[-] Lem453@lemmy.ca 5 points 1 day ago

For people wanting the a very versatile setup, follow this video:

https://youtu.be/liV3c9m_OX8

Apps that are accessed outside the network (jellyfin) are jellyfin.domain.com

Apps that are internal only (vaultwarden) or via wireguard as extra security: Vaultwarden.local.domain.com

Add on Authentik to get single sign on. Apps like sonarr that don't have good security can be put behind a proxy auth and also only accessed locally or over wireguard.

Apps that have oAuth integration (seafile etc) get single sign on as well at Seafile.domain.com (make this external so you can do share links with others, same for immich etc).

With this setup you will be super versatile and can expand to any apps you could every want in the future.

[-] Lem453@lemmy.ca 3 points 1 day ago

The same as for anything else if your phone gets stolen. You restore from backups.

Aegis allows you to make a backup that you can keep yourself on your computer, your own cloud storage etc.

Every OS has some kind of built in vault/encryption feature. Put the file in there. It only needs to be updated when you add another 2fa account (so very infrequently)

[-] Lem453@lemmy.ca 8 points 2 days ago* (last edited 2 days ago)

Don't use cloud based 2fa and you won't need to wonder about this.

Aegis is one of several opensource 2fa apps you can use instead.

[-] Lem453@lemmy.ca 4 points 2 days ago

Not using cloud based 2fa which is dumb to begin with

[-] Lem453@lemmy.ca 3 points 2 days ago

Does anyone know if dockge allows you to directly connect to a git repo to pull compose files?

This is what I like most about portainer. I work in the compose files from an IDE and the check them into my self hosted git repo.

Then on portainer, the stack is connected to the repo so only press a button to pull the latest compose and there is a check box to decide if I want the docker image to update or not.

Works really well and makes it very easy to roll back if needed.

[-] Lem453@lemmy.ca 6 points 2 days ago

Bitwarden let's you upload files (key files) and save all you passwords.

[-] Lem453@lemmy.ca 48 points 3 days ago

Use aegis, export the keys and then reimport them every time you switch. Trusting your second factor to a cloud is a disaster waiting to happen.

If you want to get fancy setup your own cloud server (nextcloud, Seafile, owncloud etc) and set the backup folder for aegis to the self hosted cloud for easy restore every time you switch ROMs.

[-] Lem453@lemmy.ca 3 points 3 days ago

Ya I'm using the English 79 model (not the default) voice on a pixel 8 and it works very well.

[-] Lem453@lemmy.ca 9 points 4 days ago

If you really want to be pedantic you could setup raid 1+0 or 5 and live the true RAM hot swapping life

[-] Lem453@lemmy.ca 2 points 4 days ago

FWIW collabora and open office can integrate with other clouds like Seafile and owncloud Infinite scale. So even without NextCloud it can be used. It can also be used stand alone.

[-] Lem453@lemmy.ca 1 points 4 days ago

It's not easy but they only way to make it all work without creating massive security holes is to only buy things that allow connection with open standards (which means home Assistant can connect to it.

[-] Lem453@lemmy.ca 5 points 5 days ago

The correct way of doing this is to never interact with an iot device directly. Put all of them on the same network with Home Assistant and then control all of them only via Home Assistant. Then you make one exception for home assistant to be accessible to the other networks.

This also allows you to disable Internet access for every single iot device Except home assistant.

139
submitted 1 week ago* (last edited 1 week ago) by Lem453@lemmy.ca to c/selfhosted@lemmy.world

The topic of self-hosted cloud software comes up often but I haven't seen anyone mention owncloud infinite scale (the rewrite in Go).

I started my cloud experience with owncloud years ago. Then there was a schism and almost all the active devs left for the nextcloud fork.

I used nextcloud from it's inception until last year but like many others it always felt brittle (easy to break something) and half baked (features always seemed to be at 75% of what you want).

As a result I decided to go with Seafile and stick to the Unix philosophy. Get an app that does one thing very well rather than a mega app that tries to do everything.

Seafile does this very well. Super fast, works with single sign on etc. No bloat etc.

