Cyber

joined 2 years ago
[–] Cyber@feddit.uk 3 points 2 days ago (3 children)

Microsoft Windows surely?

/s

[–] Cyber@feddit.uk 2 points 2 days ago (1 children)

Interesting.

I have an old free email provider that's just passed the email service to another provider

I'm looking to move because I used to be able to use @my-email.domain and I'm not sure I'll be able to do that anymore

I basically do what you're doing - using email prefixes for the site I'm registering with... I even caught a company out once when I suddenly started getting spam from that email address. They'd sold my details...

[–] Cyber@feddit.uk 4 points 2 days ago

Just to address the resourcing point...

VM resources can be over allocated, meaning that the hypervisor will try it's best to meet their requirements, so you're not wasting anything and could run more VMs than you have resources for.

Yes, VMs can also be configured to need a certain amount of resources and the hypervisor will have to stop, but I just wanted you to know it's not fixed.

[–] Cyber@feddit.uk 3 points 2 days ago

Performance is going to be the same.

Security is the main point here.

If this is your internet facing firewall then you want minimal layers of software complexity, so bare metal is the answer.

I'm a pfSense user, so I don't know how regularly OPNsense is updated, but, it's so much easier to just reboot that 1 box whilst everything else is mostly unaffected.

Better still, do a full device backup before an update and then you have a simple disaster recovery backup in case of any problems.

[–] Cyber@feddit.uk 8 points 3 days ago

My journey:

Random stuff --> OwnCloud --> Nextcloud --> syncthing + Radicale

I gave up with the constant changes during upgrades and increasing dependencies for features that we weren't using.

Now my system's lean, light, responsive and just works (on a Pi3)

Prosody's next...

[–] Cyber@feddit.uk 0 points 5 days ago

Every way?

Well, apart from simplicity and security I suppose... and networking...

Oh, and storage...

But, before you think I'm arguing with you, I'm not... Containers have their place, VMs also, they are just for different uses.

In this case, I have a NAS, with Immich installed directly on it and I don't have to mess with any abstraction layers... and it all plays nice with the other applications.

Maybe yours is different... but mine is better on bare metal.

[–] Cyber@feddit.uk 0 points 5 days ago

Gotta chime in with a +1 for bare metal too...

[–] Cyber@feddit.uk 0 points 5 days ago (2 children)
[–] Cyber@feddit.uk 11 points 5 days ago

I think this summarises all the other answers here

[–] Cyber@feddit.uk 4 points 6 days ago

Backups... with LVM, if you're trying to do a full system backup (ie with clonezilla, etc) then you have to backup the whole thing - you can't backup just 1 drive.

I have a media server with 2x 2TB HDDs and 1x SSD in a LVM, split into Music, Video, TV... and the OS ... and I can backup the individual files of course, but I can't backup just the OS drive.

btrfs didn't exist when I created it, but I use it on my NAS and it's great.

I'll be rebuilding my media server one day and change LVM to btrfs.

[–] Cyber@feddit.uk 2 points 1 week ago

Hmm, ok, I'd not thought of the remote troubleshooting part.

The NAS is at a family member's home, so the troubleshooting might come up in the future.

Thanks

[–] Cyber@feddit.uk 1 points 1 week ago

Yeah, my default go to is a site-to-site OpenVPN tunnel, but thought I'd look around at what the kool kidz are doing these days. Thanks.

 

I stumbled across Diode whilst looking for ways to do secure off-site backups (to my own equipment at another house) and it feels like a paid-for TOR (Ok, there is a free option)

I'm looking for any real experience as the site has too much marketing lingo in it:

Every Client is secured with a public/private key self-custody identity

And this doesn't seem very dynamic if I want to change something:

Diode’s Blockchain Name System can be used for Client friendly names

And somewhere on the site it infers unlimited storage...!

So, is the free option worth me looking into, or is it a waste of time?

 

I have a few VMs and PMs around the house that I'd setup over time and I'd now like to rebuild some, not to mention just simplify the whole lot.

