curbstickle_lw

Please refer to rules 7&8. The tag must be included in the title, with a disclosure if applicable.

I’m into this as a regular thing!

Pinned, I think a lot of us really enjoy seeing what others have been doing to take back and make improvements to our own setup.

The title requires a tag.

Please review rules 7 & 8

lemmy.world/post/48725669 lemmy.world/post/49151085

Please update with tags and disclosure as required, per rules 7 & 8

Its never DNS! Unless it is, which is almost always.

Because a lot of us watch things that cant be found easily, or home movies, or prefer to have it readily available at any time.

There are many reasons. Dont assume your use case is the only one.

Definitely a new one for here…

That said, your post is missing the [AIT] tag - AI Topic. Please update asap.

TL;DR:

• No, your passwords/secrets have not been shared anywhere.
• This is a long-standing feature of supervisor and has been discussed in HA forums before.
• You can turn it off, but that is generally not recommended.

This post has been reported for misinformation.

I agree due to how its phrased by OP, but its not completely off base in that HIBP is used, but it is a severe misunderstanding of how. So I’m going to leave it up for awareness, while adding some notes and a few quick links here.

A quick quote from HA:

Your secrets are never sent anywhere. The check uses an algorithm called K-Anonymity that makes sure the service never sees your password, not even its complete hash. Your secrets and privacy stay protected.

The check is on by default. If you prefer not to run it, you can turn it off using the command line:

ha security options --pwned=false

To turn the check back on again, run:

ha security options --pwned=true

In short - HomeAssistant has never shared your passwords anywhere. HomeAssistant shares a part of a hash. In no way, shape, or form does this expose your passwords/secrets.

1. HA Page on Pwned passwords and secrets
2. HaveIBeenPwned
3. k-anonymity

Please update your title with the appropriate tag and disclose as required for rules 7&8, any questions please send a DM.

Would you buy a car with a big dick and balls for a logo, but you can pay extra to have it removed?

Have you ever seen corporate branded truck nuts? Because I have, and those companies paid to add it in.

That was not the issue with tesseract or its dev, let’s be honest.

This is… beautifully without any soul or personality. Its so fitting.

I want to remind everyone to keep on topic. Disparaging people for whatever reason is not on topic.

If you see something problematic, please report rather than respond. Your comment in response will be nuked along with the original problem comment.

All set thanks!

@frey@lemmy.world please update with the appropriate tag/disclosure per rules 7/8

Thanks

Its a pretty big stretch to call this self-hosting related…

Locking the thread.

Please add your disclosure. See rule 8. Locking for now + cleanup.

What I might consider is a “winterized” variable per hose/pipe that may be a concern, and only notify if winterized is false for those, and have the notification list specifically not winterized.

That state would be manual per, but then you would be able to get a more meaningful reminder to only those that would be at risk.

No worries!

Please review rule 7 and tag as appropriate. If AI assisted at any level, please also add the required disclosure.

Up until the point the resources available (CPU/ram/storage) become a problem.

That said, managing those apps as installations can be troublesome, which is why people like podman/docker. Updates are more contained, system updates don’t break services, and vice-versa.

A more comprehensive option is to use Proxmox or similar to manage services as a combination of Virtual Machines, LXC’S (Linux containers), and maybe podman/docker on a VM. Note that Proxmox techincally supports importing a docker container as an LXC, but this is a one-time action. Not recommended.

Navidrome and pihole are the easy ones on that list also. Jellyfin itself is easy, but you aren’t going to be transcoding video on the fly, so make sure its in a format that is friendly to all of your devices, transcoding in advance if needed.

I’d sum it up with:

“Ew.”

Its one thing to offer bespoke customization for businesses. Its entirely another to work to prevent any indication that the software is being run by someone other than the creator of the software. IMO, it goes against self hosting as a practice.

It could be everything I want and more, and it would immediately turn me away. Which, in turn, would also turn me away from recommending it to others, including businesses.

I’d call it a pretty bad strategy.

This post is off-topic for the community.

That said, its a topic people here are quite passionate about, which is why it gathered quite a bit of comments already.

I’m going to leave it up, but locked.

Secure enough I suppose.

f2b at the FW, auth with MFA for anything exposed, anything local only has restricted access at the FW level, with exposed (via proxy) and local-only (separate proxy) on different vlans. Each service is (typically, with some exceptions) an LXC, with additional rules and templated out based on use case. The few cases where docker is involved is local-only and that has its own vlan with additional rules.

rclone crypt

Appreciate that you have the disclosure, but your account is too new to post promo. Your account will need to be at least 30 days old.

Please post again once you’ve met the requirements! In the meantime, please stick around and get to know the other folks here as well.

This post is tagged properly and has a full disclosure.

Off topic comments will be removed.

You can, but you need their app.

That isn’t something I’m going to do, so I tag manually instead.

Well, perfect use case for the test immich instance!

I’ve got a few day trips recently that will make for good tests for over the weekend.

The immich service connection.with writeback is awesome!

My kids have some dinky little digital cameras with no GPS or WiFi or anything, just writes photos locally to microsd, so obviously no location data. I use my phone, sure, but when traveling I’ll use my DSLR that also has no GPS (OK it does have WiFi, but I don’t use it).

Which turns into me tagging every time we get back from somewhere.

Going to give that immich link a try!