[Question] Manjaro, out of curiosity question, does the image on boot has any security implication regarding logoFAIL?

N0x0n · 30 mins ago

Ohh my bad !

N0x0n · 2 hours ago

Yeah and it depends. The fact that there is no easy way to search the fedi for similar posts right now is a bit cumbersome for sure.

I see a lot of new users post something that has already been answered a 10000x times (What’s the best Linux distro? It depends !) And luckily there’s always someone to give a mature and comprehensive answer to a new comer without scaring him or down voting him to oblivion. This shows that there are a lot of people who believe in Lemmy and are ready to repeat themselves to keep Lemmy alive and give new comers a warmly welcome ! However I have only seen that kind of interaction in the Linux/self-hosted communities… Most memes/ask Lemmy/political views/… Communities seems rather hostile on their own opinions and quickly become a cesspool of anger and hate :/.

Also a lot of people think because some communities have a lower user base they won’t get any answer or interaction I was quite surprised to get a comprehensive answer and help in the bash@lemmy.ml community which has only 50 users/month !

N0x0n · 2 days ago

Hi there ! Sorry my English is not that good, but I’m doing the best I can !

Actually, I do not have a VPS. I use an old spare laptop as server which handles everything.

I have Wireguard barebone installed with a a second external wireguard interface and some iptables to send all traffic to ProtonVPN.

All my containers,on the same laptop, are directly reachable via this configuration and HTTPS is handle by Treafik with my self-signed local certificates (root CA with intermediate CA).

Eg: From my mobile over WiFi or 4G I can access all my containers where ever I’m. My endpoint in my Wireguard’s confirguration (on my phone) being my home’s public IP.

I hope I answered your question? If not I’m willing to give you a diagram of my setup, this will probably clear up the confusion/question? And will probably be way more explicit than my broken English 😄.

N0x0n · 2 days ago

I heard everything and it’s contrary. But that’s more of a how many times/week you do it thing IMO.

I’m not a doctor or any specialist but rather on the safe side of things. It’s the dose that makes the difference. If you drink 5 liters of water in less than 1 min, it will probably kill you… But that doesn’t stop me drinking water every day.

And yes I can imagine all Nordic people doing it like 5 time a week? Is probably way to much… It also depends on other factors (genetics?).

Just my 2cent, don’t take it for granted.

N0x0n · 2 days ago

Probably what you’re looking for is the following setup:

docker <-> services <-> reverse proxy <-> VPN <-> Internet

Your next step is to chose a reverse proxy to handle your requests and serve your services on port 80 and port 443. There are several choice and you have to somehow stick with it, because each reverse proxy has it’s up and downsides and learning curve:

Treafik (that’s the one I use and is specifically made for containers)
Caddy (Never used it but heard only good things about it)
Nginx (this one is a beast to tame, however I heard it’s easier to setup with nginx proxy manager)

Those are the 3 big players I’m aware of.

You reverse proxy ready and functional you need something to access them outside your LAN. There are also several ways to achieve the same goal. The one I use and are happy with is to configure Wireguard on your server and only open the port needed to connect to it.

This is also a big part and probably this is the route of a tinkerer and have lot of personal time to spare… There are easier AIO routes that will probably save you time and energy. (Others will point you to the right direction)

Bonus tip

You will rapidly understand the necessity of DNS. Reaching out to your services by IP:PORT will annoy you over time, even if you save them as bookmarks. Also if you don’t assign a static IP to your containers they will change every time you restart them or reboot your server. Not very practical !!

Here you have 2 choices:

personal mini certificate authority (totally free and personal local domains but harder to setup)
cheap domain name with automatic certificate generation.

I personally chose the tinkerer route and learning process. But I have time to spare and while I prefer this route… It’s very time consuming and involves a lot of web crawling and books reading.

If you are interested I can recommend you a good ebook on how to setup your own mini-CA :).

Hope it helps, you are halfway through !

N0x0n · 3 days ago

That’s what a sauna is about !

A 20min session (10min/1min pause/10min) and jumping in cold water will give you a dizziness state, lay down and enjoy !

You will feel refreshed, new-born, all negativity drown away, no-invasive thoughts of your subconscious… Just a climax-feeling of peacefulness ! (Until you’re back to you 10-17 routine…)

Sauna sessions are awsome !

N0x0n · 7 days ago

Trying to add a direct path to files doesn’t work.

Dunno what’s wrong here, but I do add a files direct path to /etc/ssl into a docker container and works as expected.

I think It’s related to miniflux and have my self-signed certificate in its truststore to communicate with wallabag (inter-docker communication).

I can’t give you a snipped of my compose but will gladly edited my comment when home.

N0x0n · 9 days ago

I call it “paramecia”. But that’s just my personal way of calling it, without knowing the real original name !

Good to know though :)

N0x0n · 13 days ago

I hope this is a smooth release, I do not want to bork my EndeavourOS. It took so much time to customize it to my personal taste !!

N0x0n · 15 days ago

Yeah maybe I got so used to SSD’s that I can’t remember the leap between SSD’s and HDD’s.

An as you said the difference between M.2 isn’t that much of a difference in game. There probably lies my bias.

N0x0n · 15 days ago

Does it really make that of a difference? Sure I use SSD’s for a long time now but haven’t seen that much of a speed improvement over HDD’s in games. Even with a m.2, haven’t seen any improvement.

However data transfer speed is another story !

N0x0n · 15 days ago

Yep ! No-ads, no-sponsor, no-shit.

You even don’t need to self-host, just disable piped proxy, enable local extraction, use HLS and a good VPN.

Sure it’s not as anonymous and sometime I need to disable my VPN, but that’s only temporarily, until they find a new loophole in youtoube’s api.

That’s not piped nor invidious backend’s fault, just YouTube doing his cat and mouse thing…

N0x0n · 17 days ago

Thank you :)) ! I have the same question as @umbrella if your have any other insights to share !

how is varlink better than dbus to justify that change?

N0x0n · 17 days ago

Someone a short ELI ? I read the article and the comments… But I have no idea what this is about.

Maybe someone has an article that explains for someone not being educated as computer scientist ?

N0x0n · 17 days ago

Nobody ever talking about lychee ?

Yes okay it’s not GPL or written in a fancy new language (PHP is still alive xD). But it’s simple, elegant, no UX bloat, no ML or IA stuff… Just a plain simple self-hosted photo manager.

One thing I really liked about it, you can import you external photo’s with .xmp files, just one checkbox away.

The tag feature is simple but working as expected. Nothing fancy but it does best what’s it’s supposed to do !!

Call me old boomer but I really like the simplicity of lychee. It’s a bit like how reading an article from miniflux or wallabag… Simple html files without bloating your eyes or your brain…

Just my 2c, nothing to see here !