Then just the other day I discovered that owncloud has a full rewrite. No php, no Apache etc. Check the github, multiple active devs with lots of activity over the last year etc. The project seems stronger than ever and aims to fix the primary issues of nextcloud/owncloud PHP. Also designed for cloud deployment so works well with docker, should be easy to configure via docker variables instead of config files mapped into the container etc.

Anyways, the point of this thread is:

  1. If you never heard of it like me then check it out
  2. If you have used it please post your experiences compared to NextCloud, Seafile etc.
49
submitted 1 month ago* (last edited 1 month ago) by Lem453@lemmy.ca to c/selfhosted@lemmy.world

Technically this isn't actually a seafile issue, however the upload client really should have the ability to run checksums to compare the original file to the file that is being synced to the server (or other device).

I run docker in a VM that is hosted by proxmox. Proxmox manages a ZFS array which contains the primary storage that the VM uses. Instead of making the VM disk 1TB+, the VM disk is relatively small since its only the OS (64GB) and the docker containers mount a folder on the ZFS array itself which is several TBs.

This has all been going really well with no issues, until yesterday when I tried to access some old photos and the photos would only load half way. The top part would be there but the bottom half would be grey/missing.

This seemed to be randomly present on numerous photos, however some were normal and others had missing sections. Digging deeper, some files were also corrupt and would not open at all (PDFs, etc).

Badness alert....

All my backups come from the server. If the server data has been corrupt for a long time, then all the backups would be corrupt as well. All the files on the seafile server originally were synced from my desktop so when I open the file locally on the desktop it all works fine, only when I try to open the file on seafile does it fail. Also not all the files were failing only some. Some old, some new. Even the file sizes didn't seem to consistently predict if it would work on not.

Its now at the point where I can take a photo from my desktop, drag it into a seafile library via the browser and it shows successful upload, but then trying to preview the file won't work and downloading that very same file back again shows the file size about 44kb regardless of the original file size.

Google/DDG...can't find anyone that has the same issue...very bad

Finally I notice an error in mariadb: "memory pressure can't write to disk" (paraphrased).

Ok, that's odd. The ram was fine which is what I assumed it was. HD space can't be the issue since the ZFS array is only 25% full and both mariadb and seafile only have volumes that are on the zfs array. There are no other volumes...or is there???

Finally in portainer I'm checking out the volumes that exist, seafile only has the two as expected, data and database. Then I see hundreds of unused volumes.

Quick google reveals docker volume purge which deletes many GBs worth of volumes that were old and unused.

By this point, I've already created and recreated the seafile docker containers a hundred times with test data and simplified the docker compose as much as possible etc, but it started working right away. Mariadb starts working, I can now copy a file from the web interface or the client and it will work correctly.

Now I go through the process of setting up my original docker compose with all the extras that I had setup, remake my user account (luckily its just me right now), setup the sync client and then start copying the data from my desktop to my server.

I've got to say, this was scary as shit. My setup uploads files from desktop, laptop, phone etc to the server via seafile, from there borg backup takes incremental backups of the data and sends it remotely. The second I realized that local data on my computer was fine but the server data was unreliable I immediately knew that even my backups were now unreliable.

IMHO this is a massive problem. Seafile will happily 'upload' a file and say success, but then trying to redownload the file results in an error since it doesn't exist.

Things that really should be present to avoid this:

  1. The client should have the option to run a quick checksum on each file after it uploads and compare the original to the uploaded one to ensure data consistency. There should probably be an option to do this afterwards as well as a check. Then it can output a list of files that are inconsistent.
  2. The default docker compose should be run with health checks on mariadb so when it starts throwing errors but the interface still runs, someone can be alerted.
  3. Need some kind of reminder to check in on unused docker containers.
96
submitted 2 months ago by Lem453@lemmy.ca to c/selfhosted@lemmy.world

Looking for a self hosted YouTube front end with automatic downloader. So you would subscribe to a channel for example and it would automatically download all the videos and new uploads.

Jellyfin might be able to handle the front end part but not sure about automatic downloads and proper file naming and metadata

29
submitted 5 months ago by Lem453@lemmy.ca to c/steamdeck@sopuli.xyz

The jellyfin app (self hosted video streaming) app on steam deck (installed via desktop mode->discovery as a flat pack) doesn't seem to register as 'playing' with the os. The screen will dim after a few mins.

