Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)B

brownmustardminion

@ brownmustardminion @lemmy.ml

Posts
11
Comments
24
Joined
5 yr. ago

  • Replaced $40/month in AI API subscriptions with self-hosted Ollama + n8n

    Jump

  • I'm not a huge fan of AI, but I consider myself pretty open minded and have been considering doing a demo of Claude to at least gain an understanding of the tech I'm constantly talking shit about.

    Is there anything self-hostable that compares in quality to what vibe coders claim Claude Opus is capable of?

  • Am i doing something wrong here with duplicati?

    Jump

  • I second this. Had nothing but headaches with duplicati.

    Try Borg.

  • Is there a self hosted mTLS manager?

    Jump

  • Securing traffic between a proxy and a backend over a VPN. How do you get a certificate for an internal domain?

    Jump

  • There's no certificate at the VPS level. It forwards everything to and from the self hosted reverse proxy.

    Now that you mention it though, there may be a slight complication with pinning the reverse proxy to the domain API for cert renewals. I'll have to check how I have mine configured but I may have given my reverse proxy a IPv6 and configured that for cert renewals.

    That would mean some down time as you update the IP if your ISP rotates it.

  • Securing traffic between a proxy and a backend over a VPN. How do you get a certificate for an internal domain?

    Jump

  • This is fine unless you have a slightly higher threat model.

    Me personally, I dislike the idea that if someone (VPS provider or LE) were to snoop inside my VPS, they would have all of my unencrypted data where TLS ends and wireguard picks it up.

    I don't do anything illegal, but I do have photos, personal files, and deeply personal journals/notes for which I enjoy the comfort of mind when kept private and secure.

    My recommendation is always to have your TLS equipped reverse proxy on your own hardware. Then use a VPS as a SSL passthrough proxy that forwards requests to the locally hosted reverse proxy. You can connect the two via wireguard.

    This has a few benefits. It keeps encryption end to end. It also allows you to connect to your server via your domain name even in you LAN. You can hijack your domain at the router level DNS menu to reroute to your local reverse proxy. And it keeps the TLS connection.

  • New Community Rule: "No low-effort posts. This is subjective and will largely be determined by the community member reports."

    Jump

  • This is fine if the post is something insanely low effort.

    But I do worry if this ends up being too aggressive.

    One of the things that made reddit so awful is how over moderated it was.

    I don't really take issue with dozens of posts by newbies asking the same basic question over and over. I used to be one and am occasionally back there again if I start a new hobby. Hopefully newcomers don't get pushed off by overly sensitive moderation.

    It would be helpful if you could provide a hypothetical example of what is considered a "low effort" post.

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Platform for Crowd Sourced Software Bounties?

  • Fuck AI @lemmy.world
    brownmustardminion @lemmy.ml
    Video Essay

    The Machine God Will Kill Every Last One of Us

    inv.nadeko.net /watch

  • Lemmy is designed to fail the same way as reddit when reaching the same size

    Jump

  • Personally I use other platforms for uncensored discussions.

    Unfortunately they're filled with insufferable twats like yourself, but that's the price we pay for free speech.

    It's obvious for everybody except for you, that Lemmy isn't intended as a free speech platform, but a means to form your own community based on shared interests and values. That inherently comes with some amount of censorship at the discretion of instance operators. I'm a free speech advocate, but I value and respect individuals' right to maintain their property (Lemmy instance) as they see fit.

    If you want free speech, hop on Simplex where you can yell racial slurs until you've satisfied yourself.

    Or spin up your own lemmy instance. I'd be happy to join and engage in some debates.

  • homeassistant @lemmy.world
    brownmustardminion @lemmy.ml

    Simple HACS Alternative

  • Split Tunnel by Domain on Router Level?

    Jump

  • Your first suggestion is a clever one.

    I can imagine writing a small script on the host machine to listen for subdomains, forward them to pfsense to update the aliases, and possibly set them to expire after a few days for security reasons.

    Surely something like this exists. How to find it...?

  • Split Tunnel by Domain on Router Level?

    Jump

  • There's a few apps I need to split out. Top priority is the signiant app which according to their documentation requires various AWS subdomains as well as their own. Specific subdomains are not specified and are implied to change regularly/on demand.

