Home server Application [Sugestion and Ideas]

[proxx]

Didnt know where to put this..
Im probably not the only one running a server at home.
Currently I have and old piece of rust stripped down to the bone.
Running arch (suprise!)
I just wanted to talk about what to run ont it.
So far:


NFS
Fileserver.
https://wiki.archlinux.org/index.php/NFS


DNSmasq
Caching DNS server for lan.
Faster DNS lookups = faster browsing.
http://www.thekelleys.org.uk/dnsmasq/doc.html


Squid
Caching webproxy for my lan.
https://evilzone.org/tutorials/(turorial)internet-on-steroids(dnsmasq-squid)/msg56750/#msg56750
http://www.squid-cache.org/


Addzapper Squid plugin
(Works brilliant, replaces ads with custom image, speeds up browsing.
http://adzapper.sourceforge.net/


Headphones
Automatic music download tool with webGUI, works with torrents,newsgroups etc.
https://github.com/rembo10/headphones
http://lifehacker.com/5939077/headphones-automatically-downloads-processes-and-converts-any-music-you-want


Couchpotato
Automatic movie download tool with webGUI, works with torrents en newsgroups.
Can rename, look for better quality after x period of time, watch new releases add movies from imdb etc.
https://couchpota.to/


Transmission
Torrent client with webgui. automatically downloads movies added bij couchpotato etc.
I personally dont like transmission that much but im using it for compatiblity with ^ tool.
http://www.transmissionbt.com/


Sickbeard
Automatic TV show download tool.
http://sickbeard.com/


SSH daemon for proxy purposes.
When Im on a untrusted connection I tunnel back home with the -D option.

*Furture plans
My current network setup doesnt allow for using it as a DHCP server so that has to wait.
By that time Ill plug another NIC and use it as a firewall aswel.
Maybe a TOR exit node or at least optional TOR gateway for machines on the LAN.
Ill probably get my ass kicked by my ISP but we'll see how that goes.
Have a spare GPU which isnt that bad so maybe a cracking station..


Looking for some other cool things I havnt thought about.
Would like you guys to do some suggestions, pickup ideas , add something etc.
Plz post  in this formatting with links whenever possible.


Proxx

[lucid]

NECRO!

I'm assuming this isn't your main box?

[proxx]

NECRO!

I'm assuming this isn't your main box?

It is not , its some old piece of rust.

[lucid]

Having all those services on the same box is a security threat proxx my man.  Of course you already knew that I'm sure. 

Is this server on the same LAN segment as your main PC or do you have it DMZ'd or something?

[proxx]

Having all those services on the same box is a security threat proxx my man.  Of course you already knew that I'm sure. 

Is this server on the same LAN segment as your main PC or do you have it DMZ'd or something?

It is on a different subnet, behind a NAT along with some ACL's
And yes I would spread it out cross mutiple machines and create a clear distinction between application and security/networking.
Than again I comsume plently of power as is, that is main reason here.

It is not a treat directly since most of it lives inside of the walls and only a few pretty secure services are open to the big evil webs.
Having a SSH daemon running on some obscure port allowing only key-pairs is nothing to worry much about.

Ever since I relocated I didnt take the time to properly resetup the network around here.
Still in the process of creating a dedicated firewall/NAT/IDS.
Will probably bridge it with my modem and have it bound to external IP address directly.

[lucid]

Very true. As for suggestions, well I don't have any that you probably haven't considered. Although, I've always thought it a cool idea to write a script that syncs all saved/downloaded files on other computers to a main server, like your NFS.

EDIT: Just because these things interest me, so this machine is your DNS server, DCHP server, SSH server, AND it will be a firewall as well? I hadn't considered that would be a plausible way to go about it. I figured that the firewall should be separate from other services like that.