[-] HumanPerson@sh.itjust.works 2 points 20 hours ago

I agree, though I wouldn't blame the article. If it is insecure, you shouldn't be using it unless it is set up to allow you to run a real os on it.

[-] HumanPerson@sh.itjust.works 1 points 22 hours ago

I think the teacher specified that we use eclipse, and most who didn't were using vscode. If I recall correctly, they did use eclipse. I don't remember how it handles saves, but I don't think it does that.

[-] HumanPerson@sh.itjust.works 14 points 1 day ago

Gen Z here. Totally agree, though I personally am a bad example for this one. There was someone in my CS class once who I was put into a group with for a project. I needed some code that they had, so I asked them to put it on my flash drive. It was taking a while and eventually I asked why. They didn't know where their IDE saved their code, and were using Windows search to try and find it. They were pretty good at actual programming, logic, etc. though.

[-] HumanPerson@sh.itjust.works 1 points 2 days ago* (last edited 2 days ago)

Openhab is a project like HomeAssistant. Both are basically websites that offer pre made smart home functionaility and can run on your own server. Openhab doesn't set a password by default (iirc), and when people expose it to the internet they end up with random bored people in another country somewhere flipping their lights on and off or adjusting their thermostat, though they could also get hacked. The openhab example was one of what not to do. I could have been more clear about that.

Security is an issue that people in this community are fairly opinionated on. Try to build up a practical knowledge of every tool you use (like tools for remotely managing your server). Think about how much access that tool gives you, and how easy it is to get. Ssh gets you basically full access to the system, except for bios level settings and things, but it is generally quite secure, and you can use keys instead of passwords. Cockpit, a remote management tool you can access from your browser, offers you a full terminal, so functionally the same access as ssh. However, hackers nearly got a back door into openssh (ssh is the protocol, openssh is the software on linux that implements that protocol), and cockpit is much less thoroughly looked at. Also cockpit doesn't let you use keys.

You're website will be static, which decreases the complexity and makes it easier to make it secure, so don't worry too much. Here are some links that might be useful: https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server

https://www.cyberciti.biz/tips/linux-security.html (this one seems to be geared more towards enterprise stuff, so not all of it is relevant, but a decent amount is.)

Edit: This one is good too. I recommend at least skimming it before the one above this. It will help you figure out which of the points in the link above are worth paying much attention to. https://owasp.org/www-community/Threat_Modeling

[-] HumanPerson@sh.itjust.works 1 points 2 days ago

Yeah. I just forward SSH with keys only on a nonstandard port + fail2ban. Plus you can access local only services with an SSH port forward.

That's also why I don't use cockpit. It looks cool, but opens up vulnerabilities for very little benefit.

[-] HumanPerson@sh.itjust.works 12 points 2 days ago

You can use I2p and upload to postman (tracker).

[-] HumanPerson@sh.itjust.works 6 points 2 days ago

Not very true. Plenty of gen z still torrent. This seems more like a shitpost.

[-] HumanPerson@sh.itjust.works 3 points 2 days ago

I believe zfs has deduplication built in if you want a separate backup partition. Not sure about its reliability though. Personally I just have a script that keeps a backup and an oldbackup, and they are both fairly small. I keep a file in my home dir called excluded for things like linux ISOs that don't need backed up.

[-] HumanPerson@sh.itjust.works 4 points 2 days ago

To be fair, Netflix and the others all had to pay licensing fees and whatnot. I think governments should simply ban exclusivity deals so that competition can exist.

[-] HumanPerson@sh.itjust.works 12 points 3 days ago

Damn, federation is crazy. Over here you're the only comment lol.

[-] HumanPerson@sh.itjust.works 6 points 3 days ago

It sounds like you're on the right track. As long as you aren't hosting anything too important, just go for it. The only thing to keep in mind is security, which in your case should be fairly simple.

