Mikelius

Never heard of chatto until this one… Anyone here tested it vs fluxxer and have any opinions?

My front yard takes over an hour with a push mower and the terrain is too complex for a ride mower. I’d be curious if I’d be the exception, unless the robot mowers are terrible at landscape changes like a robot vacuum would be. Including some boulders… But maybe still cheaper to hire some kid if I get that far on the lazy scale.

This is exactly how my network is setup. All devices log to my syslog server which I feed into a database with a self made python app, and Grafana goes from there. It’s been running nonstop for like 5 years without any problems, so I’d say your in the right path!

It’s also helped me catch things like:

• finding out android leaked IPs outside VPN tunnels on connect (prior to headlines claiming this)
• finding out nslookup on termux ignores the phone’s DNS settings and tries to use Google instead
• finding other devices that ignore my DNS server settings
• noticing that my work Mac will turn itself on in some weird silent passive mode in the middle of the night to try and send data to apple (sleep or powered off don’t matter) - caught this from the logs sent by my router

I’ve just use iptables rules which default block all docker containers any network access. I assign static ranges to those I permit access, though. It does occasionally throw me off when adding new services and not understanding why sometimes they don’t work right away, but I prefer it that way.

Having a smart tv doesn’t mean you must use internet to utilize it. Mine is blocked from internet connectivity but connects to my media server on the local network. If anything, I prefer this so I don’t need an extra computer sitting in the living room and can instead use the same single media server my phones and computers do.

I bought a separate laptop and set it up with an encrypted password that both my wife and I know. It contains instructions on everything from my self hosted stuff to anything else related to my personal life that she would need. It’s 100% offline to keep it safe from a network compromise. This whole thing was especially important since I wanted to make sure my family could access all photos, calendar, contacts, etc for the last decade that are stored on my server.

It takes time to transfer everything to it (all in Obsidian) since it’s a brain dump… But it actually benefits me too. I’ve had a few times where I was like “how the hell did I set that up?” and had some instructions on there the helped lol.

Definitely recommend this to others to consider.

Interesting, I’ve never had this problem and have been using the auto upload for many years. I only use it for the photo taking, though. Any time I go through a phone cleanup and delete photos and videos, I’ll look at the folders I backup to on nc and actually go through them carefully to make sure everything was uploaded.

My install comes from f-droid so not sure if that’s something to do with it (unless yours is too).

I’ve got it setup automated on all my external domains, but trying to automate it on my internal-only domain is rather tedious since not only do I NOT want to open a port for it to confirm, but I have 2 other devices/services on the network not behind my primary reverse proxy that share the same cert.

What In need to do is setup my own custom cron that hits the hosting provider to update the DNS txt entries. Then I need to have it write and restart the services that use the cert. I’ve tried to automate this once before and it did not go so smoothly so I’ve been hesitant on wasting time to try it again… But maybe it’s time to.

What would be ideal is if I could allow it to be automated just by getting a one time dns approval and storing a local private/public key to prove to them that I’m the owner of the domain or something. Not aware of this being possible though.

I’d hesitate disabling it altogether, unless you’re absolutely certain nothing will need it. One suggestion I haven’t seen mentioned is looking at the other sysctl options that might be tweaked. Check with netstat how many of those connections are stuck in established, close wait, time waiting, etc. It’s possible you just need to lower the default values of things like nf_conntrack_tcp_timeout_established, for example. https://www.kernel.org/doc/html/latest/networking/nf_conntrack-sysctl.html - naturally, research anything you think you might want to change before you do.

I have forks that are updated every night through a cron for these very reasons. But I didn’t ever set it up for Android apps… Time to fork a whole lot more projects. sigh

Daily on my Gentoo server, through a Cronjob every morning. It’s a custom script though, so there’s more than just doing an emerge update. It’ll send me ntfy notifications for the update results, if there are new news items, and if there are any time config merge updates to make. A few other things as well but that’s the main stuff.

Other servers, typically weekly or only manually when I ssh into them (for the ones I don’t really feel the need to update frequently).

Man, we just can’t win with these UI tools, I also thought Bruno was the solution. Only use it on my work machine so that’s why I guess I never noticed this. Thank you for sharing, time to go back to digging for better alternatives.

I’m honestly… In the middle.

