stratself

@stratself@lemdro.id

• ⁨Comment⁩ on ⁨what is a good self hostable alternative to facebook messenger⁩ ⁨⁨22⁩ ⁨hours⁩ ago⁩:

  Matrix, and I recommend selfhosting Continuwuity as it is lightweight and easy to spin up. Your other option could be XMPP with Snikket or proper Prosody.

  Though do you have any particular features you wanna bring over from Facebook Messenger?

• ⁨Comment⁩ on ⁨what is a good self hostable alternative to facebook messenger⁩ ⁨⁨22⁩ ⁨hours⁩ ago⁩:

  Gomuks and Sable

• ⁨Comment⁩ on ⁨Self-hosting matrix server on Raspberry Pi 4 next to Navidrome and Jellyfin⁩ ⁨⁨6⁩ ⁨days⁩ ago⁩:

  Pihole would be easy for a RPi 4. I’d also consider AdGuard Home which does the same thing, but has out-of-the-box support for encrypted upstream resolvers. I eventually moved on to Technitium for more advanced use cases (hosting my own domains, native config syncing between nodes), albeit it can use a bit more RAM.

• ⁨Comment⁩ on ⁨Self-hosting matrix server on Raspberry Pi 4 next to Navidrome and Jellyfin⁩ ⁨⁨6⁩ ⁨days⁩ ago⁩:

  Hi, as someone running their Matrix server on the same ware (using Continuwuity I have some thoughts:

  • The bulk of the load is in federation with other homeservers. If you only run it in non-federated mode the resource usage would be minimal like a simple REST API server.
    • If you do enable federation on such a low powered device, consider performance tuning it. DNS tuning is the most essential one, and then you should allow it to use some more RAM than normal (increasing cache capacity)
    • Also if you enable federation, expect it to be the software with the most resource impact. I think usually Jellyfin and Navidrome only uses CPU when you’re streaming something, but Matrix may do a lot more background work because federation and so on.
  • Calls are handled by a separate LiveKit SFU, which uses WebRTC for most of its operations rather than HTTPS. So you cannot expose it using Cloudflare Tunnels, and you may run into issues forwarding/routing a large number of UDP ports as well.
    • I usually recommend renting a VPS for Livekit instead for simpler config and networking. But if you somehow get it working on the Pi itself as well it’d be great to know.
  • I used mautrix-whatsapp a long time ago for the bridge. It was good enough, but do note that it is just a stopgap solution to prevent social isolation. Its better to eventually move people to federated protocols.

  I’d also like to say you’d get much more juice out of a mini PC or some other non-embedded devices like a used laptop. This is for all your apps anyways.

  And yes, Continuwuity can run in docker compose. There’s a few example files for it on the site, feel free to check it out and ask in the support room.

• ⁨Comment⁩ on ⁨Self-Hosting a DNS Sinkhole is really important⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I’d prefer Adguard Home. Does the same thing but also supports encrypted DoT/DoQ/DoH upstreams. And the UI looks a bit neater for me

• ⁨Comment⁩ on ⁨ISP won't set up static IP - Services keep going down⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Since nobody mentioned, I recommend desec.io as the DNS provider. Has a good REST API to update records, also provides a dedyn.io dynamic domain, and runs as a nonprofit. I think ddclient will also support it natively in the next release as well.

  The solution of renting a VPS also works but usually incurs some cost. You might also want to look into Cloudflare Tunnels

• ⁨Comment⁩ on ⁨Dedicated admin account or normal privileged users?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Hi all, thanks again for the valuable insights, I really appreciate your comments. I realized I’ve overlooked a few topologies, namely that of having granular accounts for different admining purposes/different services (and using different names for them). Also, my IDP (Kanidm) also has a service accounts feature which can be delegated to real human accounts, so I think I should also be looking into that.

  It’d be nice to have something like a “second password” for granting temporary privileged access to other apps’ admin commands, but OIDC doesn’t work this way sadly. Lastly I’d also need to consider managing SSH and non-app stuff as well.

• Dedicated admin account or normal privileged users?
  Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ to ⁨selfhosted@lemmy.world⁩ | ⁨15⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨Advice on double-identity server architecture and finding relevant resources to learn?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Hi, I’ve been running something similar with Tailscale. Instead of traefik, you can use any other TCP proxy like nginx or caddy-l4, or even use tailscale serve on the edge VPS as well. Do note that all of your listed services except Zola will make outbound requests, so it could be better to also exit node through the VPS (like the article did), as to avoid exposing your residential IP.

  As for the linked personas, you may wanna use one domain instead of two. Matrix homeservers can be resource-heavy for example, so maybe consider @persona1:example.com and @persona2:example.com on a single server instead of having two resource hubs that does essentially the same thing. The same applies to GotoSocial and Lemmy. By the way, I recommend Continuwuity for the Matrix server :)

  Static sites don’t actively take up resources, so they can be on separate domains. But again you may wanna save some money, so maybe consider using persona1/persona2.example.com subdomains, or even pubnix-style example.com/~persona(1|2) paths!

  As for the Docker management frontend, I have no idea which one’s the best right now 😅 but do make use of Tailscale SSH feature to troubleshoot other parts of your machines as well. And as for updates, I just subscribe to RSS feeds to keep the important software updated. Highly recommend you do that too to check out changelogs yourself.

• ⁨Comment⁩ on ⁨What do you use for alerting?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Thanks for the link to go-sendxmpp. It’s nice to have an xmpp-native way to send notifications

• ⁨Comment⁩ on ⁨Anyone using 6-day certs yet?⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  I think they encourage that increased frequency by offering shortlived certs to begin with…

  Although do note that normal certificates will reduce its lifetime to 45 days over the next few years

• Anyone using 6-day certs yet?
  Submitted ⁨⁨3⁩ ⁨weeks⁩ ago⁩ to ⁨selfhosted@lemmy.world⁩ | ⁨29⁩ ⁨comments⁩