q7mJI7tk1
@q7mJI7tk1@lemmy.world
- Comment on Is there a last resort, whistleblowing like app that requires a password on a timer? 1 week ago:
just schedule an email to send at a later date/time, then if you don’t login to cancel it, off it goes.
- Comment on What network hardware should I get for my homelab? 1 week ago:
I started with pfsense on Virtualbox, then quickly moved to HyperV on Windows, where I had 3 locations running this as their routers for almost 2 years, even through COVID when I couldn’t get to some locations. I never had a single issue, just got annoyed at the constant Windows updates rebooting the systems and internet going down when it did.
I then moved to Untangle, still on Hyper V, then moved off VM onto baremetal on an HP Elitedesk 800 with 10GbE card that cost about £100 total, which ran wonderfully until Untangle got sold out.
So, then onto OPNSense on the same Elitedesk (after reading about PFSenses silly games they played), and this ran perfectly for about 18 months, and with solid 1Gbps on Wireguard, then after all these years of messing with routers, I finally switched to a Unifi UDM Pro SE last year and I couldn’t be happier. It does all I need, plus also CCTV recording (away from Blue Iris). I no longer have to worry that my DIY routers are going to fail on me. So, I would recommend Unifi hardware, despite it not being open source, mainly because, well, internet is a crucial service, especially in my household. And the UDM does WAN fail over well with my backup 4G modem.
I did once however, move from PFSense to Untangle on a remote machine. Because Untangle had a GUI, I fired up a VM on the same Windows machine as PFSense, set it all up with the same NIC settings, then adjusted Hyper V so that the Untangle VM booted and the PfSense one didn’t, then rebooted the machine and waited nervously for a few minutes, then boom, up popped the Untangle router! It felt good getting that done. It was only at my parents house, but still, it required a 90min journey if it failed.
With all the drama of Windows 11 in recent years, I’m glad I switched away from HyperV when I did.
- Comment on 3-2-1 Backups: How do you do the 1 offsite backup? 2 months ago:
I spend my days working on a MacBook, and have several old external USB drives duplicating my important files, live, off my server (Unraid) via Resilio to my MacBook (yes I know syncthing exists, but Resilio is easier). My off-site backups are to a Hetzner Storage Box using Duplicacy which is amazing and supports encrypted snapshots (a cheap GUI alternative to Borgbackup).
So for me, Resilio and Duplicacy.
- Comment on Your favorite "one click" self hosted open source app installer/server manager? 2 months ago:
I guess there is no one-size-fits-all for self hosting. We all have different requirements. Mine is NAS based, so hence Unraid. I think mostly we all rotate around the core of photo storage, and Immich is likely what’s fuelling a lot of self hosting now as it’s a legit alternative to Google Photos. As I’ve moved out of the Google eco system now for everything; it creeps me out to think how much of my information they used to have access to.
- Comment on Your favorite "one click" self hosted open source app installer/server manager? 2 months ago:
I read your post last night, thought I’d reply this morning and am disappointed in the replies you’ve already had. So you’ve got issues with your self hosting, and it annoys people you haven’t figured out the solution?!? Odd.
Anyway, well done on recommending Runtipi as I’ve never heard of it and looks interesting. I’m on the look out for things to recommend to people, and that looks good.
As for what else there is, there was a thread here this week asking similar, and lots got mentioned in there. I’m too lazy to find the link, but dig about on the 1st page. Most have already been repeated in here already.
I think self hosting is a journey, where you learn as you go. It’s all part of the fun of it. And perhaps using a platform that has a healthy amount of solutions already posted is the key for you rather than focussing on a one-click interface. I myself use Unraid, and that community is full of Q&A for every type of user.
- Comment on Suggestion request: Self-hosted app for shared directories like google drive 2 months ago:
Yes, as @Darkassassin07@lemmy.ca says, just create a new user for each event you want to share photos about: ‘BeachBBQ’, ‘WeekendStay-July’ etc, then bind those user accounts to whatever folders you want to have the photos in and set the user restrictions to upload, share, but not delete for example.
