Gotham

This is my new server, an ASUS NUC Performance 14. As opposed to EmeraldHill, I designed and configured most of the software on this one myself. Read on if you want to know more.

The computer came with an integrated Broadcom NIC. I added an additional one via a nice aluminum Thunderbolt 4 USB C NIC. The integrated NIC handles only LAN traffic. The USB one handles only WAN traffic. The 3 WD Black SN850X NVME drives are in a LUKS-encrypted BTRFS RAID 1.

Each application runs in a rootless Podman pod under its own limited system account. The home directories are their own BTRFS sub volumes, so if one gets compromised, I can restore it from backup or a snapshot easily. Most pods only publish their ports to a local software dummy NIC. WAN access is through NPMPlus, which is the only pod that publishes ports to the WAN.

I'm rather proud of this setup. It was done after I had the self confidence to build and maintain something like this on my own again. I actually used AI to help me a lot in building it. It is a rather large upgrade from my old server.

I'm working on moving my applications over to it. It currently runs this website.

The specs are: