JustEnoughDucks

joined 2 years ago
[–] JustEnoughDucks@feddit.nl 1 points 1 day ago

On the bottles website, it says that the bottles are sandboxes. It has a full subsystem container for each program that is isolated from the main system (according to them I guess).

[–] JustEnoughDucks@feddit.nl 2 points 2 days ago (2 children)

If you run it through something like bottles offer a bit of protection in that respect?

[–] JustEnoughDucks@feddit.nl 3 points 3 days ago

Sadly, just the store doesn't work for many professional programs and non-free software.

Segger j-link, renesas go hub, Nordic tools, etc... (though AUR solves this on arch distros)

[–] JustEnoughDucks@feddit.nl 4 points 1 week ago

True, but this is a reaction to companies discarding their employees at the drop of a hat, and only for "increasing YoY profit".

It is a defense mechanism that has now become cultural in a huge amount of countries.

[–] JustEnoughDucks@feddit.nl 3 points 1 week ago

Opensuse MicroOS variants kalpa and aeon are probably what they are looking for. Stupid easy to set up and, from what I understand, quite secure.

Downside is that it needs workarounds for some things like Steam Flatpak and such, but that is the nature of atomic distros.

[–] JustEnoughDucks@feddit.nl 15 points 2 weeks ago

That is not true even a little bit. Look at any inkjet paper under a microscope made after the mid 2000s.

[–] JustEnoughDucks@feddit.nl 11 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

I would be interested to see a figure of people with home servers that have had that happen to them. DoS & pwned yes, especially 15+ years ago before there were good resources, TLS, reverse proxies, or authentication front ends.

I would be very interested to see any stat whatsoever of selfhosters that have gottened murdered specifically because of their server.

It is extremely important to note that in those days, people just opened their, often out-of-date, servers completely to the internet via a DMZ or port forwarding, let ssh be open to the internet, didn't harden ssh at all, and most people didn't use a VPN for downloading.

That is literally like saying that people who light wall torches in their wooden home burned their house down, so let's not use lightbulbs or electricity.

[–] JustEnoughDucks@feddit.nl 2 points 2 weeks ago (3 children)

What is the difference between a paid service and a paywalled service in this case?

[–] JustEnoughDucks@feddit.nl 5 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

So you have absolutely no devices that are a different resolution than you download? You don't direct play 4k on a 1080p screen for example.

[–] JustEnoughDucks@feddit.nl 1 points 3 weeks ago

Me too, and the new one I didn't even realize this change happened. I saw there were no breaking changes, updated, and saw "oh, it isn't synced anymore" so I reselected the folders, it ran a sync check on everything, which took a while, and everything works fine again.

I didn't even realize there was a difference until now, but I guess there is a start/stop sync switch.

[–] JustEnoughDucks@feddit.nl 8 points 1 month ago (1 children)

Damn, I am only at a ratio of like 10 from some season packs of Chuck and The Mentalist. 565 is crazy!

[–] JustEnoughDucks@feddit.nl 5 points 1 month ago* (last edited 1 month ago)

I mean, jellyfin is absolutely even.more of a security nightmare than Plex, with multiple unfixed CVEs IIRC (software, not website or forum)

I use jellyfin also, but I only trust it not exposed to the internet at all. That is one very big area of improvement for them.

That and subtitle syncing.

 

Hey everyone,

I am completely stripping my house and am currently thinking about how to set up the home network.

This is my usecase:

  • home server that can access the internet + homeassistant that can access IoT devices

  • KNX that I want to have access to home assistant and vice versa

  • IoT devices over WiFi (maybe thread in the future) that are the vast majority homemade via ESPHome. I want them to be able to access the server and the other way around. (Sending data updates and in the future, sending voice commands)

  • 3 PoE cameras through a PoE 4 port switch

  • a Chromecast & nintendo switch that need internet access

Every router worth anything already has a guest network, so I don't see much value in separating out a VLAN in a home use case.

My IoT devices work locally, not through the cloud. I want them to work functionally flawless with Home assistant, especially anything on battery so it doesn't kill its battery retrying until home assistant polls.

The PoE cameras can easily have their internet access blocked on most routers via parental controls or similar and I want them to be able to send data to the on-server NVR

I already have PiHole blocking most phone homes from the chromecast or guest devices.

So far it seems like a VLAN is not too useful for me because I would want bidirectional access to the server which in turn should have access from the LAN and WiFi. And vice versa.

Maybe I am not thinking of the access control capability of VLANs correctly (I am thinking in terms of port based iptables: port X has only incoming+established and no outgoing for example).

I figure if my network is already penetrated, it would most likely be via the WiFi or internet so the attack vector seems to not protect from much in my specific use case.

Am I completely wrong on this?

 

I got immich with SSO up and running. It runs like a dream compared to Photoprism and is simple enough for me, but also has necessary features like user accounts.

There is one thing I couldn't find in the docs:

I already have a library of 5000 photos and 150 videos on my server that sync to my phone with Syncthing to 4 different directories (one for each phone I took the photos on) in Immich. Right now I have that directory as an external library, but I don't think this is the "right way."

My goal:

  • No duplicates between phone app and desktop app
  • Don't have to re-upload every image from my phone as my network is 100/30 mbps
  • Am able to manage my photos from the Immich app and web app (deleting photos that will propagate between devices)

Can I just map the "Upload" folder to that syncthing photo base folder and get parity between my phone and my server? Or do I have to re-upload everything from my phone? Or am I waiting for a feature that doesn't quite exist yet? I noticed some feature discussions about photo hashing and de-duplication.

I tried asking in a discussion on the repo, but nobody answers those much.

 

Hey lemmings,

I have a headless server that works beautifully. B450 with 2700X and 32GB of micron 3200MHz RAM.

I am currently running Debian 12 Bookworm on it. I am at kernel 6.1, but in preparation for 6.2 or 6.3 being backlogged, I want to buy an Arc A380 for transcoding since they are only 150€ here. Software was fine for a single video stream, but I bought a new house and will have 4 camera streams running. Plus I want to dabble in AV1 transcoding for media or storage of my camera streams

Currently there is neither X nor Wayland installed since it is exclusively with SSH that I do all of my work on it. After I install the GPU, I was wondering if it is possible to not even install X or Wayland since I will literally never use a display on it?

Would I still be able to do Jellyfin and Frigate transcoding without an X server? If I have to get one, does it matter if I choose X or Wayland for hardware transcoding?

Thanks!

view more: next ›