hperrin

@hperrin@lemmy.ca

This is a remote user, information on this page may be incomplete. View at Source ↗

⁨Comment⁩ on ⁨A Beautiful and Feature-rich Music & Video Player with Youtube Support, Built in Flutter⁩ ⁨⁨1⁩ ⁨day⁩ ago⁩:
My thoughts exactly. Except also these models that people use to code are going to go from around $50 a month to around $1000 a month. What kind of idiot is gonna pay $1000 a month to keep their pet slop up to date? Abandoned slopware is the inevitable conclusion of all these projects.
⁨Comment⁩ on ⁨Running web sites makes me not want to - Lowkey Party⁩ ⁨⁨2⁩ ⁨days⁩ ago⁩:
True.
⁨Comment⁩ on ⁨A Beautiful and Feature-rich Music & Video Player with Youtube Support, Built in Flutter⁩ ⁨⁨2⁩ ⁨days⁩ ago⁩:
AI slop pretending not to be AI slop.
⁨Comment⁩ on ⁨Running web sites makes me not want to - Lowkey Party⁩ ⁨⁨2⁩ ⁨days⁩ ago⁩:
I host tons of open source projects on forge.sciactive.com

Recently, it was getting absolutely hounded with tons of meaningless requests. I’m assuming they are just results of AI.

So, I put Anubis in front of it. Now images hosted there won’t load on other sites, people have to wait forever to see the code, and the experience on phones is even worse. Just because AI doesn’t respect anything, and the people who run it are too stupid to realize that.

This is why we can’t have nice things.
⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨5⁩ ⁨days⁩ ago⁩:
I’m not saying it is AI, I’m asking, since I can’t tell.
⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨5⁩ ⁨days⁩ ago⁩:
The commit messages do to me. Who writes commit messages like that?
⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨5⁩ ⁨days⁩ ago⁩:
Did you use AI at all while working on this?
⁨Comment⁩ on ⁨Arc Raiders devs Embark insist that using genAI for voice lines was necessary, as "actors would just go crazy if they had to read all of that"⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
There are even people who do it for fun.
⁨Comment⁩ on ⁨Arc Raiders devs Embark insist that using genAI for voice lines was necessary, as "actors would just go crazy if they had to read all of that"⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
“Actors would just go crazy if they had to do the exact same thing they’ve been doing for the past three decades.”
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
I can literally think of the XZ utils off the top of my head. That was nearly the most prolific supply side attack of all time, and it absolutely was in the Debian repos, signed by the Debian package maintainers. In a docker container, that attack wouldn’t have worked. It’s only when installed on bare metal.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
Oh yes. Sorry, I worded that poorly. Thank you for clarifying.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
I feel like your threat model is not realistic. It is way more likely that you will be running malicious and/or vulnerable code that was packaged appropriately by the actual package maintainer than for a CA compromise to allow an attacker to inject a malicious package during a MITM attack while retrieving an OCI image from a container repository.

Like, yes, you shouldn’t 100% trust your ISP or your DNS server, but if you’re that paranoid, you shouldn’t trust your distro’s repository either. You should be building everything from source.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
That’s because package managers are designed to use mirrors. You have to verify a digital signature because the package isn’t necessarily coming from the package maintainer’s repo.

Docker pulls come from the registry, not a mirror. There is no such thing as a mirror in docker. The registry is something you decide on, and if you don’t trust it, you shouldn’t use it. If the registry itself is compromised, that’s essentially like the private key of a package manager getting compromised. Same risk.

The two biggest registries are Docker Hub and GitHub. If either of them were compromised, it wouldn’t take very long for them to mitigate it. The damage would likely be very small.
⁨Comment⁩ on ⁨Total War: SHOGUN 2 - Complete Edition pulled from sale due to mass complaints⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
Absolutely love the part where he said they don’t use AI and then that they do use AI.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
Why do you say that? Docker Hub is, of course, susceptible to supply chain attacks, as are the official containers of each of these projects, but how is that all that different from installing these projects on bare metal? And how are any of them “extremely” vulnerable?

I didn’t suggest anything that isn’t either an official build from the project maintainers, or a very well supported community build from a reputable source.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:
Every once in a while, you should run these commands in each services folder:
```
docker compose pull
docker compose up -d

# check if everything is still good

docker system prune -a
```
You should also back up your services folder regularly. That’s beyond the scope of this Lemmy comment, though.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:
In NPM, set up an access list like this:

Image

Last one should be your public IP address, with “/32” on the end.