My home network is covered by a VPN, which means I can’t use streaming services without punching a hole for my home IP and sacrificing a little privacy - which I’m not willing to do. I’ve gone through my part and contacted providers to lemme through, without success. Even Amazon who CLEARLY knows my name and mailing address still won’t let me watch things even if I own Prime…

So yes, I pirate movies and tv shows. I’ve tried to cooperate, but if my money isn’t enough, then so be it.

Video games I no longer pirate, I’m content with Steam. I also backup all my installs on an external hard drive in the unlikely event Steam goes under or a company demands pulling a game from my profile.

This is no longer true for Nintendo. Their latest attitudes have resulted in me deleting my account and becoming a loyal pirate for Nintendo games. They literally turned me into what they’re fighting, ironic right?

I also no longer pirate general software because 98% of the software I use are FOSS, self created, or just free+offline in general. The other 2% is software I purchased because it was a lifetime permanent license and for software I felt deserved the money for support.

So yeah big tech is my main enemy. If I need something and they won’t work with me without ransoming my privacy and rights, then yeah so be it.

I’m not familiar with those two… But I’ve always been hunting for the perfect replacement.

I started with Nextcloud Deck and used it extensively until they got rid of my markdown support.

So then I tried taiga and a few others before landing on Wekan. Really great software, but the terrible API, horrible mobile support, and slow outdated UI drove me away…

Now I’m on Vikunja, which ironically doesn’t support markdown text. So I basically returned to square 1 with a better UI lol. I almost stayed on Wekan because of the checklist support, but the faster speeds, nice API, and slick UI in vikunja landed me here… for now.

I’ve been using “passwords” on nextcloud for a few years now. Minimal issues with the app, moving apps, and browser extensions. Not perfect, but hey it’s self hosted and reliable.

My personal advice, secure it down to only permitting what needs it, regardless of your trust to the network.

Treat each device as if they’ve been compromised and the attacker on the compromised device is now trying to move laterally. Example scenario: had you blocked all devices except your laptop or phone to your server, your server wouldn’t have been hacked because someone went through a hacked cloud-connected HVAC panel.

I lock down everything and grant access only to devices that should have access. Then on top of that, I enable passwords and 2FA on everything as if it were public… Nothing I self host is public. It’s all behind my network firewall and router firewall, and can only be accessed externally by a VPN.

Yeah, in my example, I have various genres of music I listen to and some days I’m in the mood for one and not another. Some of those might have subgenres I am in the mood to listen to. For example: Metal might break into subfolders called black metal, thrash metal, melodic metal, etc. Based on where I feel they belong the most. If I’m in the mood for some melodic metal today, I’ll go there. Or EDM, I’ll have a folder for Psytrance, another for House, etc…

Rather than trying to edit the metadata on thousands and thousands of files every time I change media systems as I’ve done over these years, it’s 100x simpler for me to just navigate to the folders directly and not care about how the system “wants” to organize it. Every media system wants to organize differently and I’m kind of tired of having to spend hours editing all my music just to get it to organize the way that works for me, so that’s where I’ve gotten to the point of just using folder structures.

I could never get Plex to work the way I wanted it to, so I’m actually someone who moved to Kodi and then to Emby. Once I got into Emby, I’ve yet to leave it. My biggest problem now is that I want to leave it for Jellyfin, but the lack of many things I love about Emby have never been moved to Jellyfin.

For example, I have a very specific organization of my music libraries I use to navigate what I want to listen to much quicker, since I’m into all kinds of genres of music. Emby allows me to navigate by folder structure, so if I’m in the mood for heavy metal one day, go to that folder. If classical another day, go there. Jellyfin on the other hand didn’t have folder structure view and even though it’s one of the top requested features for the past few years when I last checked, it’s never been added…

I think the day Jellyfin does fill in these gaps, assuming new ones aren’t introduced due to Emby also improving, I’ll finally jump over.

I guess to the original topic, I do think Jellyfin exceeds Plex though lol.

Plus 1 to Venstar. Got myself the T7900 and even though it offers internet access, I just blocked it at my router and connected it to the network, controlling it through home assistant. No need for third party access and whatnot with it since it’s completely local.

Raid 1 has saved my server a couple of times over from disaster. I make weekly cold backups, but I didn’t have to worry about it when my alert came in notifying me which drive went dead - just swap, rebuild, move along. So yeah I’d say it’s definitely worth it. Just don’t treat raid as a backup solution - and yes, continue to use an external cold storage backup solution as you mentioned. Fires, exploding power supplies, ransomware, etc don’t care if you’re using raid or not.