CapitalNumbers

@CapitalNumbers@lemm.ee

• ⁨Comment⁩ on ⁨What do I actually need?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Maybe a silly question, but is simply having the thing doing the sailing running on what might be a docker container that only has access to the internet via a VPN connection okay? my friend told me this is his set up

  like, logically speaking this seems to be basically fine, since the sailing ship’s data is not visible to the ISP

• ⁨Comment⁩ on ⁨What do I actually need?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  “retrieving” from ripping my personal DVD and BluRay collection?

• ⁨Comment⁩ on ⁨What do I actually need?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  are you me haha?

• ⁨Comment⁩ on ⁨Best option for hosting ebooks and audiobooks?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  i assume that’s just for free podcasts?

• ⁨Comment⁩ on ⁨How to reverse proxy?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  does a wild card cert essentially mean i have use one cert which will cover all my subdomains as well as the primary domain?

• ⁨Comment⁩ on ⁨Thoughts on the recent Swiss law that might require ProtonVPN to start blocking certain domains?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Cool.

  In other news, Swiss law makers claim opening and reading all mail sent to make sure it doesn’t include the phrase “monty bojangles” is “not a privacy concern”

  My point is that in order to block a specific domain, you necessarily need to check it against a list of all legitimate domains being accessed

• ⁨Comment⁩ on ⁨Thoughts on the recent Swiss law that might require ProtonVPN to start blocking certain domains?⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  As in why is a post about VPNs on a self-hosted forum?

• ⁨Comment⁩ on ⁨Self-hosting is having a moment. Ethan Sholly knows why.⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  really? like what? i’ve been using docker completely free and unrestricted - at i think so haha

• Thoughts on the recent Swiss law that might require ProtonVPN to start blocking certain domains?
  Submitted ⁨⁨5⁩ ⁨weeks⁩ ago⁩ to ⁨selfhosted@lemmy.world⁩ | ⁨63⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Here’s my approach to documentation. It’s about habits as much as it’s about actually writing anything down:

  1. Never setup anything important via naked terminal commands that you will forget you did

  2. Always wrap important commands in some kind of “setup-xyz.sh” script and then run that script to see if your install worked.

  3. If you need to make a change to your service, ensure you update your script and so it can be re-run without braking anything

  Get into the habit of this and you are documenting as you go

• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  i second this

  i haven’t gotten around to looking into something like terraform/ansible yet, and currently rely on a series of setup.sh scripts and docker-compose files

  i have a single master setup.sh at the root of my homelab which basically just outlines which scripts i need to run and in what order in order to get things back up and running from zero

  i only user my README.md for any non scriptable stuff (such as external services i rely on such as cloudflare/vpn providers, etc)

• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  i mean charitably you could say that your code / architecture should be self documenting, versus having to rely on READMEs / wikis

  in effect, if you change the code you are by definition also changing the documentation, since the file names/function names/hierarchy is clear and unambiguous

• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  while security might be compromised if an attacker found your documentation, it could equally be compromised by having zero documentation

  the easier it is for you to get things back up and running in the event of a data loss / corrupted hard drive / new machine / etc, the less likely you are to forget any crucial steps (eg setting up iptables or ufw)

• ⁨Comment⁩ on ⁨How do you document your Homelab?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  this is basically what i ended up doing to - glad to see my approach verified somewhat ha ha!

  but yeah, in general whenever i make a change / add new service, i always try and add those steps to some sort of setup.sh / docker-compose

• ⁨Comment⁩ on ⁨Best option for hosting ebooks and audiobooks?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  supports podcasts too? what tool are you using to download those? and does ABS handle the sorting/meta data the same way it does for audio books?

• ⁨Comment⁩ on ⁨How to reverse proxy?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  maybe silly question but does tailscale tunnel operate in a similar fashion to a cloud flare tunnel? as in you can remotely access your internal service over https?

• ⁨Comment⁩ on ⁨How to reverse proxy?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  i have nginx proxy manager set up all as well, but haven’t worked out the SSL part yet, so all my internal docker services are still on http

  out of interest, how did you set up https with npm?

• ⁨Comment⁩ on ⁨How do I use HTTPS on a private LAN without self-signed certs?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  why would you realistically need HTTPS on your local network?

• ⁨Comment⁩ on ⁨How and where should I keep backups of system configurations?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  real question though is do you back up your backup server?

• ⁨Comment⁩ on ⁨How to secure Jellyfin hosted over the internet?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Why would Cloudflare warn me against a service they themselves offer? The email authentication is all managed by them

• ⁨Comment⁩ on ⁨Risks of self-hosting a public-facing forum?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  i definitely didn’t have to enter my card details, could my region though

• ⁨Comment⁩ on ⁨Optimal Plex Settings for Privacy-Conscious Users⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  while I agree you have to remember everyone one here is likely way more techie than the average person

  the ONLY issue I think non-tech people have with JellyFin is that you have to enter a specific domain/ip address to connect to a server - like I know to us that’s simple but it’s also very unlike how most paid-for streamers operate

• ⁨Comment⁩ on ⁨Optimal Plex Settings for Privacy-Conscious Users⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  stopppp

  it’s already dead

• ⁨Comment⁩ on ⁨How to secure Jellyfin hosted over the internet?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  So i’ve been trying to set this up this exact thing for the past few weeks - tried all manner of different Nginx/Tailscale/VPS/Traefik/Wireguard/Authelia combos, but to no avail

  I was lost in the maze

  However, I realised that it was literally as simple as setting up a CloudFlare Tunnel on my particular local network I wanted exposed (in my case, the Docker network that runs the JellyFin container) and then linking that domain/ip:port within CloudFlare’s Zero Trust dashboard

  And you can even set up what looks like pretty robust authentication (2FA, limited to only certain emails, etc)

  Not sure what your use case is, but as mine is shared with only me and my partner, this worked like a charm

• ⁨Comment⁩ on ⁨Risks of self-hosting a public-facing forum?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Have you ever tried Cloudflare Tunnels? I think this would solve most of those issues

• ⁨Comment⁩ on ⁨Risks of self-hosting a public-facing forum?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  just cloudflare tunnel it - i set one up the other day and it works super well, proving external access to a locally hosted service all without having to set up your own SsL certs and worrying about exposing private ips or ports

• ⁨Comment⁩ on ⁨Someone help me understand the sonarr to jellyfin workflow⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  literally was going through the exact same thoughts as you a couple a weeks ago, tried so many different configurations but the one i found that worked was actually kinda simple

  basically they way i did was to run a gluetun docker container, and then in the environment variables pass in the the fact i wanted this to use the WireGuard VPN manager, and then i passed in my Proton VPN wireguard api key (you’ll need a subscription for this)

  then once that gluetun container is up and running, you literally just add “network_mode: service:gluetun” to any other containers that you want to use this VPN

  can you can even test its working by sending a curl command to an ip checking site from within those containers connected to gluetun

• ⁨Comment⁩ on ⁨Someone help me understand the sonarr to jellyfin workflow⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I’ve literally just set this all up and it’s working now after some tinkering, so here’s what I found out. Assuming you have correctly configured the sonarr/qbitorrent api keys and credentials:

  When you make a TV show request in Sonarr, it will automatically add the torrent to your download client (e.g qbitorrent)

  qbitorrent will then download the file to wherever you specify (e.g. /torrents/completed)

  periodically, Sonarr will scan that /torrents/completed folder, and if it finds the tagged TV show, it will either copy or hard link that video file to your specified media folder (e.g. /media/tv-shows)

  JellyFin will do the same, periodically scanning your media folders to see if there are any updates