$argon2id$v=19$m=512,t=256,p=1$jNt8BQuiMsPdwbIpgIO8HQ$4Eo0dq5cEblgX6415IgpAObFPfHLw5uz6NDU0yuXQW8
This page serves as a dumping ground for ideas on preserving access to online ( and offline ) accounts in the event of disaster
- All passwords are stored in a password safe ( KeePass )
- Password safe lives on the NAS and is backed up once per day to a spare nas
- primary NAS is backed up once per week to B2 Storage
Here are some thoughts and ideas on how I have lets encrypt certificates deployed to home infrastructure ...
At a high level , my setup assigns a hostname based subdomain for each internal host.
E.G. If my registered domain is example.com
and my host is host1
then I will generate a cert for host1.example.com
.
Let's encrypt supports wildcards, you could use a wildcard if you wanted to. I didn't like the idea of every internal host using the same keypair.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
BEGIN MESSAGE. | |
RqU8I9DzFfGl3Bd 8G8rwJqZCf7Dzv8 kRgQzc37c21ENZF zfXbJz9N7XvyoqH | |
ETRSa4fAY5E3ix3 Kz52Fw2Twl4TCKq 6Xr2MZHgg77QYZH gzRA51LPJOs86yr | |
RLBTVnfaHOX7RgS a7yCyo4AwozpWeL RiUBamOUb1W6AH8 ZJyYxIIOIPums52 | |
XOSENEUBffENckJ TeIAlR1mHNIxSwz oeF9u2IP. | |
END MESSAGE. |
I hereby claim:
- I am neo1908 on github.
- I am neo1911 (https://keybase.io/neo1911) on keybase.
- I have a public key whose fingerprint is 4266 38DB 7952 1C61 2EE2 68B7 AD95 0A08 7310 D01C