thelittleblackbird
@thelittleblackbird@lemmy.world
- Comment on Reevaluating my password management 1 day ago:
I have more than 120 electronic identities, impossible to track the counter or to remember the tld of all websites I visit.
The concepts is only useful in a very small and defined scenario.
- Comment on Hosting virtualbox for my students 1 week ago:
Honestly I totally disagree, this community is about avoiding SaaS and controlling the important part of the stack to keep your own data under control.
If the service you need is just a provider of vm for your own business, is not a contradiction and it is still selfhosted as long as you control it.
- Comment on ELI5: How to put several servers on one external IP? 1 week ago:
Check it again, I used it for years before switching to something with more features
- Comment on ELI5: How to put several servers on one external IP? 1 week ago:
If you have a prosumer router I suggest you to use the ddns in the router plus a reverse proxy. This would be the cleanest solution.
If you can not, once everything is working with your external access to the synology, the dsm has a built-in reverse proxy so it can redirect http requests to another server. Although this proxy is really simple and limited it can get the work done if you setup is simple enough.
- Comment on Hosting virtualbox for my students 1 week ago:
Got it.
But looking that the question has been posted in a selfhosted thread I don’t see the recomendation of the cloud solution :)
- Comment on Hosting virtualbox for my students 1 week ago:
Why?
There are not benefits in the cloud solution over the hosted server. It could even be more expensive on the long run…
And yes, kasm has a cloud solution in its web page
- Comment on VPN server on router or within home network? 1 week ago:
Tailscale too if you use the fee implementation Headscale
And in both cases you need a vps fully reachable from anywhere
- Comment on Encrypting without full disk encryption question 1 week ago:
Check Mandos , if you are able to secure enough the server (inside a safe box?) then you are good
- Comment on Hosting virtualbox for my students 1 week ago:
Explore kasm, it is fucking amazing Kasm
- Comment on Microsoft’s New Xbox Strategy Starts with Windows and Ends with No Console 2 weeks ago:
Performance wise AMD and Intel run circles around the m4, there is not any compititiom here.
Performance Watt per instruction is where the m4 really shines and still I have my reservations
- Comment on Best way to get IPv4 connectivity to my self-hosted services 2 weeks ago:
Plenty of ipv4 only in 2025?? Really?? Without a possibility to activate dual stack or just the dslite-crap?
I honestly didn’t think this could be a real issue in those years.
- Comment on Best way to get IPv4 connectivity to my self-hosted services 3 weeks ago:
Small and stupid question.
Why don’t use a ddns client to update your ipv6 evytime it changes? With a ttl of a minute your shouldn’t be able to see any downtime…
I (genuinely) thinks you are trying to solve a small problem in the complicated and hard way… M
- Comment on I have some questions about selfhosting 4 weeks ago:
-
It depends of what you want as future proof (expansion capabilities). Usually home user nases come with low power cpu, a high power cpu usually is a enterprise grade nas, really costly for a home user. So having it separated makes the cpu upgrade easy but now you have 2 boxes. But if your terramaster comes with a decent cpu I don’t see any problem.
-
True nas scale is really a behemoth able of almost everything. I would start with something more reduced like omv or unraid. You really don’t need the advance enterprise features of that and it will add only complexity to the setup.
-
If you use NFS for exporting folders from your nas, the “computing box” will see this as a local folder, so no need to have 2 copies of the same file.
Hope it helps
-
- Comment on ISPs seem designed to funnel people to capitalist cloud services 4 weeks ago:
Huh???
Honestly I don’t see your problem, a nuance? Sure! An unsolvable problem? For sure not.
If you want to have your system reachable from the Wan then you will need a domain name. If you have a domain name then it is needed to be resolved by a dns server.
If there is a dns resolver then you would able to update it dynamically every time your ip changes.
True that the time alive of the dns records must be low enough to ensure that an ip change does not let your system down for an unacceptable amount of time.
- Comment on Over Synology, and looking to build my first home lab. Could use some advice on parts... 5 weeks ago:
Honestly, I have the impression your setup is oversized (knowing nothing about what you want to run)
NAS systems set on idle like 90% of the time unless your are doing really crazy things with de duplication and distributed iscsi for super big volumes, that I have the impression your are not going to do.
You can probably cut the performance/specs to the half and still being good for the following 10 years and the extra that you will save on electricity too.
As a comparison I checked this built against your synology and in the multicore setup is x10 more powerful (cpu-monkey.com/…/compare_cpu-intel_celeron_j4025-…)
Just my two cents
- Comment on If someone is bullied to suicide/threatened to death, and they actually attempt something like that or die, will the person who told them to do so get charged? 1 month ago:
In Europe there is the penal recognition to criminal inducement, you may not be the real committer but the one who has been pushing and convincing people to do it.
And yes, if the person commits suicide, it falls in this category
- Comment on [Discussion] What would it take to selfhost some of the backend that Tesla's connect to? 3 months ago:
Because the modification of that computer is order of magnitudes more difficult than a mechanical modification of a moving part. The humanity / regular human is able to understand much better the interactions of the mechanical parts that usually are always local and well defined.
