Dust0741

joined 2 years ago
[–] [email protected] 1 points 2 weeks ago

Yeah use something flatseal to mess with further securing flatpaks

[–] [email protected] 35 points 2 weeks ago (3 children)

Flatpaks do better sandboxing. So better then .deb's, but not better then using a web browser

 

Has anyone tried Saily? (https://saily.com/) It claims to be an app to easily setup international eSIMs.

I am curious about its setup process and the information they collect. Can you sign up without the app? How about the app on a separate user profile (android)? Do they require ID to signup (or similar)?

It is a part of NordVPN, which gives some confidence that it is not a scam, however Nord doesn't have a good reputation for privacy, but neither do SIM's in general.

Is it worth bothering with anything like Saily for travel, or does the tried and true pre-paid SIM's?

[–] [email protected] 117 points 3 weeks ago (50 children)

In what country can you get raided due to high electricity usage?

[–] [email protected] 2 points 3 weeks ago (1 children)

Don't get attached to phones.

[–] [email protected] 3 points 1 month ago (1 children)

I do this. Its great because of catchall emails and the ability to make one address per merchant. Then if a company leaks your email or gets hacked, you can simply change the email from [email protected] to [email protected] and block the old address.

It also is good for ownership as you said. If Tuta gets purchased by Google (for example), then you can simply pivot to any of the many other email providers and not rely on a company being not evil.

[–] [email protected] 15 points 1 month ago (1 children)

Renovate bot is the answer. I self host it. Feel free to ask questions

[–] [email protected] 1 points 1 month ago

I do. But only if I'm using Google search. Other than that I stay away from the Google homepage and all Google things

[–] [email protected] 4 points 1 month ago

Makes a PR in a repo for updated versions. I.e. you have: image: nginx:1 And it'll make a PR for the latest version

A CI/CD tool will monitor for changes like this and redeploy.

 

Are there any guides out there for this? I can't seem to find anything. Renovates docs are good, but don't have a lot of detail on setting up the docker image for self hosting.

Thanks!

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago)

It should be yea. Just make sure you pass the USB through (or whatever connection method) and TEST

I've had success using the normal apt package

 

I am currently using NPM as my reverse proxy. It runs on a Raspberry Pi which also does pihole. I have a separate server for other non internet critical systems.

So local IP address mappings point a subdomain to the pi's IP, then nginx points to the correct device and port.

I am wondering if Traefik works the same way. Can I run Traefik on the Pi, then point my other sever at it? (I believe Caddy doesn't allow this)

24
Secrets (lemmy.world)
 

I would like to migrate away from using .env for secrets, and use something hashicorp vault. How would one do this for something like pihole, where there is an env var with the password?

[–] [email protected] 7 points 2 months ago* (last edited 2 months ago)

Unfortunately you can get a secure phone OR that. No overlap.

Edit: maybe one day

[–] [email protected] 7 points 2 months ago

Markdown everything

 

With the latest release of android it now supports some Linux functionality. I got docker installed simply by following Docker's docs.

Any thoughts or uses for a mobile homelab? What would be useful to have mobile?

 

cross-posted from: https://lemmy.world/post/26434369

I want to compare the security of running my own:

  • Wireguard server
  • http proxy
  • socks5 proxy
  • Shadowsocks proxy

I currently port forward for wireguard, but would like some backups/alternatives, and censorship circumvention options. How risky or insecure are these protocols? Can I use them as normal VPNs into my homelab?

Any resources to research further?

Also: should I use my IP, or a domain? Which is better for censorship circumvention?

13
submitted 3 months ago* (last edited 3 months ago) by [email protected] to c/[email protected]
 

I want to compare the security of running my own:

  • Wireguard server
  • http proxy
  • socks5 proxy
  • Shadowsocks proxy

I currently port forward for wireguard, but would like some backups/alternatives, and censorship circumvention options. How risky or insecure are these protocols? Can I use them as normal VPNs into my homelab?

Any resources to research further?

Also: should I use my IP, or a domain? Which is better for censorship circumvention?

 

https://github.com/wg-easy/wg-easy

Plus

https://github.com/qdm12/gluetun

The idea being; I can use a normal wireguard VPN from anywhere in the world to connect back to my homelab, all while being able to access stuff on my network, but also have my public IP address set by the gluetun container?

Anyone done this? Or have a docker conpose?

 

I have a collection of my docker composes and configs. I would like to have the ability to remotely (over Tailscale) deploy and manage remote servers.

This isn't necessarily for redundancy, but I would like an automated way to test and deployments.

I want to make a seperate homelab at my parents that I can remotly manage for them. I have multiple servers at home, so having all of the config in a git repo, and having my secondary computer use the test branch would be super nice.

My ideal scenario:

So say I want jellyfin. I make a compose and config on the test branch. It automatically applies to my test server. Once I confirm it works, it goes to the master branch. Then it gets applied to the production servers.

Can this be done? If so, can Forgejo actions do it?

 

I am wanting to automate some homelab things. Specifically deploying new and updating existing docker containers.

I would like to publish my entire docker compose stacks (minus env vars) onto a public Git repo, and then using something to select a specific compose from that, on a specific branch (so I can have a physical seperate server for testing) automatically deploy a container.

I thought of Jenkins, as it is quite flexable, and I am very willing to code it together, but are there any tools like this that I should look into instead? I've heard Ansible is not ideal for docker compose.

 

Not torrenting, but searching.

I want a way to find similar media to the media I like.

Something with a similar to Jellyseer, with a way to browse media.

 

Is there a way to setup an SMB share or similar via docker? I want to be able to easily turn it off and bind it to a specific folder, and I am comfortable with docker.

Thanks!

view more: next ›