hperrin
@hperrin@lemmy.ca
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 6 hours ago:
Why do you say that? Docker Hub is, of course, susceptible to supply chain attacks, as are the official containers of each of these projects, but how is that all that different from installing these projects on bare metal? And how are any of them “extremely” vulnerable?
I didn’t suggest anything that isn’t either an official build from the project maintainers, or a very well supported community build from a reputable source.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 22 hours ago:
Every once in a while, you should run these commands in each services folder:
docker compose pull docker compose up -d # check if everything is still good docker system prune -a
You should also back up your services folder regularly. That’s beyond the scope of this Lemmy comment, though.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 23 hours ago:
In NPM, set up an access list like this:
Last one should be your public IP address, with “/32” on the end.
Use this access list for all services you don’t want the wider internet to see (probably all of them for you). With this setup, you can still open a service, if you want, but normally you’ll need to be on your VPN to see it from outside your house.
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 23 hours ago:
From now on, whenever you set up a service, you’ll use a subdomain, and you’ll point it in dns as a CNAME record at your apex domain (usually just an @ symbol in the input box). You’ll then (if it’s a web service) create a proxy in NPM pointed at whatever port you give it.
So now you wanna create a WireGuard vpn, so you can securely access your own stuff from your own devices outside your house. (I’d recommend not opening every service up to the internet.)
github.com/linuxserver/docker-wireguard
That one can be tricky, but ultimately you should have a file (or QR code) that you can put on your phone in the WireGuard app that will give you vpn access. Remember to set up a CNAME for your subdomain (something like vpn.example.com). Although, for this, it would be fine to use the apex domain.
So now you can set up a Nextcloud and an Immich stack. Put them on an unused port, then point a proxy for their subdomain at that port (127.0.0.1:2201 or whatever), add your SSL cert, and you’re good.
[continued…]
- Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting 23 hours ago:
It sounds like you just wants Nextcloud and maybe Immich. So here’s my suggestion:
If you don’t have a domain yet, buy a domain. Preferably through Cloudflare because their API is good, and you’ll need that. Point an apex A record at your public IP address.
Set up something like Kubuntu on the box itself. Make sure it has a static IP address (you can also do DHCP reserved through your router, which is safer), and forward ports 80 (TCP), 443 (TCP), and 51820 (UDP) to that box.
Now comes the magic. Install docker through the official installation docs for Ubuntu (don’t use Ubuntu’s packages). Create a folder in your home directory called “services”. Inside this folder, you’re going to set up a folder for each service you need. The first one you should set up is “nginx-proxy-manager”. Inside each folder you’ll have a “docker-compose.yml” file. Inside that file, set up your docker compose stack. Nginx Proxy Manager’s is pretty simple. Just one service. But change the network mode to “host”, and remove the ports section.
Now, from a terminal, in that folder, run
docker compose up -d. Get used to that command, you’ll run it a lot. Then go to localhost:81, and create an account for NPM. Use a real email address, because that’ll be your contact email for Let’s Encrypy ssl. Go into the ssl settings and create a certificate. You’ll need an api key from Cloudflare, or whatever other place you bought your domain from. It needs access to change the dns settings for your domain. Use this format to create your certificate:example.com, *.example.comAnd use the dns challenge option where you’ll put your api key.
[continuing in next post]
- Comment on 3 days ago:
I had the same issue a while ago. :) I think the docs tell you to do it the way you had it, which is why it causes confusion.
- Comment on 4 days ago:
Just mount
/dev/dri. - Comment on A thumbnail generator for your backend. 1 week ago:
Done! :)
- Comment on A thumbnail generator for your backend. 1 week ago:
If there’s only one file that’s AI generated, what should I tag it? Partially AI?
- Submitted 1 week ago to selfhosted@lemmy.world | 5 comments
- Comment on Local Mastodon Instance 2 weeks ago:
This is not possible. The other servers need to be able to communicate with yours, and for that, yours needs a domain name.