    In an ideal world I would do my split tunneling on the device itself, but I don't trust Windows and thus I run my VPN at the router level.

    This isn't a problem for most things, but I need to utilize my full bandwidth to transfer large files to clients in a timely manner, and a VPN becomes a massive bottleneck.

    Pfsense lets you alias by domain name (I believe it regularly resolves down to an IP and uses that for filtering), but again, you need to supply the exact subdomain.

    Just wondering if there's an alternative solution to this issue. If it's external to pfsense that's not the end of the world.

    Worst case scenario, I would set up a dedicated Linux box or maybe even a VM which could share access to the file transfer NAS and split tunnel the entire box around the VPN. Definitely less convenient.

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Split Tunnel by Domain on Router Level?

  • Selhosted Spotify Alternative for Closed Social Network?

    Jump

  • This looks promising. I'm going to investigate further. Thanks!

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Selhosted Spotify Alternative for Closed Social Network?

  • Privacy @lemmy.ml
    brownmustardminion @lemmy.ml

    When is it time to switch away from youtube?

  • Deleted

    Permanently Deleted

    Jump

  • Yes, it will count towards your bandwidth.

    I typically don't get anywhere close to this though.

    The few times I did were due to initiating large backups between devices, upwards of 2TB. But I've since moved my backup system to a mesh network and haven't hit bandwidth overages since.

  • Deleted

    Permanently Deleted

    Jump

  • I recommend it every time this question pops up and I'm surprised more people aren't privy to it:

    Rent a VPS as your public gateway. Connect the VPS to your server with a simple wireguard tunnel.

    The only thing on the VPS should be a reverse proxy with SSL/TLS pass through.

    Send the traffic at the VPS reverse proxy to a reverse proxy on the main server. Configure this proxy to use letsencrypt certs.

    The benefit and importance of the SSL pass through reverse proxy, is that it allows all data in transit to remain encrypted until it reaches your physical server. Traditionally, most would suggest the one and only reverse proxy exist on the VPS but all traffic would then be decrypted on the VPS. This could obviously compromise your traffic if the VPS provider snoops or your VPS is compromised.

    Cloudflare tunnels decrypt on their hardware as well, which is why I always recommend avoiding their services.

  • Backblaze responds to claims of “sham accounting,” customer backups at risk - Ars Technica

    Jump

  • Backblaze deleted my project drive for a multimillion dollar project I was archiving through their desktop sync. It's largely my fault for not noticing the drive had failed when considering their upfront policy about them deleting your backups after a month of inactivity. Luckily it didn't have too big of an impact because the most important files were backed up elsewhere. I do wish their desktop app had better warnings about imminent deletions though.

  • Removed

    HDD Data Recovery Options?

    Jump

  • This is encouraging. Thank you.

  • Deleted

    Permanently Deleted

    Jump

  • I've been on Lemmy for years and have yet to see a single nsfw post.

    I didn't realize they even existed.

  • Which reverse proxy do you use/recommend?

    Jump

  • I use nginx for static websites and TLS passthrough servers.

    I use traefik as a reverse proxy for sites with many services and SSO.

    Nginx is definitely easier to configure for simple things. But I prefer traefik for more complex setups.

  • My server won't turn on 🫤

    Jump

  • Compressed air can spin the fans fast enough to cause damage unfortunately.

  • My server won't turn on 🫤

    Jump

  • Did you use compressed air to clean out the fans?

    It's possible to fry circuitry if you artificially rotate the fans too fast, as this generates an electric field more powerful than the fans and their attached components are rated for.

    Probably rare to cause damage with modern computers but an old PC might be more susceptible to this type of damage.

  • Vulnerability Disclosure: Authentication Bypass in Vaultwarden versions < 1.32.5

    Jump

  • Am I understanding correctly that if users had 2FA, the vulnerability would be prevented from gaining access?

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Paid SSL vs Letsencrypt

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Server Access Log Admin Dashboard?

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml
    Question

    Migrating and Upgrading Proxmox to New SSDs on Poweredge Safely

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Fully Virtualized Gaming Server?

  • Selfhosted @lemmy.world
    brownmustardminion @lemmy.ml

    Custom Domain Email