Cyber

joined 2 years ago
[–] Cyber@feddit.uk 2 points 2 days ago (1 children)

My choice is Arch Linux purely because it's bleeding edge

I've no idea if Arch actually has newer drivers than Debian / Fedora, but if they are you'll (usually) get better support from the developers of whatever application / package - or in your case - drivers that you're facing.

It's more involved than "just" installing Debian, etc... but reading through the Arch Linux wiki as you install will (should) ensure you've got the correct drivers setup and you'll know why they're working.

So... it'll be more effort, but you might get "better" results.

[–] Cyber@feddit.uk 2 points 4 days ago (1 children)

Crowdsec will block external, public, IPs

Fail2Ban will block login attempts (ie from anywhere)

I have a similar setup with pfSense, pfBlockerNG, HAProxy, etc, but I keep F2B running on my DMZ server in case something is ever compromised as it'll block / slow down anyone trying to move around the network.

[–] Cyber@feddit.uk 2 points 4 days ago

Maybe, I'm self hosting several trees, so... 🤷‍♂️

[–] Cyber@feddit.uk 0 points 4 days ago

Depends on the variety of course... my Willows need cutting down, whereas the acorns I planted before the willows are still tiny oaks in pots 🙂

[–] Cyber@feddit.uk 11 points 6 days ago

** SOMETIMES IT IS **

(Sorry, couldn't resist)

[–] Cyber@feddit.uk 1 points 6 days ago

Ahh, I see what you mean. Being asked to pay twice isn't nice...

[–] Cyber@feddit.uk 7 points 1 week ago (5 children)

But would you / do you voluntarily donate to Jellyfin's development?

I get it, it is (& a lot of things are) free... but at some point the developers need to recoup something...

Otherwise Jellyfin's development will eventually dry up as raw enthusiasm runs out.

[–] Cyber@feddit.uk 7 points 1 week ago (1 children)

+1 for Ansible

  1. Install an application
  2. Do all the updates at the same time ( - after automating all the backups of course 😉)
  3. Removing games 😈
[–] Cyber@feddit.uk 1 points 1 week ago

True, but they've answered your question.

Maybe raise a bug report with Firefox (Mozilla) and see if they can look into it further and that might help others too

[–] Cyber@feddit.uk 1 points 1 week ago

Can I (figuratively speaking) just change the destination in my backup scripts and start writing to Hetzner... or are they using a completely different setup?

[–] Cyber@feddit.uk 2 points 1 week ago

Does that also include Burial?

[–] Cyber@feddit.uk 10 points 1 week ago

His complaint was it was different.

This is the absolute core of everyone's reluctance... and 99% of (domestic) stuff is browser based...

 

Just found my Vivaldi update contained a little more than just bugfixes... it now has Proton VPN built in.

It's actually part of the browser, not an extension, so I'm in two minds whether I like that... or not.

You need either a Vivaldi account or a Proton account, so it's not completely anonymous, but it's a start.

The free-tier of Proton VPN also appears to be bandwidth limited and your exit point is randomised, so... yeah, it's ok...

 

"On 11th November BBC iPlayer will no longer be available directly on this device."

OK, so, I didn't purchase this particular (Blaupunkt) TV, but as it's my mother's then, well, I'm the one that has to "fix" this.

Personally, I use TVs as a simple screen and watch everything through other devices (Roku, or a Linux PC running MythTV).

I see the BBC website has some links to review sites, but I thought this might be another place to ask for - preferably open source - devices that could be used.

Comments?

45
submitted 10 months ago* (last edited 10 months ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

As a long-term MythTV user, I read all the discussion about Plex vs Jellyfin, but I'm still here... recording Live TV, watching films, listening to "me choonz" all on free, open-source software. What am I missing? Any other MythTV users out there?

39
NAS vulnerabilities (www.theregister.com)
submitted 10 months ago* (last edited 10 months ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

Just stumbled across this (overly dramatic?) article and thought I'd just post it here...

It's more to act as a reminder that if you've got a NAS that is serving content to the interwebs, then make sure it's behind a proxy of some kind to prevent weaknesses (ie in the management Web UI) being exposed.

Obvz, this article is pointing to Zyxel, but it could be your DIY home-built NAS with Cockpit: CVE-2024-2947 - just an example, not bashing that project at all.

I've used Squid and HAProxy over the years (mostly on my pfSense box) - but I'd be interested to know if there's other options that I've not heard of

 

pfSense... Anyone have much experience with the new Kea DHCP server?

I'm using 2.7.2 (Community Edition) on a fairly good Celeron based system that's not heavily loaded, but I have 7 network segments (VLANs and physical interfaces), so I have 7 DHCP pools / configs.

Just adding 1 more static reservation can cause a significant delay when reloading the service and because I register static reservations in DNS, the network loses DNS so I "break the internet" for a short while.

Would Kea fix this?

 

Well, as the title says, I've had a few notifications that alerted over night and I'm wanting to sleep instead

These are ntfy alerts, but driven by Uptime Kuma... and I can't find a programmatic / config option that says "don't notify between 11pm and 7am" (but willing to admit I've just not found it... yet...)

I need my (Android, ofc) phone to be on in case of family calls / messages, so I can't use "Do Not Disturb", and remembering to manually mute the ntfy app each night just doesn't make sense to me - computers are quite capable of automating my requirements for me.

So... any pointers? I'm sure you're not all getting alerts at 2am because your ISP dropped a few packets...

 

I secure systems for my day job. That means installing AV software, ensuring Windows Firewall is ON, etc. (Plus many other things...)

I've seen discussions around disk encryption here, but I don't recall much about a malware protection. Maybe a little about personal (desktop) firewalls.

I'm aware of Clam, etc, but is anyone actually using these tools much?

Or are we just presuming we're all immune from the bad guys targeting Windows?

 

So, I've had it up to here (^^^) with the family using WhatsApp, etc and I'm heading off into the land of XMPP to find a better solution.

I've got a Pi3 hanging off my pfSense firewall acting as a kinda DMZ box, so thought I could setup an XMPP server on it (Prosody?)

Any advice? Will the Pi crumble (see what I did there) under the pressure of 4 people using it?

Issues with proxying outside with a Lets Encrypt cert on the pfSense box, but maybe not inside the network?

"Better" server software?

Thanks

view more: next ›