If you only care about local users following other local users, and only other local users, then this is possible. But if you add remote users into the mix, you need to federate, and to federate requires a domain name.
- Comment on From feast to famine: Steam hardware reservations 3 weeks ago:
I’m jelly.
- Comment on Microsoft quietly drops Copilot+ branding from its new laptops after two years — Surface CVP confirms new devices meet hardware requirements but lack controversial branding 3 weeks ago:
Oh no, how will I know what to avoid now? Just kidding. The answer is anything with Windows.
- Comment on LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early. 5 weeks ago:
I mean, near cost still wouldn’t be a good price, but there’s not a lot of advantage to sell it at a high price for them. Much less reason for anyone to buy into their VR ecosystem rather than Meta’s.
- Comment on LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early. 5 weeks ago:
They did with the Steam Deck too. I don’t think Valve is worried about super-technical people. It’s if it’s easy enough for the everyday user to use it without Steam. The Machine is super easy to use without Steam, and it’s useful as a computer. A cluster of Frames wouldn’t be very useful.
At least that’s my take on it.
- Comment on LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early. 5 weeks ago:
They might sell it near cost, since the only practical way to use it is through Steam. I understand why they didn’t do that with the Steam Machine, because that’s very easy to use without Steam.
- Comment on LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early. 5 weeks ago:
Maybe they’re talking about foviated streaming in particular?
- Comment on Laser Guy is a twin-stick "anti-shooter" about a stressed out game developer who can't stop shooting laser beams from his eyes 1 month ago:
That’s crazy. I had a really similar idea a while ago. Mine was trying to go buy some milk but you can’t stop shooting lasers everywhere you look. Glad somebody made it. :)
- Comment on Steam Machine - Waitlist only 3 weeks? 1 month ago:
I’ve been on the waitlist for the 512 with controller since shortly after it was announced, and I just got my invitation a few days ago. Now I’m waiting got shipment. I’d guess it’s easier for them to procure the 512s.
- Comment on 35th Anniversary of Linus' announcement today! 1 month ago:
I don’t know if I would call Linux the most professional, but it’s definitely the biggest.
- Comment on "Expect fake messages": A load of Steam user personal info has been stolen thanks to a cyberattack on one of Valve's partners, claims report 2 months ago:
I use Port87, so I’ll just block that address and give Valve a new one. If your email doesn’t have a feature like this, you need a new email.
- Comment on America’s largest newspaper chain, USA Today Co., partners with Palantir to analyze audience data as search traffic falls 2 months ago:
Really glad I just deleted their app off my phone.
- Comment on Samsung, who've been accused of worsening the RAM crisis via price fixing, reckon components will only get more expensive in 2027 2 months ago:
Why not just enlist people into 7 years of voluntary servitude if they want a single RAM chip? Cuts out the middle man.
- Comment on Samsung, who've been accused of worsening the RAM crisis via price fixing, reckon components will only get more expensive in 2027 2 months ago:
They have been.
- Comment on Rideshare "Stimulator" is an Uber driver sim set in a city full of weirdos that I'm hoping is satirical enough to pull the concept off 2 months ago:
Crazy Taxi was a thing in 1999. And yes, it’s a fantastic concept.
- Comment on Microsoft’s Edge Copilot update uses AI to pull information from across your tabs 5 months ago:
“Yep, that’s exactly what I wanted my browser to do.”
- Nobody
- Comment on [deleted] 5 months ago:
173?? Really? They sold that few of them?
- Comment on All my FOSS video games can now run on any hardware with a monitor 5 months ago:
I would love to see that.
- Comment on All my FOSS video games can now run on any hardware with a monitor 5 months ago:
Can they run on an electronic highway traffic sign?
- Comment on Steam Controller early review leak claims $99 launch price 5 months ago:
It looks like it, yes. Their source code references:
https://videocardz.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1Which is a Wordpress url.
It’s not proof, but it’s pretty strong evidence.
