themachine

@themachine@lemmy.world

• ⁨Comment⁩ on ⁨Where to start as a beginner⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  I constantly hear this but I just want to be the counter argument here.

  Self hosting email is not the impossible tasks that people make it out to be. It is on the more advanced side of things though if you are hosting your primary email that you rely on.

  I’ve been hosting my own email forany years now and have had no issues whatsoever but I also have years of experience and know how email works better than many that have no interest in such.

  I would NOT recommended starting your self hosting journey with email but I will never discourage people from doing it.

  Take your time. Ask questions any time you don’t understand something. Be ready to learn a lot and design a solid plan for disaster recovery.

• ⁨Comment⁩ on ⁨"Times Heals All Wounds" and "This Too Shall Pass" may be true, but the time window doesn't have to happen during your lifetime.⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  I know this reference!

• ⁨Comment⁩ on ⁨Journey into self-hosting⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  You did not answer what VPN tech you are using.

  Without that knowledge i would recommend setting up tailscale and having your users use that. If you want to be fully self hosted you can also run Headscale as the control plane instead of relying on Tailscales own service.

  I recommend tailscale as it is very easy to grant a user privileges to ONLY use an endpoint as an exit node but also grant access to any other endpoints as needed (such as your future jellyfin server) via theor ACLs.

• ⁨Comment⁩ on ⁨Where can I report mod abuse?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Yeah, and it’s pretty clear you are at fault.

• ⁨Comment⁩ on ⁨Where can I report mod abuse?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Well that certainly removes any uncertainty from this “debate”. OP was rude and peoe didnt takd mind to his rudeness.

• ⁨Comment⁩ on ⁨Journey into self-hosting⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Best practicescomeas down to what you do or do not want the VPN clients to access. This mostly comes down to routing and firewall rules.

  So, what should your users have access to?

  Also what is the vpn?

• ⁨Comment⁩ on ⁨Journey into self-hosting⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I’m not entirely sure what the actual question is. Can you rephrase what exactly you are trying to accomplish?

• ⁨Comment⁩ on ⁨Simple safe encryption for a server?⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  If you want simple you’ll have to manually decrypt each time it needs doing.

  If you want it to be “automatic” then your best bet is something network based. A “simple” would be to just have a script ssh’s somewhere, pulls the decryption key, and then decrypts the disks. There’s plenty of flaws with this though as while a threat actor couldn’t swipe a single encrypted disk they could just log in as root, get your script, and pull the decryption key themselves.

  The optimal solution would be to also encrypt the root partition but now you need to do network based decryption at boot which adds further complexity. I’ve previously used Clevis and Tang to do this.

  I personally don’tencrypt my server root and only encrypt my data disks. Then ssh in on a reboot or power event and manually decrypt. It is the simplest and most secure option.

• ⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Debian

• ⁨Comment⁩ on ⁨How much uplink Internet speed needed for flawless remote Jellyfin watching (2-3 people at the same time, no 4K).⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  Just look at the bit rate of what you are streaming and multiply it by 3 then add a little extra for overhead.

• ⁨Comment⁩ on ⁨iFixit hails replaceable LPCAMM2 laptop memory as a 'big deal'⁩ ⁨⁨6⁩ ⁨months⁩ ago⁩:

  I mean I’m not sitting here defending soldered on ram but your unnecessary aggression and sarcasm in your previous responses overshadows the fact that while solder on ram sucks for the upgrade and repair market the underlying tech has very tangible improvements and now we can maintain that improvement and the upgrade and repair functions.

  I agree, soldered ram is bad. But I disagree that LPDDR ram is fundamentally bad and this improvement allowing it to be modular while maintaining its improvements is a very good thing.

  As far as your complaints of battery life on your thinpad goes, there is much more to battery life than the consumption of the memory but naturally every part plays a role and small improvements in multiple places result in a larger net improvement. I’m assuming you’re running linux which in my experience has always suffered from less than optimal power usage. I’m far from an expert in that particular area but its always been my understanding that it is largely caused by insufficient fireware support.

  As a whole this looking at this article in a vacuum i only see good things. A major flaw with lpddr has been address and i will be able to expect these improvements in future systems.

• ⁨Comment⁩ on ⁨iFixit hails replaceable LPCAMM2 laptop memory as a 'big deal'⁩ ⁨⁨6⁩ ⁨months⁩ ago⁩:

  So you believe that the performance improvement and power saving is not worth creating a new standard?

• ⁨Comment⁩ on ⁨iFixit hails replaceable LPCAMM2 laptop memory as a 'big deal'⁩ ⁨⁨6⁩ ⁨months⁩ ago⁩:

  But the article explains that there is a technical reason.

• ⁨Comment⁩ on ⁨HDD spins but OS doesnt see mountable disk⁩ ⁨⁨6⁩ ⁨months⁩ ago⁩:

  What exactly do you mean by “not mountable”?

• ⁨Comment⁩ on ⁨Which OS do you use for your homeserver?⁩ ⁨⁨9⁩ ⁨months⁩ ago⁩:

  Debian for all things.

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  If I’m supposed to be reading that top comment I don’t see where you state what your results were. You apparently “had errrors” but neglected to note any down and now “you don’t” have errors.

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  Replace existing online services you use with self hosted ones.

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  Replace existing online services you use with self hosted ones.

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  This it should be no issue for you to copy and paste that answer in our conversation.

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  And what exactly happens?

• ⁨Comment⁩ on ⁨Could someone explain how to set up a lemmy instance with ansible for an absolute beginner⁩ ⁨⁨10⁩ ⁨months⁩ ago⁩:

  You tried what exactly earlier today?

• ⁨Comment⁩ on ⁨Self-Hosting Email - Software Recommendations?⁩ ⁨⁨11⁩ ⁨months⁩ ago⁩:

  I do exactly this as well.

• ⁨Comment⁩ on ⁨Question on SSL traffic between podman containers and clients (should I run k3s?)⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Why not just run a reverse proxy container on the server hosting the rest?

• ⁨Comment⁩ on ⁨If i use a good vpn and adblocking do i need a pi-hole?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  A good adblocker like unlock origin would bit download the ad. It is just as effective as DNS based blocking (pi-hole) with the added feature of also being able to do script blocking and cosmesic blocking.