Guadin
@Guadin@k.fe.derate.me
Admin for kbin instance of fe.derate.me
- Comment on Is it practically impossible for a newcomer selfhost without using centralised services, and get DDOSed or hacked? 1 week ago:
I don't get why they say that? Sure, maybe the attackers don't know that I'm on Ubuntu 21.2 but if they come across https://paperless.myproxy.com and the Paperless-NGX website opens, I'm pretty sure they know they just visited a Paperless install and can try the exploits they know.
Yes, the last part was a bit snarky, but I am truly curious how it can help? Since I've looked at proxies multiple times to use it for my selfhosted stuff but I never saw really practical examples of what to do and how to set it up to add an safety/security layer so I always fall back to my VPN and leave it at that. - Comment on Tell me what it smells like in the comments! 1 month ago:
Damn, that's some graphic shit. I could feel the spray hitting my ankles while reading it. Got to scrub extra hard under the shower tonight.
- Comment on Is triple triple the same as triple triple triple? 1 month ago:
Okay, treating this seriously. No: triple triple = 333 333 333. Triple triple triple = 333 333 333 333 333 333 333 333 333.
- Comment on \_🫨_/ 2 months ago:
Exactly, we've got words for (almost) all emojis. And besides that, even if I would go along with @takeheart argument, the reason we might not have words for all emojies is because we don't need them. If we would like to, or evolve to the need, of being able to pronounce every emoji that would mean we would make sure everyone had a word or sound to it.
- Comment on \_🫨_/ 2 months ago:
I don't think this is a shitpost, it's actually quite good. It makes you think.
- Comment on Comment any opinion and I will disagree with it, no matter what. 6 months ago:
I think black people are people, and nice as well.
- Comment on VPNs, self hosting & security 6 months ago:
In that case, enjoy! It's a great feeling when you get it working.
If you're going to do it on your synology, see if you need to fix the TUN error. Also, you need to add ip routes to your synology to have the IP's from your VPN on docker forwarded to docker. Make sure these are persistent or added on every startup.
Make sure you allow the VPN to work by adding it to the synology firewall.
You need to setup port forwarding on your router. It needs to point to your synology to the port which is linked to the docker container. You also need to add the route to your router to be able to access your network. For instance, if your VPN has 10.0.3.* and your LAN uses 10.0.0., your LAN/router won't know where to send the response packets to the VPN network. So when connected to your VPN you will never be able to load stuff. If you add that 10.0.3. needs to route to your synology, and your synology knows that range needs to be routed to the Docker VPN container everybody knows where it needs to go.
- Comment on VPNs, self hosting & security 6 months ago:
Tailscale is (like) a VPN, but traffic will go through their servers. If you setup your own VPN server then traffic will remain between your client and your own server.
Did you setup port forwarding and routing tables when you installed your VPN server?.
The Synology VPN package is lacking behind a lot, so you could be missing some security updates.
If you use a VPN to hide your services, you reduce your attack/risk. Since there is only one package/software suite which could've vulnerabilties. And VPN's are focussed on security. If you expose all your hosted stuff, all those programs need to be secure to prevent abuse. And not everybody is as skilled to build it securily.
I would recommend, for you, to use something like tailscale. Since you seem like someone at the beginning of their safety journey. With setting up a VPN server, you need to know a little bit what your doing to make it secure and work. And you could invest time to learn it all, or you could use something that does it for you. Another, not so wise, advise could be to use a docker container to host the VPN. Most containers have all settings correctly setup and have guides to make it secure. But that means you don't know what you installed and that could be a bad thing as well. Furthermore, docker adds to the complexity of making it work.
- Comment on Seeking Advice to Ensure Robust Security for My Home Server Setup 6 months ago:
What does the NGINX proxy manager do? Is that to access the mediaserver?
- Comment on Fairphone has created a smartphone that owners can repair themselves - This sustainable smartphone aims to reduce global electronic waste 7 months ago:
Well they don't ignore that market. They decided to not sell there yet. Because going to a new large market far away from all your warehouses and with a potential large demand cause a lot of headaches. Not to mention all the regulations and rules they need to abide by.
- Comment on Perfectly legal for cars to harvest your texts, call logs 7 months ago:
I hate it that they put al the nice features behind data harvesters. Want to have that nice traffic info (a nightmare on it's own, but it is handy)? Share all your data. Want to have Spotify? Share all your data.
- Comment on How was life back then? 10 months ago:
I've only been seeing <3 for about 10 years. Back in the MSN days it was (L) all the way.
- Comment on If lemmy was a drug what would it be? 10 months ago:
What's the "deepness" in this picture? It's literally social media appearing as a drug.
- Comment on Fat people are the only group you wouldn't have to kill in a holocaust. Once they hit a BMI of 25 you can just release them from the camps. 10 months ago:
Don't worry, most people are.
- Comment on Fat people are the only group you wouldn't have to kill in a holocaust. Once they hit a BMI of 25 you can just release them from the camps. 10 months ago:
You are technically correct. Since after a while they won't be fat anymore when they are in the camps. I needed to think about this one for a while.
Sick fuck.
- Comment on [deleted] 11 months ago:
That's the fun part. There aren't any. Since you can't register them since 1993. There are only 6 domains available which escaped the ICANN claim. X.com being one of them. X.org is the other "most popular" within particular crowds.
- Comment on [deleted] 11 months ago:
He wasn't wrong without this change. Single letter domains are rare and worth quite some money.