I also use various FileBrowser instances, with a different subdomain pointing to them, also as a way to filter out usage as well.
collegefriends.mydomain.com
could take you to a FileBrowser instance that only has access to photos from a certain friend group. Not sure how useful that would be to you, but it’s another way of controlling the data flow. - Comment on Why is everyone using Tailscale? 2 months ago:
I’ll admit I’ve not tried Traefik yet, but I see Caddy as being to web servers (and reverse proxies), what WireGuard is to VPNs.
It does what it needs to well, with a minimal config file. And if I learn and get comfortable with Caddy, then I know it can do anything I will ever need of a web server down the line.
- Comment on What OS should I use for self-hosting that doesn't require extensive terminal knowledge? 2 months ago:
For what it’s worth given the age of this thread and disagreement going on in it, I would recommend Unraid.
Easy for a beginner, with enough to take you up to intermediate level: a web GUI for pretty much all the required terminal commands. It’s been around for years, is not going away, but instead getting updated. Works on any hardware and most of all, the community there are very supportive of beginners. There’s also lots of YouTube tutorials.
It ticks all the boxes for easy self hosting. It’s just not for Linux protocol purists.
- Comment on I don't get the love for Nextcloud - alternative for just files? 2 months ago:
When creating a user, bind them to a folder, then when they login with said user, they only see that folder. That’s the way I’ve been handing out uploadable links.
- Comment on Ideal Business Stack? 2 months ago:
I think the thing with self hosting is that it’s a hobby, and when it goes wrong, it’s part of the hobby to figure it out. But in terms of business, then it becomes a risk. By all means try and use FOSS to improve solutions. I use a self hosted dropbox / file delivery to clients as it can saturate my 1Gbps fibre which is faster than most cloud file shares, but only because if it goes wrong one day, it’s a 2 min job to use a cloud solution instead (temporarily) and email clients with the alternative solution. But I would never build something up that only ever worked via one system.
Don’t just have data backups, have service backups. And in that regard, you may decide it’s just easier to do as others have said and use enterprise solutions from the start.
If using a self hosted Office suite, have all files duped into a single Google Drive account for example. That way you’re only paying for one Google account and have an emergency backup solution in place.
You may decide the savings aren’t worth the effort in what you’re trying to achieve.
- Comment on Intel NUC Homelab - Plex, Immich, Home Assistant 2 months ago:
I would recommend Unraid. Not sure what people think of it round here as surprised no one has mentioned it. My homelab was a mix of machines for VMs, Docker and NAS, and I consolidated it last year with Unraid and couldn’t be happier. I run Plex, Immich, Wordpress, Home Assistant and a load of other containers, alongside a Windows and Ubuntu VM on a cheap eBay HP Z workstation. If on a NUC with only a single drive, V7 of Unraid will now work without an array, so a single drive basically. It’ll give you a GUI for Docker and everything.
- Comment on How do you all handle security and monitoring for your publicly accessible services? 5 months ago:
Sure, so I use Caddy as a reverse proxy for all my subdomains, the public ones direct straight to whatever service(s) are on IP:port etc, then the private ones only allow private IP ranges of which one is my VPN subnet, therefore only allowing LAN and VPN access. I then also have a section for each of the private subdomains with Authelia authentication which is omitted here:
(allowed) { @allowed client_ip 192.168.1.0/24 192.168.10.0/24 192.168.20.0/28 } sub.domain.com { import allowed handle @allowed { reverse_proxy 192.168.80.8:8080 } handle { abort } }
- Comment on How do you all handle security and monitoring for your publicly accessible services? 5 months ago:
So among my services I self host, a few need to be publicly accessible for work. For those I wish to remain private, I use Caddy allowing only private IP ranges, plus then Authelia as auth which is set to 30 days. There is then the login of each service being Authelia as well. It’s as good as it needs to be for my needs.
If I were only self hosting private services, then as others have said, I would put all access through a VPN.