Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)F

farcaller

@ farcaller @fstab.sh

Posts
4
Comments
123
Joined
3 yr. ago

**beep ** bop.

  • My thoughts shopping around for a wiki solution

    Jump

  • tiddlywiki has one of the most insane search engines from this list. They have a whole filters syntax that can express pretty much anything imaginable, no? I went back to TW from Obsidian because I was tired from Obsidian's trivial search functionality.

  • Trying to get into MUDs - any suggestions?

    Jump

  • SSH Client for Linux Desktop and Android - Alternative to Termius

    Jump

  • Let's untangle those problems. I have a similar setup so I just want to share some ideas to show that you don’t need to copy keys.

    If I'm traveling or I wipe my device or get a new one, I would have to add the new key to many servers as authorized keys

    If you oftentimes access ssh from untrusted systems you’re kind of in a bad spot to begin with. The best thing you can have is a yubikey on a keychain. Everything else means you leak secret material (a password or a key) to a machine you don’t inherently trust.

    Also, I want a key backed up in case of disaster since all of my devices are in my home most of the time

    Again, something that you can easily solve with a hardware key [in a safe]. But realistically, in case of a disaster a local shell password login should be good enough?

    I'd recommend you to think about what attacks are you trying to prevent by using a shared private key. I’m not saying it's a bad concept, inherently having it in your password manager (like 1Password that even has ssh-agent support) is pretty common. The problem with just the keys is that it's non-trivial to expire them if needed. You might be indeed better off with some web based authentication that you can access from any place which would ask you secret questions/send you a text message or do whatever 2FA you deem sufficient and mint you a short-lived certificate for ssh.

  • SSH Client for Linux Desktop and Android - Alternative to Termius

    Jump

  • Not an answer, but I’m curious: what's wrong with just having several ssh keys, one per device?

  • Removed

    Seriously, why?

    Jump

  • Decreasing Certificate Lifetimes to 45 Days

    Jump

  • You can absolutely run your own CA and even get your friends to trust it.

  • How to propperly Ansible and selfhost without burning out?

    Jump

  • My fear is, that if i don't document well or not use ansible, I will be hating my life once my server dies and I have to restore my data and also set um my services again in a few years.

    I’ve been there plenty of times, you’re not alone. There are two solutions to that problem, really, and it boils down to the classic pet vs cattle.

    1. Everything is a pet

    Pets mean you care about every server. If it breaks, it's cheaper for you to fix it than redeploy. The overwhelming majority of your setup will be pets. Why? It's simpler. Things don’t break that often, and when they do, it's okay to be low-effort in fixing them.

    Write docs for yourself, even if it's just notes on the sequences of commands to run to redeploy things. You will thank yourself when the server finally dies in two years and you have notes on how to bring everything back.

    1. Everything is a cattle

    Cattle means there's no difference between server A and B. Everything is replaceable. Ultimately, whatever you run can run to the same extent in AWS, your basement NAS, or on your desk PC.

    Cattle is also a lot of work. You will learn an excruciating amount of things about storage, networking, visualisation, workload scheduling, and such. And it's easy to be demotivated because of how much there is to learn.

    So take it easy. Concur that your hobby world is full of pets, but learn how to do the cattle approach at your leisure. You’ll realise that in every practical cattle setup, there are still pets, and that automating yourself from complexity only means you add layers of it somewhere else.

  • Rybbit - Open source Google Analytics replacement

    Jump

  • I don’t think that's plausible.

  • Looking for a selfhostable chat service that people on phone and computers can log onto

    Jump

  • I’m in a same boat, honestly.

    Matrix has decent clients but managing a matrix instance is a world of pain, especially if you federate. And its resource use is really bad then: a single user instance can easily demand 4gb ram if you are in a couple popular chatrooms. Key propagation is oftentimes broken. Clients all have mixed support of features.

    Xmpp is a joy to host, but there are no decent clients for iOS.

    IRC is easy to host, but the IRCv3 coverage for clients is also meh.

    I was looking for something that I could throw at casual people with relative ease and there's just not a thing. Even the "techy" chat is in discord nowadays.

