Cyber

joined 2 years ago
[–] Cyber@feddit.uk 0 points 11 hours ago* (last edited 11 hours ago) (1 children)

I'll come at this from a different PoV.

You're not going to see an Arr stack running on proxmox in my (professional) environment.

Yes, Proxmox is making progress there, but you should get some "VMs on ESXi" experience. The free one doesn't have vCenter, but it's definitely a tickbox for me as an interviewer. (Hopefully this was on your course)

Also, get a (small) active directory with 2 or 3 VMs running. Play around with RADIUS, Group policies, etc.

Do some backups, destroy something and do some restores. I want to hear stories of how you recovered from a disaster. A missing file doesn't count, I'm saying a failed drive, ransomware (simulated... but... the point is, you need long-term backups) ... maybe overwrite 0's on some of your parents media files and recover them... that'll get the stress levels up 😉

Good with the Ubuntu LTS... but do vary the versions (ie support old tech and new)

1 single HDD? I'd recommend you RAID up some more... or at least take my recommendation on testing your backups

Also good experience: get a firewall in there somewhere. Try pfSense (or OpnSense) to restrict traffic between some VMs / containers... then you'll be good for DevSecOps too.

[–] Cyber@feddit.uk 3 points 1 day ago

What frankenstine creation do I see here? Is that a mix of Dell and HP parts?

I'm a little disappointed thst the laptop still has it's case on, but perhaps that's for the best... heatpipes get HOT🔥

[–] Cyber@feddit.uk 7 points 3 days ago (1 children)

Thanks for posting @SocialistVibes01@lemmy.ml, that aeticle was more interesting & thought invoking than I thought it would be.

I'm using XFCE with a theme that feels like it's from the 90's and thinking about it, it does feel better to use than all the modern craziness that Microsoft has been doing in the last few years. I hated the Metro era...

[–] Cyber@feddit.uk 1 points 5 days ago

I have pfSense as my firewall, running OpenVPN and I just connect when I need to.

Phone's running trackercontrol all the time to block stuff and I've disabled most of google on it, so I'm not too concerned whilst I'm out and about... most apps I use are local-data anyway, ie CoMaps not google maps, etc... so I'm using ~1GB/month.

Syncthing only syncs on known wifi, so when I'm home it updates with a NAS and 2 laptops (and photos with 2 tablets), so there's always something it's syncing with.

[–] Cyber@feddit.uk 6 points 5 days ago

This is a really good point.

Remember that Microsoft has patch Tuesday... so... it's now just normal mundane patching. No sensationalism, no logos, no catchy names.

But we don't know what's going on in there.

Linux is now getting more news because more people are hammering it with AI, but we should hear that each item is being fixed and / or worked around with open discussions.

[–] Cyber@feddit.uk 5 points 1 week ago

Well... if all the AI companies are making massive losses, might as well take some of their money from them and help them along.

[–] Cyber@feddit.uk 2 points 1 week ago* (last edited 1 week ago) (1 children)

And + pfBlockerNG

[–] Cyber@feddit.uk 3 points 1 week ago (2 children)

To help with the overwhelm, If you scanned these important documents then I'm presuming you still have the (paper?) originals?

Treat them as your source of truth and work with them first - some might have superceeded your backups anyway.

Then, as others have said, follow the 3-2-1 principle, but keep one of the backups as plain and simple files (.pdf I presume)

If you lock the files in an app, you're making it even more difficult to restore them later.

Personally, I put my files (ie. .pdf, .jpg, etc) in encrypted online file storage (Hetzner) and I made sure I keep instructions elsewhere on how to get them back again (in case I'm... not able to)

Keep it simple

[–] Cyber@feddit.uk 7 points 1 week ago

I expect OP's issue came after a recent kernel upgrade

[–] Cyber@feddit.uk 5 points 1 week ago

Have a look on the Arch Linux wiki around udev and event debugging (evdev?)

Depending on whether you're suspending to RAM or disk will affect the time it takes - and of course, how much stuff it has to suspend.

If you're in the middle of a resource intensive task (which could just be watching a video... all depends...), then whatever is running needs to stop, and possibly has a full buffer which needs processing as suspend could be to the swap file / partition, which may need emptying first.

But, it should all work these days.

[–] Cyber@feddit.uk 2 points 1 week ago

If you're not wanting to customise too much, the Frtizbox equipment is good.

Plenty headroom for normal use.

However if you have 6 people all streaming 4k netflix and need 1mSec ping for gaming over a 10Gb link, you'll probably need to build something.

[–] Cyber@feddit.uk 9 points 1 week ago

Top Tip: open another terminal and kill the task from there

( /s )

 

I'm running a <cough, cough> years old instance of Volumio 2 on a Raspberry Pi 3

The security of this is terrible, but it sits in my bedroom with a local USB drive full of music and works absolutely fine with a Nanosound DAC audio preamp hat / board which makes it sound lovely... which I don't want to change (it handles a remote control with power on / off)

When Volumio 3 came along, I wasn't impressed, didn't see the software improving much... it was starting to be more of a pull towards their subscriptions

So, I've left it alone and feel like it might be worth a revisit.

