The kasad.com Server
The server for kasad.com is a VPS hosted by Vultr. It costs $5/month. It's a pretty low-spec VPS, but that's what keeps it cheap.
|Distribution||Debian 11 (bullseye)|
|Vultr VPS type||Regular Cloud Compute|
|IP Address allocation||static (via DHCP)|
|Bandwidth (monthly)||1 TB|
The kasad.com server runs:
- NGINX webserver / reverse proxy
- Git server
- CGit web frontend for Git
- MariaDB (MySQL)
- WireGuard VPN
- Mail server
- Syncthing discovery server
- Syncthing relay server
- SSH server
Currently, the logging and especially log monitoring capabilities on the kasad.com server are lackluster. Logging settings have not been changed for most processes. Some log to syslog/systemd-journal while others write logs in
Network Traffic Accounting
Network traffic accounting is handled relatively well. The server uses vnStat 2.6 to aggregate network traffic for each interface.
A very simple web frontend (that I wrote) is available for vnStat.
Remote Access (SSH)
Remote access into the kasad.com server is done using SSH. The server runs OpenSSH 8.4.
Password authentication is disabled. Public-key authentication is required to log in. Logging in as root is disabled, as well as for several mail-only accounts.
One possible security enhancement would be to enforce two-factor authentication when logging in via SSH. However, this is risky because losing the second factor means locking yourself out of the server.
Vultr Web Console
It's also possible to log in using a username/password from the Vultr website, which provides a web interface to the TTY.