  • Fediverse @lemmy.world
    farcaller @fstab.sh

    How resilient to network splits lemmy/mastodon are in practice?

  • Those who are hosting on bare metal: What is stopping you from using Containers or VM's? What are you self hosting?

    Jump

  • I’ll chime in: simplicity. It's much easier to keep a few patches that apply to local OS builds: I use Nix, so my Mastodon microVM config just has an extra patch line. If there's a new Mastodon update, the patch most probably will work for it too.

    Yes, I could build my own Docker container, but you can’t easily build it with a patch (for Mastodon specifically, you need to patch js pre-minification). It's doable, but it's quite annoying. And then you need to keep track of upstream and update your Dockerfile with new versions.

  • Vibe coding is great for MVP's

    Jump

  • OP should have vibecoded the title, chatbots know how to use apostrophes.

  • Kanidm is a modern and simple identity management platform written in rust

    Jump

  • Let’s be fair, OAuth is very hard. And requires a web server to make work :-)

    This is not a password manager, this is IdP roughly like Authelia, Auth0, etc.

  • Kanidm is a modern and simple identity management platform written in rust

    Jump

  • While it’s nice, lightweight, and simple, it still blows my mind that a security product has no means for logs audit and the logs themselves are very hard to deal with programmatically.

  • (Rant) Don't buy Rockstar games.

    Jump

  • That's not the best example, because CP2077 has its own launcher (at least the steam one)

  • Neovim security

    Jump

  • If you want to go the "packaging way", you could use nix's nixCats-nvim to make a fully hermetic nvim installation where you track the origin of all the dependencies (LSPs too) and plugins, all with receipts and hashes and all the good stuff of a reproducible build system. The security industry likes reproducible build systems because there's only one way you can go from source to the artifact.

    Then, you package that in e.g. a docker container (which nix can build for you, too) and ship where you need it.

  • Log monitoring software?

    Jump

  • One thing about grafana, though, is that you get logs, metrics and monitoring in the same package. You can use loki as the actual log store and it's easy to integrate it with the likes of journald and docker.

    Yes, you will have to spend more time learning LogQL, but it can be very handy where you don’t have metrics (or don’t want to implement them) and still want some useful data from logs.

    After all, text logs are just very raw, unstructured events in time. You may think that you only look into them very occasionally when things break and you would be correct. But if you want to alert on them, oftentimes that means you’re going from raw logs to structured data. Loki's LogQL does that, and it's still ten times easier to manage than the elastic stack.

    VictoriaMetrics has its own logging product too, now, and while I didn’t try it yet, VM for metrics is probably the best thing ever happened since Prometheus. Especially for resource constrained homelabs.

  • Anyone use Hetzner Storage Box to backup their Synology NAS?

    Jump

  • Storage box networking can be hit and miss. It's ok for incremental uploads, but I went through hell and back to get the initial backup finish, which makes me wonder what it would take to download it in case I have to.

    Scp breaks off once in a while, and WebDAV terminates the session. I didn’t try smb as I feel it's a rather weird protocol for the public internet. In the end, I figured it's not the networking per se, it's something with the timeouts on the remote, and I was able to finish the backup using a Hetzner-hosted server as a jumpbox.

    But it's cheap, yeah.

  • The Arc Browser Is Dead

    Jump

  • Isn’t kagi's point that they store very little about you to the point there no search history and you have to pay for the service provided?

  • Looking to upgrade my NAS need advice.

    Jump

  • That's not exactly true, synology doesn’t do anything you can’t access from an off the shelf linux (it's your usual mdraid and btrfs). But you better know what you’re doing if you go that route.

  • Selfhosted @lemmy.world
    farcaller @fstab.sh

    How to split short term and long term VictoriaMetrics storage

    farcaller.net /2024/how-to-split-short-term-and-long-term-victoriametrics-storage/
  • Selfhosted @lemmy.world
    farcaller @fstab.sh

    Self-hosted alternative to synology drive?

  • Fediverse @lemmy.world
    farcaller @fstab.sh

    I made a lemmy community directory