So, how's Volumio 4? Or... should I consider another FOSS product ( has to work with the same hardware).

 

TL:DR; Has anyone here successfully migrated their data & workflow from Logseq to Silverbullet?

... wall of text follows ...

I've been using Logseq for a few years and it has been a life saver at work, trying to track the stuff going on - honestly, I'd have burned out if I hadn't found it.

However, I still haven't quite got all the things organised and I feel Logseq's development is taking a different track that I don't want to go down (db, collab, etc)

SilverBullet.md appears to be developing into the solution I'm looking for... although I don't want a server-client architecture, so I'm running it standalone at the moment.

But, the learning curve feels so steep it's tending to curve back on itself... or... I'm just too busy to focus on learning it.

I see how the file structure works, but I don't understand how the templates, journals, etc work (really simple.in Logseq)

It appears to be 1 person developing this with lots of helpers who all seem happy to chip in with some AI generated code in the forum, but no meaty documentation, examples, etc.

If you've read this far... is it worth sticking with? Is there an FAQ I've missed? Any pointers or encouragement...?

 

After being home for weeks, I went away for business, the 1st night away there was a brief powercut and the firewall (on a UPS) seemed to get stuck.

So, that's no DNS, DHCP, or connectivity between wifi and LAN... All due to (admittedly aging) hardware issue.

Since then my entire home system has had issues whilst it all settles down.

It made me think about getting some redundancy into the system to handle a single failure.

So,.can you give me any insights into High Availability like CARP (for pfSense), VM failover (on Incus?), mesh wifi, Home Assistant, etc?

Of course there are going to be single points, like ISP line, etc, but seems like something to test out.

 

So, just a light post, I upgraded my Pi4 last night and found the Linux firmware breaks a 32bit install.

I've been meaning to change to 64bit for months, but as it's my DMZ box for torrents, radicale, etc, then it's just finding the right time to convert an adhoc setup into my ansible scripts.

Luckily I had a SD backup from September to get it running again

So, what have you broken over the holidays?

 

I stumbled across Diode whilst looking for ways to do secure off-site backups (to my own equipment at another house) and it feels like a paid-for TOR (Ok, there is a free option)

I'm looking for any real experience as the site has too much marketing lingo in it:

Every Client is secured with a public/private key self-custody identity

And this doesn't seem very dynamic if I want to change something:

Diode’s Blockchain Name System can be used for Client friendly names

And somewhere on the site it infers unlimited storage...!

So, is the free option worth me looking into, or is it a waste of time?

 

I have a few VMs and PMs around the house that I'd setup over time and I'd now like to rebuild some, not to mention just simplify the whole lot.

How the hell do I get from a working system to an equivalent ansible playbook without many (MANY) iterations of trial & error - and potentially destroying the running system??

Ducking around didn't really show much so I'm either missing a concept / keyword, or, no-one does this.

Pointers?

TIA

 

Just found my Vivaldi update contained a little more than just bugfixes... it now has Proton VPN built in.

It's actually part of the browser, not an extension, so I'm in two minds whether I like that... or not.

You need either a Vivaldi account or a Proton account, so it's not completely anonymous, but it's a start.

The free-tier of Proton VPN also appears to be bandwidth limited and your exit point is randomised, so... yeah, it's ok...

 

"On 11th November BBC iPlayer will no longer be available directly on this device."

OK, so, I didn't purchase this particular (Blaupunkt) TV, but as it's my mother's then, well, I'm the one that has to "fix" this.

Personally, I use TVs as a simple screen and watch everything through other devices (Roku, or a Linux PC running MythTV).

I see the BBC website has some links to review sites, but I thought this might be another place to ask for - preferably open source - devices that could be used.

Comments?

45
submitted 2 years ago* (last edited 2 years ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

As a long-term MythTV user, I read all the discussion about Plex vs Jellyfin, but I'm still here... recording Live TV, watching films, listening to "me choonz" all on free, open-source software. What am I missing? Any other MythTV users out there?

39
NAS vulnerabilities (www.theregister.com)
submitted 2 years ago* (last edited 2 years ago) by Cyber@feddit.uk to c/selfhosted@lemmy.world
 

Just stumbled across this (overly dramatic?) article and thought I'd just post it here...

It's more to act as a reminder that if you've got a NAS that is serving content to the interwebs, then make sure it's behind a proxy of some kind to prevent weaknesses (ie in the management Web UI) being exposed.

Obvz, this article is pointing to Zyxel, but it could be your DIY home-built NAS with Cockpit: CVE-2024-2947 - just an example, not bashing that project at all.

I've used Squid and HAProxy over the years (mostly on my pfSense box) - but I'd be interested to know if there's other options that I've not heard of

 

pfSense... Anyone have much experience with the new Kea DHCP server?

I'm using 2.7.2 (Community Edition) on a fairly good Celeron based system that's not heavily loaded, but I have 7 network segments (VLANs and physical interfaces), so I have 7 DHCP pools / configs.

Just adding 1 more static reservation can cause a significant delay when reloading the service and because I register static reservations in DNS, the network loses DNS so I "break the internet" for a short while.

Would Kea fix this?

view more: next ›