FunUnknowns website.

About

FunUnknowns is a self-hosted project with the sole purpose of providing a place for me to put my stuff and learn. It is currently hosted on a raspberry pi 4 with a 10TB hard drive, as well as a simple network infrastructure. Currently it includes the following services:

• Opnsense firewall
• Email server
• Nextcloud
• Borg backup
• Tor Bridge

Details of the services are explained below.

Opnsense Firewall and Overall Network Structure

>Router: Opnsense firewall running on a mini PC. It is connected to the internet via a cable modem, and to the local network via a switch. Due to Comcast not providing static IP addresses to residential customers, a dynamic DNS service is used and the router is configured to update the DNS record. NAT rules are also configured for port forwarding to the server.

>Switch: Connected to a wireless access point and the server.

Email Server

In terms of complexity, the mail server is the most difficult service to set up. The server is configured to receive and send emails for the domain mail.fununknowns.com. Since ISP blocks port 25, all emails are sent to a relay server provided by Comcast. A email forwarding service is also hosted on Dynu so that emails sent to the domain are first sent to Dynu and then forward to port 2525 on the server.

Dovecot is used for IMAP and Postfix is used for SMTP. For security, STARTTLS is used. To prevent being flagged as spam, SPF, DKIM, and DMARC are configured.

Nextcloud

Nextcloud is a self-hosted cloud storage service. It is configured with apache and is accessible via the domain cloud.fununknowns.com. A collabora server is also set up to allow editing of office documents. This one turns out to be the most useful service as I also use it to backup my phone photos.

Borg Backup

Borg is a backup service through SSH. It is configured to backup my laptop to the server. The backup is encrypted and compressed. It is also configured to run automatically every week with a cron job.

Tor Bridge

It was first setup for research project, now it is just there to help the Tor network. It is configured to run automatically on startup.

Future Plans

Here are some future plans for the server:

• Set up virtual mailboxes
• Set up a media server
• Set up a monitoring system
• Robust backup system

Contact

If you have any questions, please contact me at cstdio@mail.fununknowns.com.