Skip Navigation

Posts
16
Comments
126
Joined
3 yr. ago

  • the more complicated it gets the more likely you are to either screw up unintentionally, or get annoyed at it, and do something dumb on purpose, even though you totally were going to fix it later. (...) Pick the one that makes sense, is easy for you to deploy and maintain

    This is an interesting piece of advice.

    Anyway maybe I wasn't clear enough, I'm not looking to pick a setup, I've been doing 2.B. for a very long time and I do work on tech and know my way around. Just gauging what others are doing and maybe find a few blind spots :).

    Thanks.

  • What’s your concern here?

    No specific concern, I do like in scenario 2, option B. I was just listing the most common options and getting feedback on what others think about those.

    I personally believe the setup 2B is more than enough if a nation state isn't after you, but who knows? :)

  • So you do trust LXC isolation to the point of thinking that it would be close to impossible to compromise your host?

  • are we talking what’s good enough security for hosting an anime waifu tier list blog or good enough security for a billion dollar corporation?

    You tell me. :)

    What would you do/trust in both situations?

  • Yeah, I was typing that on the phone... thanks for the link:

    As the node runs as the root user in order to run plugins as any needed user, it now only listens on localhost as a security measure. You have to edit munin-node.conf in order to listen to the network, and add the master’s IP on the authorized list.

    So, I guess the best approach is to just run it inside a management network / internal VPN to avoid exposing the port to the internet.

  • Looks cool, what about security? Since you’re experienced with it, how does it access the information of the nodes and how secure or insecure that may be? At the end of the day I don’t want to open a port on all nodes just to have it be used as root access to those machines…

  • fluoridation has nothing to with any teeth-related issues, it was all about the US industry having a way to dispose of fluoride, a byproduct of many industrial activities. You can't just dump fluoride on a river as it has several adverse side-effects, but it you can convince everyone it is good for their health then it's okay to dump it on the water supply.

  • I guess the current situation could be better if Opera and Brave coordinated among themselves a shared codebase for a patch that would allow both of them to keep v2 working. The thing is that Brave most likely doesn't actually care, they've a built in adblocker so if v2 goes away then their marketshare will increase. Opera can't do it alone because, well it is the Opera Chinese owned company after all.

    I was really hopping that Microsoft would take on this, think about it, from a strategic PoV if Edge kept v2 and advertised it they could just snatch a big chunk of users from Google.

  • A better title: Opera explains shit on how it plans to keep uBlock Origin support. Will talk to developers so see if anyone has a good ideas.

  • The funny part is that they sell it as modern yet they use Java like if it was a banking software from the 90’s. Thanks for the tip.

  • Nextcloud Music (...) Downside: it is Nextcloud.

  • It's so hard to have a SMB share with one folder per game. The solution is obviously to run 4000 docker containers.

  • Yeah because apparently it is too hard to double click on setup.exe but using a docker is okay.

  • So, looks like tons of HTTP services and SSH.

  • Great, but what services are you hosting ? What ports you need?

  • Yeah, those may work. Since you’ve one how does it look like? Are there blocked ports line SMTP? Are the IP good / aren’t blacklisted everywhere already? Thanks.

  • This means I don’t need to mess around with QBT’s “proxy” settings?

    No, you don't. In short, trackers will look at the source address of the incoming connection on their side, that means you VPS IP because you're doing NAT on the VPS.

    Just make sure qBittorrent is restricted to the WG interface and nothing else.

  • I agree with that, 100% but for the majority of the world how green it is usually depends on how far-left you are.