If you run a single DNS server, you will always have downtime when it’s restarted.

The only way to mitigate that, is to run 2 DNS servers.

I setup my network to use pihole as the first DNS and the router as the second, most of the time pihole is used. Unless it’s down

Not sure about linking 2 HAs together, that could get complicated real quick.

If you have your DMZ setup, put HA in that and only allow web access from your main network. Also with camera, there is a feature to allow direct access if you and the camera are on the same network.

As a homelabber and systems admin, I would start with learning how to use Linux on the command line.

It’s all well and good looking at docker, but if you don’t know how to move about or edit on the command line. Your going to get stuck real quick.

Once your happy doing simple tasks on the command line, I would actually look at running something like wordpress on a pi or VPS. That will help you understand how to connect services together, and cement your basic command line knowledge.

Yeah, OVH do website hosting as well

I moved all my domains from Google to OVH, OVH have an API so you can get certs with certbot. You could also use the API to update records for a dynamic home broadband

I have stuff in new releases.io and also GitHub release RSS feeds in nextcloud, I then sit down once a week and see what needs an update. Reboot when required.

I nextcloud news (RSS) for that sort of thing, you can organise feeds into folders and see an unread list. There is even a mobile app to get whats on the server

I would recommend not using a mobile to edit a spreadsheet, I have tried and gave up as its less the ideal.

your running something on port 443 already, if its nginx thats still running kill it. If not, then found out what is running on port 443 and kill it use ss -nlp to find the process name

for some helpful config, the below is the logging config I have and logs have never been an issue.

You can even add 'logfile' => '/some/location/nextcloud.log', to get the logs in a different place

  'logtimezone' => 'UTC',
  'logdateformat' => 'Y-m-d H:i:s',
  'loglevel' => 2,
  'log_rotate_size' => 52428800,

Do a backup first, if the update does go south the backup might apply to a new install

I moved to Google workspace for email, yes I know it Google.

I have my home IP and dedi IP in the routing settings, then just use SMTP to Google and let them forward to me.

All servers have null mail installed and setup for Google, I also have docker containers with config if needed

You need a way to hand it a file for editing, nextcloud can do that

I use nginx as the internet facing proxy, write my own config and manage it with source control. Also use traefik in docker land with service labels to configure it

Im not sure I understand your issue, DNS is the magic that allows you to goto home.somedomain.com and get a webpage. But you still need to give DNS the location of the server, much like the contacts in your phone.

DDNS is how you have your home connection attached to a DNS record that is updated when the IP changes, see other comments.

Also once you understand how it all hangs together, you can do some really cool magic to make getting to your services easier

Can confirm that zigbee is much better for IOT things, I find the zigbee stuff is quicker to react to events as there is not WiFI setup. Some WiFi devices running on batterys will have lag while they get WiFi link back up.

First off, backups of the configs any user data that you can’t torrent should the inevitable happen.

Then set time aside to do updates, I spend Wednesday evenings updating and improving my setup.

Then find a way to track update announcements, I use both an RSS reader and newrealeases.io to know when something I run gets an update

What I can tell you, working for a company hosting data for the UK NHS.

Is that hosting is easy, I have a very reliable homelab. I keep things up to date and make sure to secure things the best I can.

But security is hard, there are many things to secure. Blind spots you didn’t even know you had.

The bast way to look at security, it to start with secure and dial things back so that it works.