I'm 'playing' the jellyfin app as a non steam game in game mode.

I know I can disable screen dimming in the settings but is there a way to have it auto detect when a video is playing and prevent the screen from dimming?

16
submitted 5 months ago by Lem453@lemmy.ca to c/coffee@lemmy.world

Any suggestions for roasted decaf beans I can get Canada?

30
submitted 6 months ago* (last edited 6 months ago) by Lem453@lemmy.ca to c/selfhosted@lemmy.world

Very solid price, the cheapest I've seen for something like this. Has anyone tried it with OPNsense or other software?

The linked thread talks about someone getting 60C load temps but the air was 37C and they are using a RJ45 DAC which are known to use lots of power.

Wondering if anyone else has experience with this. Seems like a big advancement in what's possible at a home scale for non second hand equipment.

Another article about this: https://liliputing.com/this-small-fanless-pc-is-built-for-networking-with-four-10-gbe-and-five-2-5-gb-ethernet-ports/

125
submitted 6 months ago by Lem453@lemmy.ca to c/jellyfin@lemmy.ml

This should eventually make it's way into jellyfin. Eager to see the performance improvements.

88
submitted 7 months ago* (last edited 7 months ago) by Lem453@lemmy.ca to c/jellyfin@lemmy.ml

Beautiful stats for Jellyfin. I just set it up in docker compose yesterday. Love it!

4
submitted 7 months ago by Lem453@lemmy.ca to c/homeautomation@lemmy.world

I'm wondering if I can get a device that enables zwave over Ethernet/wifi and connect that to my home assistant setup?

Basically I have a home assistant setup in my house. I want to add a few simple things to my parents place but I want it to all be on the same HA instance.

On the router in my parents place, I can install wireguard to connect it to my LAN. So now my parents network is the same as my LAN network.

I'm looking for a device that can connect to zwave and then send that info over the LAN to my home assistant. Does such a thing exist? Thanks.

5
submitted 8 months ago by Lem453@lemmy.ca to c/homeautomation@lemmy.world

By local control, I mean if the Z-wave hub is down will the switch still work as a dumb switch and turn the lights on/off?

This is the product I would like to get, but can't find if they allow 'dumb switch' operation. Does anyone have experience with these? https://byjasco.com/ultrapro-z-wave-in-wall-smart-switch-with-quickfit-and-simplewire-white

Thanks!

2
submitted 1 year ago by Lem453@lemmy.ca to c/homelab@lemmy.ml

Hi all. Just learned about NixOS a few weeks ago. I'm in the process of migrating several of my docker services to a new server that will have proxmox installed as the host and then a VM for docker.

I'm currently using alpine as the VM and it works well but one of the main goals of the migration is to use infrastructure as code as much as possible. All my docker services are docker compose files checked into a git repo that gets deployed. When I need to make a change, I update the git repo and pull down the latest docker compose.

I currently have a bunch of steps that I need to do on the alpine VM to make it ready for docker (qemu agent, NFS shares, etc).

NixOS promises to be able to do all that with a single config file and then create a immutable OS that never changes after that. That seems to follow the philosophy well for infrastructure as code and easy reproducibility.

Has anyone else tried NixOS as a docker host? Any issues you've encountered?

11
submitted 1 year ago by Lem453@lemmy.ca to c/homelab@lemmy.ml

I'm just starting to upgrade my basic unraid docker to an InfraAsCode setup.

I will use unraid as Nas only. My media and backups will be on unraid, everything else on a separate proxmox VM that is running and SSD storage array for ZFS. Both the unraid and proxmox hosts share their storage via NFS. Each docker container mounts the NFS volumes as needed.

For the containers I use an alpine VM with docker. I use portainer to connect to a gitea repo (on unraid) to pull down the docker compose file.

So my workflow is, use VS code on my PC to write the compose file, commit to git, then on portainer I hit the redeploy button and it pulls the latest compose file automatically.

What's your setup?

view more: next ›

Lem453

joined 1 year ago