Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M

maiskanzler

@ maiskanzler @feddit.de

Posts
3
Comments
44
Joined
3 yr. ago

  • Cloudflare is bad. Youre right.

    Jump

  • Oh neat! That looks like a perfect fit for me! I saved your post and will come back to it once the biyearly "just f*ing fo it again" motivation hits me once more :D

  • Cloudflare is bad. Youre right.

    Jump

  • Yes, I do loose the origin IP and I'm a little bugged by it. It also means that ALL traffic incoming on a specific port of that VPS can only go to exactly ONE private wireguard peer. You could avoid both of these issues by having the reverse proxy on the VPS (which is why cloudflare works the way it does), but I prefer my https endpoint to be on my own trusted hardware. That's totally my personal preference though.

    I trust my VPS provider to not be interested enough in my data to setup special surveillance tooling for each and every possible software combination their customers might have. Cloudflare on the other hand only has their own software stack to monitor and all customers must adhere to it. It's by design much easier for them to do statistics or snooping.

  • Cloudflare is bad. Youre right.

    Jump

  • I am using the smallest tier VPS from IONOS for 1€/month. Good, reliable and trustworthy as it is a subsidiary of 1&1 telecommunications.

  • Cloudflare is bad. Youre right.

    Jump

  • Rent a VPS, point DNS to it, have it act as central wireguard peer and connect your server(s). Then bridge incoming traffic to server via socat or firewall rules. Done

  • Cloudflare is bad. Youre right.

    Jump

  • Sure it's easy to set up, but the same behaviour is what I get with my handrolled solution. I rent a cheap VPS with a fixed IP solely for forwarding all traffic through wireguard. My DNS entries all point to the VPS and my servers connect to the VPS to be reachable. It is absolutely network agnostic and does not require any port shenanigans on the local network nor does it require a fixed IP for the internet connection of my home server.

    Data security wise the HTTPS terminates on my own hardware (homeserver with reverse proxy) and the wireguard connection is additionally encrypted. There are no secrets or certificates on the rented VPS beyond the bare minimum for the wireguard tunnel and my public key for SSH access.

    Shuttling the packets on the VPS (inet to wireguard) is done by socat because I haven't had the will or need to get in the weeds with nftables/iptables. I am just happy that it works reliably and am happy to loose some potential bandwidth to the kernelspace/userspace hoops.

  • What do I think about Lua after shipping a project with 60,000 lines of code? - Interview with lead programmer of the video game Craftomation 101.

    Jump

  • Coming from Rust I am toying around with Lua at the moment. Lua is a small, simple and I would say a very neat language. But for big projects like an entire game I would personally much prefer a "traditional" compiled language like C/C++, Java/C# or Rust. Scripting langs are great for small scopes, but they quickly become a burden for bigger things in my opinion.

  • Light system monitor service with Home Assistant integration

    Jump

  • There's prometheus node exporter which can collect such data from several hosts. You can hook it up with Grafana for neat dashboards and I'm almost sure it also integrates with Homeassistant.

  • Removed

    Ubuntu 24.04 LTS is so buggy you can't install the OS [video]

    Jump

  • But I like to use Btrfs on top of LUKS and more often than not it's not an option.

  • How to display a symbol similar to the undervoltage symbol on raspberry pi

    Jump

  • Does it have to be an overlay or would a regular notification that pops up suffice? Those may be quite easy to write fir your chosen DE.

  • Vim Lands XDG Base Directory Specification Support

    Jump

  • This is pretty verbatim.

  • My Overconfidence Killed Me and My Immich Installation

    Jump

  • What? I've never had the feeling that nextcloud assumes that. Are you using a special all-in-one docker image? Because I am using the regular one and pair it with db, redis etc. containers and am absolutely happy with it.

  • non-Euclidean filesystem

    Jump

  • Your btrfs snapshots are possibly counted separately by all the regular tools. They simply go into every directory they can find and add up the size of the files they see. They do not care if they are looking at an identical snapshot of the folder next to them, they simply add it all up.

    Use sudo btrfs filesystem show (and maybe add a path behind it, I am not sure). That will give you the true usage.

  • Linux on an 8-bit micro? - Dmitry.GR

    Jump

  • That site is a gold mine!

  • Offline alternatives to Roku / Streaming boxes

    Jump

  • Maybe get a reputable one, the other ones are sadly malware infected in way to many cases. It's a way for the manufacturer to make an extra buck from the sale.

  • What do I need to separate devices to its own no-internet network and still be able to communicate with within the house and outside? (Diagram provided)

    Jump

  • If you have an AVM Fritz!Box home router you can simply create a new profile that disallows internet access and set the devices you want to "isolate" to that profile. They will be able to access the local network and be accessed by the local network just fine, but they won't have any outgoing (or incoming) connectivity.

  • Using Termux on Android for Self Hosting? Yes, really. – The Thin Computer

    Jump

  • If only modern kernels weren't a problem. I wish you could just install new OSs like on PC.

  • Found on Wikipedia

    Jump

  • It's probably also highly automated and the staff's job is just to watch for irregularities and alert the necessary teams.

  • Backblaze B2 vs other storage providers to store legally ripped media

    Jump

  • I've used restic before and it worked great with OVH's object storage. Moved away from cloud backups because of the cost though.

  • Europe needs to revive its mining sector

    Jump

  • That all sounds great, but it's hard to mine the stuff we do no not have. We can either extract from less rich souces at a price at least one order of magnitude more expensive and subsidize that, or buy it cheap from elsewhere. There's an argument to be made for keeping a small local production going to prevent the worst case, but it'll be expensive nonetheless and won't significantly reduce the reliance on ressource-rich countries.

  • Selfhosted @lemmy.world
    maiskanzler @feddit.de

    Anyone using rustic?

    github.com /rustic-rs/rustic
  • Memes @lemmy.ml
    maiskanzler @feddit.de

    cheers to that

  • Memes @lemmy.ml
    maiskanzler @feddit.de

    True intimacy