  1. Use common sense: if you never have to enter a password or have a security key to access something, neither does a hacker. You would be amazed how many people host their openhab instances to the internet with no passwords.
  2. Use ssh keys and disable passwords. Ssh keys are sort of like giant passwords that sit in a file and you never have to type in. It is counter intuitive, but it is more secure. A giant key is harder to guess than a password. You can also encrypt your key so you need the key and a password, this is useful for laptops which could be stolen.

For how to learn simple html and css, w3schools is your friend. You can learn all the random stuff people become extremely opinionated on eventually, but don't get overwhelmed by all of it and just do what works for you.

[-] HumanPerson@sh.itjust.works 17 points 3 days ago

Wow, that must have had like 12 shows.

142
Never buy .xyz (sh.itjust.works)
submitted 1 week ago* (last edited 1 week ago) by HumanPerson@sh.itjust.works to c/selfhosted@lemmy.world

I just wanted to post this here because I want to help you all and hurt gen.xyz as much as possible. I had a .xyz domain through njal.la which I used to host jellyfin, homeassistant, and other basic things for friends and family. My domain recently became inaccessible without any notice. After a while of troubleshooting, I found that it had been reported to xyz as abuse, and they must have done zero investigation whatsoever before serverholding my domain. I thought about opening a ticket with xyz to get my domain back, but realized that I no longer wish to buy from some shitty company that will take down any site without warning. Bought a .com domain since they are somewhat reputable, and I would advise everyone here to never buy a .xyz domain. Angry rant over.

37
submitted 1 week ago* (last edited 1 week ago) by HumanPerson@sh.itjust.works to c/selfhosted@lemmy.world

Currently, I use Debian on my server. I have an Intel Arc GPU that I use for transcoding, however hardware encoding doesn't work. I am able to get a slight performance benefit from decoding, but encoding would be much better. I have an A750 in my desktop (not server), and was able to get hardware acceleration working, but only with openSUSE Tumbleweed with the stable kernel (6.9.4). While I would love to have encoding, (I am limited on upload speed and av1 encoding isn't practical on the CPU for multiple streams), I doubt it would be stable using a rolling distro and non-standard kernel. Has anyone else tried anything like this? Are there any arc + jellyfin users out there who know any way to make this work, or any openSUSE self-hosters could vouch for its stability? I am willing to try almost any distro (except ubuntu) to make this work.

Edit: fixed. There was some firmware I needed to work on debian. I will link and such in a bit when I have time.

30
submitted 1 month ago* (last edited 1 month ago) by HumanPerson@sh.itjust.works to c/linux@lemmy.ml

Hello. These questions are self-hosting related, but I feel they do partially belong here as they are also about fedora linux in general. I have a server which is currently running Debian. It has an arc GPU, and no matter what I do, video encoding refuses to work. I was thinking I might move it to Fedora, but have some questions first.

  1. How are Fedora's updates? I believe they are about once a year, so how is it to switch between versions? I can deal with annual maintenance, but don't want weird issues causing downtime.
  2. Also about updates, how should I do auto updates on fedora?
  3. I am currently on apparmor. I know seLinux has more features, but I have also heard that it can be annoying to deal with.
  4. I mentioned the arc GPU. Has anyone managed to get video encoding working on it on fedora? If so how?

Edit: also, how is it to move a raid over. It is mdadm raid 5 with ext4. It is VERY important that nothing happens to the data, unfortunately I have not yet implemented a backup, although I do intend to soon.

24
submitted 1 month ago* (last edited 1 month ago) by HumanPerson@sh.itjust.works to c/linux@lemmy.ml

Basically title. I have a 7600(x)(t) 8G. I want drivers with opencl for hashcat. I know the proprietary ones work, but they are a ludicrously massive PITA. I am willing to use almost any distro to make this work (not Ubuntu, and not one of those random newer ones). I really hope I don't have to use the proprietary drivers.

Edit: found a good enough solution. I listed the card on ebay and will replace it with an intel arc soon.