How the hell do I get from a working system to an equivalent ansible playbook without many (MANY) iterations of trial & error - and potentially destroying the running system??

Ducking around didn't really show much so I'm either missing a concept / keyword, or, no-one does this.

Pointers?

TIA

 

Just found my Vivaldi update contained a little more than just bugfixes... it now has Proton VPN built in.

It's actually part of the browser, not an extension, so I'm in two minds whether I like that... or not.

You need either a Vivaldi account or a Proton account, so it's not completely anonymous, but it's a start.

The free-tier of Proton VPN also appears to be bandwidth limited and your exit point is randomised, so... yeah, it's ok...

 

"On 11th November BBC iPlayer will no longer be available directly on this device."

OK, so, I didn't purchase this particular (Blaupunkt) TV, but as it's my mother's then, well, I'm the one that has to "fix" this.

Personally, I use TVs as a simple screen and watch everything through other devices (Roku, or a Linux PC running MythTV).

I see the BBC website has some links to review sites, but I thought this might be another place to ask for - preferably open source - devices that could be used.

Comments?

45
submitted 1 year ago* (last edited 1 year ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

As a long-term MythTV user, I read all the discussion about Plex vs Jellyfin, but I'm still here... recording Live TV, watching films, listening to "me choonz" all on free, open-source software. What am I missing? Any other MythTV users out there?

39
NAS vulnerabilities (www.theregister.com)
submitted 1 year ago* (last edited 1 year ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

Just stumbled across this (overly dramatic?) article and thought I'd just post it here...

It's more to act as a reminder that if you've got a NAS that is serving content to the interwebs, then make sure it's behind a proxy of some kind to prevent weaknesses (ie in the management Web UI) being exposed.

Obvz, this article is pointing to Zyxel, but it could be your DIY home-built NAS with Cockpit: CVE-2024-2947 - just an example, not bashing that project at all.

I've used Squid and HAProxy over the years (mostly on my pfSense box) - but I'd be interested to know if there's other options that I've not heard of

 

pfSense... Anyone have much experience with the new Kea DHCP server?

I'm using 2.7.2 (Community Edition) on a fairly good Celeron based system that's not heavily loaded, but I have 7 network segments (VLANs and physical interfaces), so I have 7 DHCP pools / configs.

Just adding 1 more static reservation can cause a significant delay when reloading the service and because I register static reservations in DNS, the network loses DNS so I "break the internet" for a short while.

Would Kea fix this?

 

Well, as the title says, I've had a few notifications that alerted over night and I'm wanting to sleep instead

These are ntfy alerts, but driven by Uptime Kuma... and I can't find a programmatic / config option that says "don't notify between 11pm and 7am" (but willing to admit I've just not found it... yet...)

I need my (Android, ofc) phone to be on in case of family calls / messages, so I can't use "Do Not Disturb", and remembering to manually mute the ntfy app each night just doesn't make sense to me - computers are quite capable of automating my requirements for me.

So... any pointers? I'm sure you're not all getting alerts at 2am because your ISP dropped a few packets...

 

I secure systems for my day job. That means installing AV software, ensuring Windows Firewall is ON, etc. (Plus many other things...)

I've seen discussions around disk encryption here, but I don't recall much about a malware protection. Maybe a little about personal (desktop) firewalls.

I'm aware of Clam, etc, but is anyone actually using these tools much?

Or are we just presuming we're all immune from the bad guys targeting Windows?

 

So, I've had it up to here (^^^) with the family using WhatsApp, etc and I'm heading off into the land of XMPP to find a better solution.

I've got a Pi3 hanging off my pfSense firewall acting as a kinda DMZ box, so thought I could setup an XMPP server on it (Prosody?)

Any advice? Will the Pi crumble (see what I did there) under the pressure of 4 people using it?

Issues with proxying outside with a Lets Encrypt cert on the pfSense box, but maybe not inside the network?

"Better" server software?

Thanks

view more: next ›