tofu

Similar, Nextcloud is a fork of OwnCloud, and OpenCloud is a fork of the new OwnCloud Infinite Scale.

Refurbished Lenovo Tiny, HP micro or Lenovo mini are the go to things for this. Available in plenty different configurations, modular and widely available due to getting decommissioned by the industry in big numbers after 2-3 years.

Good Point! I’ll check if my forgejo container has password auth enabled. :D It’s LAN only though.

I mean, not that it’s not severe, but which container images have ssh baked in? If you’re using good stripped down images, you’re fine here.

Not sure where the overlap is between"ssh is enabled" and “one of those OSes”. LXCs maybe?

That it’s in the hand of a few people is one major issue, but the externalized costs* are even worse one in my book and this is another post where it’s conveniently ignored mostly.

• Energy consumption, water usage, scraping ddos

Not that I read it all, but literally the second sentence is:

This entire post (the link is the source) has been fully written by me without any AI.

I think that’s perfectly fine as well! I’m on an unmanaged switch, so it’s not really an option for me. (And prefer to keep it that way since I’m always trying to minimize power consumption)

(that’s correct, I just wanted to add that Proxmox Backup Server supports incremental backups)

I’m also on authentik, because of the extensive list of tutorials. I’m also using Navidrome but couldn’t be bothered to set up SSO there since I’m mostly listening via clients

Looks pretty cool, quite pricey though compared to 3D printing. I’m glad my friend printed mine

Sweet! I also love that it has a whole screenshot section.

You’ll find more stuff for problems you didn’t know you have. :D

Yeah I get it. Wanted to get in the habit of blogging about my stuff a bit, but admittedly I’ve been criticizing articles for the same.

What are you building for your community? I think smaller communities is really the spot where this hobby can have a greater impact in enabling people to collaborate in different ways.

I think for that use case, Firewalls on the hosts make sense. VLAN is not a bad idea either, though you’d need a managed switch (hardware) for that.

Crowdsec is on my to-do list as well. Should be easy to set up on OpnSense, just never pulled the trigger.

I have HA notifications set up for the same thing, but sometimes they simply won’t work. Have you set up all the energy settings? There’s a way to create a manual notification from HA, does that work?

Don’t create another Omarchy please!

I have a similar thing but I’m using Ansible. That way, I don’t have to handle all the error checking etc myself.

F2B/FW: If it’s only available locally/via VPN, I think your threat model is your LAN. People in your wifi or rogue smart home stuff. I think a firewall makes more sense here, but if it’s just 1 machine, you should be fine with ufw or the like. If you have several VMs that are supposed to be separated, the solution would depend on the virtualization software.

Unattended upgrades are way better than none at all, both for system and docker. Of course it depends on how important it is that your services are “always” available and I get the NAS struggle though.

That sounds very cool! Did you have prior knowledge in that field or are you learning as you do it?

DDR4 as well. All legacy hardware in my server - luckily

What kind of id tools? Like the bird sound thing?

Glad you like it! I tried to go for a 2-3 week cycle as I realized every week is a bit too often (less comments). I also tried to do it alternating with the community on slrpnk but they’re currently down. I often forget to do these anyways :D

Anyone can make these, of course. I always enjoy doing them and talking about stuff I enjoy.

Good luck! I’ve been watching auctions for some weeks on ebay when I needed 2x32GB SODIMM some months ago and eventually got a pair for 230€. Fucking expensive but cheaper than most other offers I found.

I love Komodo! Have you attached Renovate as well?

I’m always super excited for this kind of stuff :D

Mounting into the VM and then bindmount as the other commenter suggested is the most straightforward. The trickiest part will be Dataset ownership and permissions in TrueNAS so that the clients can read and write, but there’s tutorials for exactly that.

Yes, that’s the difference between a pure git server and what’s usually called a forge

+1 on selfhosting. It’s a bit resource hungry though, 4GB are barely enough on a single user instance. The setup is straightforward except for the reverse proxy config if you aren’t using the provided containerized one.