ccryx

@ccryx@discuss.tchncs.de

• ⁨Comment⁩ on ⁨Self hosting Sunday! What's up, selfhosters?s⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I’ve finally pinned down my backup automaton:

  • All my services are in podman containers/pods managed by systemd.
  • All services are PartOf= a custom containers.target.
  • All data is stored on btrfs sub volumes
  • I created a systemd service that Conflicts=containers.target for creating read only snapshots of the relevant subvolumes.
  • That service Wants=borgmatic.service wich creates a borg backup of the snapshots on a removable drive. It also starts containers.target on success or failure since the containers are not required to be stopped anymore.
  • After borg backup is done, the repository gets rclone synced to an S3 compatible storage.
  • This happens daily, though I might put the sync to S3 on a different schedule, depending how much bandwidth subsequent syncs will consume.

  What I’m not super happy about is the starting of containers.target via the systemd unit’s OnSuccess= mechanism but I couldn’t find an elegant way of stopping the target while the snapshots were being created and then restarting the target through the other dependency mechanisms.

  I also realize it’s a bit fragile, since subsequent backup steps are started even if previous steps fail. But in the worst case that should just lead to either no data being written (if the mount is missing) or backing up the same data twice (not a problem due to deduplication).

• ⁨Comment⁩ on ⁨Any experience of Diode?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  What I’m reading is that you want site-to-site connectivity. Wireguard + possibly dynamic DNS makes this pretty easy (assuming you can open ports and configure NAT at your sites). Or you could set up some other VPN solution like OpenVPN.

  There’s also tailscale (a paid service) for facilitating the wireguard setup, NAT traversal and relaying. headscale is a self hosted solution that aims to provide something similar (but more limited in scope).

• ⁨Comment⁩ on ⁨SteamOS on my gaming PC?⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  I have not used it myself but you should be able to run typical linux desktop software with steamos. That being said, I don’t think there’s gog galaxy for linux. You can use HeroicLauncher for GOG (and epic and prime gaming) instead.

  I think this post provides a pretty good high level introduction: https://www.gamingonlinux.com/guides/view/how-to-install-extra-software-apps-and-games-on-steamos-and-steam-deck/

  Alternatively, you could try a gaming focused Linux distribution like bazzite (based on fedora/ublue) which comes with a lot of gaming related stuff preinstalled or easy to install. The base system is mostly read only though and if you need the latest version of some software that’s not on flathub, it can be a little limiting.

  cachyos (based on arch) is a good alternative if you would like to be able to get your hands dirty tweaking your system or want more freedom wrt installing software.

  In any case, you should check https://www.protondb.com/ if your games are supported.

  Some games with certain anti cheat software can not be run (e.g. anything using vanguard, riot’s anti cheat).

  Do note that if you’re in the EU (or can convince Windows/Microsoft that you are, I assume) you should get Windows 10 patches for another year without doing anything.

• ⁨Comment⁩ on ⁨Is there a self-hosted project that does base64 url decoding in a privacy respecting fashion?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  You can use man cut to read a program’s manual page. Appending –help (without any other arguments will often produce at least a short description of the program and list the available options.

• ⁨Comment⁩ on ⁨Caddy + DeSEC.io + DNS Challenge⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I’m also using Caddy with desec and get the same result when adding a new subdomain. It fixes itself after a while though (10+ minutes). Maybe try waiting a little longer.

• ⁨Comment⁩ on ⁨What's up, selfhosters? It's self hosting Sunday!⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  I’m also using caddy with desec.io. When first triggering the challenge for an entry, it CSV fail a couple of times. I think it just takes a while for the DNS entry to be available.

  Another thing that I’ve experienced is that I can’t use wildcard subdomain entries. My guess is that it’s somehow because I only have public IPv6 addresses (but I don’t remember the details). I have configured an internal DNS with the wildcard entey since I’m only ever connecting to that host via wireguard from outside my network. For the host itself I’ve created a regular AAAA record.