31

The video is an old one about Katrina. I need it for homework. I have tried accessing it from CNN's website but CNN in their infinite wisdom put DRM on the video that is publicly available, and I assume that is why it doesn't work on mull, librewolf, or chromium (all show same error about neon request failed). I looked on the generic torrent sites to no avail. Any response would help, the questions are very specific to the video and it is due soon.

144

I recently found this on Reddit while looking into why jellyfin is effected so much by latency. I found that this worked and thought I would share it because it is generally applicable, takes five minutes to setup, and helps a lot with bandwidth on higher latency connections. I admit I am not sure of the technical stuff behind this, so if anyone would like to chime in that would be much appreciated.

90
How should I do backups? (sh.itjust.works)
submitted 2 months ago* (last edited 2 months ago) by HumanPerson@sh.itjust.works to c/selfhosted@lemmy.world

I have a server running Debian with 24 TB of storage. I would ideally like to back up all of it, though much of it is torrents, so only the ones with low seeders really need backed up. I know about the 321 rule but it sounds like it would be expensive. What do you do for backups? Also if anyone uses tape drives for backups I am kinda curious about that potentially for offsite backups in a safe deposit box or something.

TLDR: title.

Edit: You have mentioned borg and rsync, and while borg looks good, I want to go with rsync as it seems to be more actively maintained. I would like to also have my backups encrypted, but rsync doesn't seem to have that built in. Does anyone know what to do for encrypted backups?

88
Self hosted LLM (sh.itjust.works)

Hello internet users. I have tried gpt4all and like it, but it is very slow on my laptop. I was wondering if anyone here knows of any solutions I could run on my server (debian 12, amd cpu, intel a380 gpu) through a web interface. Has anyone found any good way to do this?

28
How do I automount sshfs? (sh.itjust.works)

I have SSHFS on my server and would like to have it automatically mounted and store all of the documents, desktop, downloads, etc. on a couple computers. I am able to get it to all work except for mounting on startup. The server is Debian 12 and both clients are Tumbleweed. Nothing in fstab seems to work. When I add x-systemd.automount, well, at best programs that try to use it crash and at worst I have to go through recovery mode to get the system to boot properly. I am using ed25519 keys with no passwords for authentication. Does anyone know how I could get this to work?

72
How to get a private car (sh.itjust.works)
submitted 4 months ago* (last edited 4 months ago) by HumanPerson@sh.itjust.works to c/privacy@lemmy.ml

Hello internet users. Someone in my family is looking to buy a car and wanted some recommendations for a private one. They are looking to buy new, and need Android Auto and CarPlay. I know all new cars suck for privacy by default, but I was hoping someone here could offer some insight as to which cars can be made better and what cars offer the best experience with minimal compromises on privacy and no subscription bs. I also have a Home Assistant instance that they can access remotely if there are any cars that can work well with that.

Edit: Android auto and CarPlay aren't as important as I thought.

10
submitted 7 months ago* (last edited 7 months ago) by HumanPerson@sh.itjust.works to c/selfhosted@lemmy.world

I know this sounds like more of a "how do I use computes" question than a legitimate selfhosting question, but I think it fits here. My LibreX instance is hosted and appears to be fully functional, but when I try to add it to my browser it reports its url as 127.0.0.1:8080 instead of the actual address. I tried to get it to work with chromium as a troubleshooting step, and while it did let me change the address, it had some other stuff after the search.php?q= that made it return a 404. Does anyone know how to fix this?

edit: run with -e OPEN_SEARCH_HOST="https://yourdomain.tld" to get it to report the correct thing. You also have to remove and add it back in your search engine.

36
Find-My alternatives (sh.itjust.works)

Hello. I just got a google pixel with grapheneos, and would like a way to use Apple's find-my or something similar with family members who still use Apple. I would like something open source that can either proxy my location to Find My or serve as an alternative. I know these apps and services are inherently not private but I do need it so please don't be the guy to say "just don't use it," I would if it were an option. Thanks.

view more: next ›

HumanPerson

joined 1 year ago