Use this access list for all services you don’t want the wider internet to see (probably all of them for you). With this setup, you can still open a service, if you want, but normally you’ll need to be on your VPN to see it from outside your house.
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:
From now on, whenever you set up a service, you’ll use a subdomain, and you’ll point it in dns as a CNAME record at your apex domain (usually just an @ symbol in the input box). You’ll then (if it’s a web service) create a proxy in NPM pointed at whatever port you give it.

So now you wanna create a WireGuard vpn, so you can securely access your own stuff from your own devices outside your house. (I’d recommend not opening every service up to the internet.)

github.com/linuxserver/docker-wireguard

That one can be tricky, but ultimately you should have a file (or QR code) that you can put on your phone in the WireGuard app that will give you vpn access. Remember to set up a CNAME for your subdomain (something like vpn.example.com). Although, for this, it would be fine to use the apex domain.

So now you can set up a Nextcloud and an Immich stack. Put them on an unused port, then point a proxy for their subdomain at that port (127.0.0.1:2201 or whatever), add your SSL cert, and you’re good.

[continued…]
⁨Comment⁩ on ⁨Beginner looking for advice on open-source NAS hardware and OS for self-hosting⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:
It sounds like you just wants Nextcloud and maybe Immich. So here’s my suggestion:

If you don’t have a domain yet, buy a domain. Preferably through Cloudflare because their API is good, and you’ll need that. Point an apex A record at your public IP address.

Set up something like Kubuntu on the box itself. Make sure it has a static IP address (you can also do DHCP reserved through your router, which is safer), and forward ports 80 (TCP), 443 (TCP), and 51820 (UDP) to that box.

Now comes the magic. Install docker through the official installation docs for Ubuntu (don’t use Ubuntu’s packages). Create a folder in your home directory called “services”. Inside this folder, you’re going to set up a folder for each service you need. The first one you should set up is “nginx-proxy-manager”. Inside each folder you’ll have a “docker-compose.yml” file. Inside that file, set up your docker compose stack. Nginx Proxy Manager’s is pretty simple. Just one service. But change the network mode to “host”, and remove the ports section.

nginxproxymanager.com/setup/

Now, from a terminal, in that folder, run docker compose up -d. Get used to that command, you’ll run it a lot. Then go to localhost:81, and create an account for NPM. Use a real email address, because that’ll be your contact email for Let’s Encrypy ssl. Go into the ssl settings and create a certificate. You’ll need an api key from Cloudflare, or whatever other place you bought your domain from. It needs access to change the dns settings for your domain. Use this format to create your certificate:

example.com, *.example.com

And use the dns challenge option where you’ll put your api key.

[continuing in next post]
⁨Comment⁩ on ⁨⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:
I had the same issue a while ago. :) I think the docs tell you to do it the way you had it, which is why it causes confusion.
⁨Comment⁩ on ⁨⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:
Just mount /dev/dri.
⁨Comment⁩ on ⁨A thumbnail generator for your backend.⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
Done! :)
⁨Comment⁩ on ⁨A thumbnail generator for your backend.⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:
If there’s only one file that’s AI generated, what should I tag it? Partially AI?
A thumbnail generator for your backend.hub.docker.com ↗
Submitted ⁨⁨4⁩ ⁨weeks⁩ ago⁩ to ⁨selfhosted@lemmy.world⁩ | ⁨5⁩ ⁨comments⁩
⁨Comment⁩ on ⁨Local Mastodon Instance⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:
This is not possible. The other servers need to be able to communicate with yours, and for that, yours needs a domain name.

If you only care about local users following other local users, and only other local users, then this is possible. But if you add remote users into the mix, you need to federate, and to federate requires a domain name.
⁨Comment⁩ on ⁨From feast to famine: Steam hardware reservations⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
I’m jelly.
⁨Comment⁩ on ⁨Microsoft quietly drops Copilot+ branding from its new laptops after two years — Surface CVP confirms new devices meet hardware requirements but lack controversial branding⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
Oh no, how will I know what to avoid now? Just kidding. The answer is anything with Windows.
⁨Comment⁩ on ⁨LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
I mean, near cost still wouldn’t be a good price, but there’s not a lot of advantage to sell it at a high price for them. Much less reason for anyone to buy into their VR ecosystem rather than Meta’s.
⁨Comment⁩ on ⁨LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
They did with the Steam Deck too. I don’t think Valve is worried about super-technical people. It’s if it’s easy enough for the everyday user to use it without Steam. The Machine is super easy to use without Steam, and it’s useful as a computer. A cluster of Frames wouldn’t be very useful.

At least that’s my take on it.
⁨Comment⁩ on ⁨LTT side channel Short Circuit has accidentally published their first 30 minutes with Steam Frame early.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:
They might sell it near cost, since the only practical way to use it is through Steam. I understand why they didn’t do that with the Steam Machine, because that’s very easy to use without Steam.