jrgd

@jrgd@lemm.ee

• ⁨Comment⁩ on ⁨CrowdSec vs Fail2Ban - What to use?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  If you’re running an email server for more than a handful of persistent users, I’d probably agree. However, there are self-host solutions that do a decent job of being ‘all-in-one’ (MailU, Mailcow, Docker-Mailserver) that can help perform a lot of input filtering.

  If your small org just needs automation emails (summaries, password resets), it’s definitely feasible to do actually, as long as you have port 25 available in addition to 465, 587 and you can assign PTR records on reverse DNS. Optionally you should use a common TLD for your domain as it will be less likely to be flagged via SpamAssassin. MXToolbox and Mail-Tester together offer free services to help test the reliability of your email functionality.

• ⁨Comment⁩ on ⁨CrowdSec vs Fail2Ban - What to use?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I’m currently going through a similar situation at the moment (OPNSense firewall, Traefik reverse proxy). For my solution, I’m going to be trial running the Crowdsec bouncer as a Traefik middleware, but that shouldn’t discourage you from using Fail2Ban.

  Fail2Ban: you set policies (or use presets) to tempban IPs that match certain heuristic or basic checks.

  Crowdsec Bouncer: does fail2ban checks if allowed. Sends anonymous bad behavior reports to their servers and will also ban/captcha check IPs that are found in the aggregate list of current bad actors. Claims to be able to perform more advanced behavior checks and blacklists locally.

  If you can help it, I don’t necessarily recommend having OPNSense apply the firewall rules via API access from your server. It is technically a vulnerability vector unless you can only allow for creating a certain subset of deny rules. The solution you choose probably shouldn’t be allowed to create allow rules on WAN for instance. In most cases, let the reverse proxy perform the traffic filtering if possible.

• ⁨Comment⁩ on ⁨CrowdSec vs Fail2Ban - What to use?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  It doesn’t.

• ⁨Comment⁩ on ⁨Nextcloud (PHP) vs OpenCloud (Rust)⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Ocis/OpenCloud can integrate with Collabora, OnlyOffice but don’t currently have things like CalDAV, CardDAV, E2EE, Forms, Kanban boards, or other extensible features installable as plugins in Nextcloud.

  If you desire a snappy and responsive cloud storage experience and don’t particularly need those things integrated into your cloud storage service, then Ocis or OpenCloud might be something to look into.

• ⁨Comment⁩ on ⁨Authelia 4.39 has been released with massive changes⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Authentic has blueprints, which while not as simple as Authelia’s config, do provide a functional way to have version-controlled configuration.

• ⁨Comment⁩ on ⁨Migrating from Nextcloud AIO to Owncloud Infinite Scale: Good Idea?⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  For what it’s worth, I do think OCIS is worthy of switching to if you don’t make use of all of the various apps Next cloud can do. OCIS can hook into an online office provider, but doesn’t do much more than just the cloud storage as of right now.

  That said, the cloud storage and UX performance is night and day between Nextcloud/Owncloud and OCIS. If you’re using a S3 provider as a storage backend, then you only need to ensure backups for the S3 objects and the small metadata volume the OCIS container needs in order to ensure file integrity.

  Another thing to note about OCIS: it provides no at-redt encryption module unlike Nextcloud. If that’s important to your use case, either stick with Nextcloud or you will need to figure out how to roll your own.

  I know that OCIS does intend to bring more features into the stack eventually (CalDAV, CardDAV, etc.). As it stands currently though, OCIS isn’t a behemoth that Nextcloud/Owncloud are, and the architecture, maintenance is more straightforward overall.

  As for open-source: OCIS released and has still remained under Apache 2.0 for its entire lifespan thus far. If you don’t trust Owncloud over the drama that created Nextcloud, then I guess remain wary? Otherwise OCIS looks fine to use.

• ⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨5⁩ ⁨months⁩ ago⁩:

  You use Steam for games on Linux primarily. Independent native games exist as well. Many Windows-only titles will be best run through Proton: Valve’s modified WINE bundle. Other store titles can be configured to run through WINE or Proton via apps like Lutris or Heroic (GOG, Itch.io, Epic Games, etc.).