jellyfin and your friends/family connect to it.

    While a self hosted solution like this would be nice, I would get messages everyday from friends and family frequently asking, “Can you add this movie to the server? Can you add this TV show to the server?” and they would eventually stop asking me and just pay for a streaming service if I forgot to fulfill every request. I would like to avoid having to manually add content to the server if my friends and family can just choose the content their wanting to watch themselves.