borax7385

@borax7385@lemmy.world

• ⁨Comment⁩ on ⁨Jellyfin over the internet⁩ ⁨⁨6⁩ ⁨hours⁩ ago⁩:

  I have had Jellyfin directly open to the Internet with a reverse proxy for years. No problems.

• ⁨Comment⁩ on ⁨Garage - S3-compatible Object Storage alternative to Minio⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  For my simple use case (storing Velero backups), it works perfectly and with a resource footprint ridiculously low (~ 3 MiB memory when idle). In comparison MinIO used 100 times more memory.

• ⁨Comment⁩ on ⁨Secrets Management⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Oh, I didn’t realize this was for plain containers, sorry.

  For that I use Ansible to deploy the containers in my server. The secrets are stored encrypted in my local machine with passwordstore and I use the passwordstore lookup plugin to load them in the playbooks/templates.

• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  The Ansible playbooks I use to deploy it are the documentation.

• ⁨Comment⁩ on ⁨Secrets Management⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  In my homelab I use Bitnami’s sealed secrets to commit the encrypted secrets to git and deploy with ArgoCD.

• ⁨Comment⁩ on ⁨MicroOS: Rootless podman?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Which user do you use to run the podman command? Confirm with whoami

  Note that the sysctl net.ipv4.ip_unprivileged_port_start can be used to allow non-root users to bind to ports <1024, this might be configured in MicroOS, I don’t know.

• ⁨Comment⁩ on ⁨I'm bored and desperately search for a proper game⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Dyson Sphere Program is a great factory game. Check it out.

• ⁨Comment⁩ on ⁨Am I the only one interested in Fedora container?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I run some containers based on Fedora, mainly because I know the userspace and I don’t care about the size.

• ⁨Comment⁩ on ⁨How to secure Jellyfin hosted over the internet?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I use fail2ban to ban IPs that fall to login and also IPs that perform common scans in the reverse proxy

• ⁨Comment⁩ on ⁨Authelia 4.39 has been released with massive changes⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  On the other hand I value Authelia single configuration file which I can version control in git. Authentik is a click-ops burden.