Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)D

daniskarma

@ daniskarma @lemmy.dbzer0.com

Posts
3
Comments
928
Joined
2 yr. ago

  • Firefox has an ambitious new roadmap, the browser is also losing millions of users a month

    Jump

  • I switched for IE to firefox on 2007 and never switch back.

    There are some things here and there(mostly due things being implemented by default for chromium), but it has always been the best browser overall for me.

  • Deleted

    Permanently Deleted

    Jump

  • I want one random atom to be one plank unit shifted to the left at the beginning of the universe.

    🦋

  • megabool

    Jump

  • Quantum computer booleans. True/False/Everything in between.

  • Is there room for Windows selfhosters?

    Jump

  • Security considerations about hosting Immich from home

    Jump

  • I have many services that doesn't "need" to be public, as public facing for one specific reason. TLS.

    A lot of the times android apps won't connect to http directions, not even local ones, and require a proper https connection with a well known CA.

    For that I put the services behind a caddy reverse proxy to get a valid tls certificate.

    And them I do the trick, and basically on caddy reject any connection that's not local. Thus, making the supposedly "public" site a practical "local" one.

    Once there I just connect through wireguard.

  • Security considerations about hosting Immich from home

    Jump

  • I have that but with caddy.

    On the caddyfile you can put to only serve the site to certain IPs and reject the others with any status normally 403 or 404.

    Attackers probe the site, but all they get it's a connection error.

  • Deleted

    Permanently Deleted

    Jump

  • Last time I was stung by a wasp I was just standing on the street. I wasn't even moving. I was standing for about 30 minutes waiting when suddenly a wasp came, stung me on the neck and went away flying.

    It was a "fuck you in particular" with qll the letters.

  • Continuwuity

    Jump

  • When they have good names they get stolen.

    Try took up about gemini protocol.

  • Good luck out there.

    Jump

  • Yeah. Layoffs started with svb bankruptcy. They run out of free investor money and now they are extremely pressured to cut expenses. AI is just the lamest excuse for investors

  • PewDiePie releases Codex/ClaudeCode/Cursor killer, Odysseous (FOSS)

    Jump

  • It's great for solo roleplaying.

    I mean. Not great. But it's something you can interact with in a way that's not possible without other people. So that's something.

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • It's a fair point.

    I've had diverse success using llm for coding.

    For simple things and basic questions it has worked. For anything complex. It has been a complete failure.

    But I've never used a paid tool, most of the time I just use self hosted LLMs. But, to be honest, I don't think the paid tools are that much better.

    But if someone knows how to use it better. And assumes responsibility for checking the code, I'm ok with it.

    It's just a tool like many others, it can be usedfor good or for bad.

  • The first publicly open instance

    Jump

  • I think Pixelfed can sit nicely behind a reverse proxy, to reduce exposure.

    I don't know if there are prebuilt scenarios for pixelfed in crowdsec or fail2ban but it shouldn't be so hard to at least write something to prevent bruteforce.

  • Internal network monitoring

    Jump

  • I'm in the process of building a monitoring system with grafana stack.

    Right now I have monitoring panels for some common metrics and logs. I am yet to set up alerts.

    The idea being that if something goes wrong some metric will grow up unexpectedly, for instance network traffic. And I would get a notification.

    What I'm still considering is what would I consider abnormal behavior, so I could set up the thresholds.

  • The first publicly open instance

    Jump

  • What do you want to expose, something static or dynamic?

    It would be a service you wrote or some stablish project?

    I would recommend running whichever service you want to expose through a reverse proxy, traefik or caddy. That way you have some sort of "chocking point" where you can control what's going and it's already handling some security for you.

    The service should be kept updated.

    Then you need a ips (intrusion prevention system). Most famous are fail2ban or crowdsec. You feed the ips the service logs and the reverse proxy logs, and ban ips that try to do something strange. I use crowdsec with a bunch of scenarios and their block lists.

    At the end you should only have a couple of ports open to the internet. Usually 80 and 443, and whichever port you use for the vpn, i recommend wireguard. So people should only connect to you via 80 or 443 and those ports should be binded to the reverse proxy. Everything else should never be able to enter your network.

    If you have all that and keep everything updated the attack surface becomes really small. You'll get spam bots trying to probe for vulnerabilities but if you keep everything updated they won't find anything.

    Depending on how many people you want to access your service you could also do some aggressive geoblocking, to reduce the number of bot attacks.

    The biggest risk here would be a vulnerability on the reverse proxy or the service you use. Keep an eye out for cve and update things regularly. If a vulnerability allows for remote code execution, then mitigation becomes almost impossible besides a good backup plan. If your vpn fails on you you are also fucked. But wireguard is pretty well secured. Bot scans shouldn't even be able to know you have wg because pings and connections attempts fail silently without proper authentication.

  • Life finds a way

    Jump

  • I'm sorry Dave, I'm afraid I can't allow you to do that.

  • Deleted

    Permanently Deleted

    Jump

  • O2 was poisonous for that algae.

  • Movies

    Jump

  • I just want a good adaptation of Dragonlance. I had dreamed for decades over that.

    The animation movie wasn't even that bad.

  • No offense to society

    Jump

  • Cs2 solo queue is a more pleasant interaction than my neighbors

  • What is with the pro-AI posts lately?

    Jump

  • I suppose it's due many people not seeing things as black or white, but as a variety of grays.