SavvyWolf

I connect to my server using ssh and use tmux as a persistent session. Configuration wise, I use NixOS and edit the config files directly on the server via emacs.

I use borg backup to a Hetzner storage box, which costs $5 a month.

For a gui interface, I’ve been using Pika backup.

Doesn’t Github give you Github Pages access for free?

My understanding is that they usually go for the sites that distribute the content now, rather than individuals. Having an open Jellyfin instance looks like the latter rather than the former.

People exfiltrating movies from your Jellyfin account sounds harmless until you get a knock on the door from the police asking why you’re running a piracy sharing site. Depending on the attacker’s level of access, they may also wonder why your server is now serving kiddie fiddling videos. Or maybe the attacker just replaces all your movie metadata images with ones from the Bee Movie.

To me at least, DOS and region locking should come after properly locking down public facing services. They aren’t 100% reliable at preventing intrusions.

I’d be surprised if there wasn’t a large difference between the power usage of a cpu at rest (like most servers will be) and one at full power. Especially if it had a gpu in it. They certainly sound a lot louder in my experience.

You can never be truly sure how bad a compromised system has been compromised, or even easily detect when it has happened. It could be running as part of a botnet, stealing your credentials or probing your local/mesh network.

In my eyes, competent cybersecurity abilities are an important part of selhosting which seems to fall by the wayside. It’s important to know exactly what your server is doing, what is running and who has access. If your system is on the public internet, you have a moral obligation to behave and not have it turn into a botnet or spam machine.

I think we should have an AI tag, and “not AI” should be the default (otherwise we add “non-” versions of every tag and post titles are a list of what something isn’t instead of what it is).

Imo, a lot of the tools here have a high security requirement. Either because they handle personal/private information and/or are exposed to the public internet. AI use is a red flag to me that the developer hasn’t properly considered all the security implications of their product.

Nextcloud. It does the job well enough.

I do not, and don’t plan to. Probably wouldn’t be that hard to set up though as someone familiar with nginx.

I guess Plex uses their own VPN under the hood then to make it more convenient?

Just out of interest as someone who has recently set up a Jellyfin server - what’s the main “value add” of using Plex compared to Jellyfin?

It seems to do everything I want, so I’m not sure why people would pay for Plex over the FOSS version.

One thing that jumps out at me reading the readme is the fact that it has a built in email server. Email is hard to get right, and I’m surprised a relatively young(?) project is working on getting all the moving pieces together rather than declaring it out of scope.

It’ll be interesting to see how it develops.

For friends that I know, they can just ask me and I’ll give them a login secret. I don’t have the headspace to manage fedidrama.

The problem with tools like this is that they don’t actually check that the mail is sent correctly. You can define security keys, but they don’t mean anything if your mail server doesn’t use them correctly.

For testing, I use https://www.mail-tester.com/ which you send an email to and it does more thorough tests on the server and email itself.

Doesn’t that cause issues if a backdoor happened a few months ago and you should be updating to a recent fixed version?

You need to watch out for hallucinations - you need to use brown glass rather than clear glass.

I’m not sure if it’s treating “localhost” as a hostname or not, but does replacing it with 127.0.0.1 function as expected?

Has Gitea even given any indication that they want to work on federation themselves?

Is this an allegedly “high performance” reverse proxy written in NodeJS? Uh… Yeah, good luck with that.

Also, how do they intend to protect against DDos attacks in a self-hosted environment with (presumably) a limited number of devices?

So what do we call these? Cordslop?

My main desktop is Mint - I feel like most of the random pieces of software I find myself wanting to run are built for Ubuntu or at the very least a lfh distro.

My server and random devices run NixOS, and I’m acrually considering combining all the config into a monorepo…

My Raspberry PI I think runs Raspbian though. I should see if I can nixify it.

Tweaking my various Nix configs feels good and satisfying.

… When it works, that is.