This does not exist in the Sw, FW and digital hw, the interactions are not local and are millions timesmore complex to understand and properly modify.
It would be an utterly irresponsability to modify (blindly) the Sw of an xray machine that could make it unsafe and ultimately it could kill humans, and it is the same concept with the car. It is irresponsable to make a modification that can make the system unsafe.
For the rest? Regulations, free software foundation and good selfhosting Cheers
- Comment on [Discussion] What would it take to selfhost some of the backend that Tesla's connect to? 3 months ago:
Then don’t buy tesla, or force legislation about introducing such feature.
But make yourself a favor and don’t play Russian roulette with something that you can not understandbecause there are not data available.
And for final tip, if you really cares about that then enforce the fsf (fsf.org)
- Comment on [Discussion] What would it take to selfhost some of the backend that Tesla's connect to? 3 months ago:
It is not comparable, not even by far.
Assuming your are not a psycho, to safely drive a car is orders of magnitude (in plural) easier than modifying the Sw in a safe and deterministic way.
It is not only that bad people exists, it is about that making a small mistake can kill you
- Comment on [Discussion] What would it take to selfhost some of the backend that Tesla's connect to? 3 months ago:
First, second and third most important point is : Tesla needs to allow the connection to an alternative server.
The fourth should be access to the api and data that are exchanged.
You shouldn’t mess with the FW of your own car even for some innocent feature like this one, you don’t know/understand the interactions that may happen between different Sw components and the hw layer, you can not provide a similar of level of testing, including some worst case scenarios, that can make your car unsafe during some problems or unforeseen conditions. And perhaps also, the car could loose its license for driving…
If tesla allows that, then we can start speaking about it. But last time I check on that was not possible
- Comment on Low resource, Performant WAF 3 months ago:
You will need to explain a bit further this statement to mild knowledged internet stranger…
Because the point of waf is exactly about reducing the exposed surface…
- Comment on What's up, selfhosters? - The Sunday thread 3 months ago:
Dealing with a Ds-lite connection for a fiber optic provider in latest opnsense.
It is excruciating how difficult is to run it reliable
- Comment on Backups: Am I doing this right? 3 months ago:
Some clarifications :
The 3 2 1 rule applies only for the data. Not the backup, in my case I have the real/live data, then a daily snapshot in the same volume /pool and a external off-site backup
For the databases you got misleading information, you can copy the files as they are BUT you need to be sure that the database is not running (you could copy the data and n the middle of a transaction leading to some future problems) AND when you restore it, you need to restore to the exact same database version.
Using the export functionality you ensure that the data is not corrupted (the database ensure the correctness of the data) and the possibility to restore to another database version.
My suggestion, use borgbackup or any other backup system with de duplication, stop the docker to ensure no corruptions and save everything. Having a downtime of a minute every day is usually not a deal breaker for home users
- Comment on [deleted] 4 months ago:
Well, I don’t know how many online interactions you have. But has you ever imagined that perhaps the feedback you received here is actually the average of the people?
In these days is quite difficult to calibrate the crowd feeling for the insane amounts of echo chambers, the mass media crating opinion instead of informing and personal biases.
Usually, everybody of us is quite biased by our own interactions and knowledge of how the world worked around us. But those interactions are mainly defined by your social status, place of birth or simply where we live. By the specific details of people who debate in internet (probably accommodate urban person) it is possible that those ideas lean into a specific direction. But once again, it could be that you are simple realizing you are not with the majority
- Comment on Digital management post-life 4 months ago:
Of you already have a will the most secure, proof idiot way I’d to add that key + instructions to the will. Get some lawyers on board for that and it will work.
If you still have concerns about having the full key on a single place, add a topt or second way of identification and distribute it between your heirs.
Sometime, the old fahion way is the best one by far.
- Comment on [deleted] 5 months ago:
I would recommend an LDAP sever for user Auth.
There you can create/authenticate user with a central repo in a machine independent fashion. Also having the possibility to allow /egate specific services from the central database is a big plus.
It seems difficult at the very beginning but it quickly pays off. Give it a try
- Comment on Migrating from Nextcloud AIO to Owncloud Infinite Scale: Good Idea? 7 months ago:
No idea at all, but I am highly interested in your experience. So it would be great if you could came here back to share it with us
- Comment on Maintaining a level of anonymity. 8 months ago:
Even if you have a valid point, modern fingerprinting technics usually is done through your data and the connection dependencies of them (which accounts are activated from the sane computer and so on).
Selfhosting remove some links between your data set like the files you store in drive, the people who appear in your photos, your contact list, to whom you email… Etc etc
Suddenly all this data is vanishing from the big techs, so, in theory it would be possible to make that association process more difficult
- Comment on Maintaining a level of anonymity. 8 months ago:
Then follow that path, once you are comfortable with the approach you can start hosting more and more services,to the point that you can selfhost your own messenger services or ms teams services.
Once you are in that situation, you can think in accounts rotation and/or burner identities to address the services you can not pull from the big techs
- Comment on 8 months ago:
OK, thanks for the feedback. Perhaps I am doing something terrible wrong with it.
I will recheck the system again.
Thanks