Skip Navigation

node815

@ node815 @lemmy.world

Posts
1
Comments
44
Joined
3 yr. ago

  • Selfhosted chat service

    Jump

  • Why not use a different DDNS service? There are plenty out there. :) I think this may solve your issue. I've been using freemyip.com''s for a while and have had no problem in the past issusing LetsEncrypt SSL's. At the moment, I'm on Cloudflare tunnels so it's automatic with them, which I know is a huge trust issue for a lot of people, but I don't mind it for my stuff. But I do like to have my DDNS as a backup service from time to time.

  • What do people here think of Nebula?

    Jump

  • I have been using Tailscale, connected it to my domain, I use Authentik for my OIDC/SSO Sign in and tied it that way for the MFA OIDC Login Tailscale let's you use. All I needed to do is setup a webfinger for it and once it verified my domain, I was able to give them my OIDC settings for them. Tailscale so far for me in the last year or so has been quite simple to use. Plus, being able to log into my admin console and any devices I enroll through Authentik's front end, has given me peace of mind knowing it's quite secure. (All of this on a Proxmox server BTW).

    One may argue about self hosting Wireguard and I agree, it's quite easy to do if you use something like wg-easy which makes it simple to add phones to your network. My concern with it though was having to poke a hole into my firewall for the WG traffic to hit the server, once I got into Tailscale, it's made it easier and I don't have any open ports on the router now. I think this is primarily why the Jupiter Broadcasting guys push it so much on their podcasts, not to mention one of the hosts on his podcast is an employee for Tailscale as well, so that probably helps a bit.

    As for funding for both Nebula, or Tailscale, they do cater to enterprise customers so you have the assurance that they do have to answer to them if they revoke a service or ruin it. :)

    For Tailscale, it's just a matter of them allowing you to add 100 devices for free and it's simple command to install it on any client via the cli including Apple TV for example. For phones, I have Tailscale on my phone connected 24/7 to my exit node which is my Proxmox server which acts as one, and as a backup, my Raspberry Pi which acts as one as well. So, even if I'm on the road or away from home, I'm always on my home network (unless blocked by overzealous sysadmins on their public WiFi networks). There's not much to manage via the phone, but I like to think it's 'set and forget' really, once you have it all configured, it just runs in the background and they do not decrypt your traffic much less care what goes through it.

  • Joplin alternative?

    Jump

  • Anytype is amazing, but when they give you these super long passkeys to decrpyt? That makes having to either memorize the something like 12 short words, and keep them in the exact order they tell you, you sort of have to put them in a notebook (ironically), password manager or whatever you choose to store it.

  • Runtipi: Homeserver management made easy

    Jump

  • Let me preface this with that I am an experienced CLI user and with Docker, so this really is not in my interest generally, but getting older and dealing with a variety of other personal issues, having a nice dashboard to deploy things sometimes is just really nice ya know? So I figured I would put on my dusty beginner's hat to get this a run.

    For the beginner, it's a nice system to get started and get your feet wet with a no-nonsense app install experience. I tested this in a VM on my desktop and installed Sonarr and Sabnzbd which if you use Docker with these, you know the proper volume mapping is key. They take the hassle out of doing this for the end user. With that said though - file permissions are a bit off and both Sonarr and Sabnzbd needed the proper permissions set for the folders. Not a deal breaker for someone accustomed to the CLI, but for a new self hoster, this can be a bit frustrating.

    Their app store is pretty impressive and I guess growing, the install on the server was painless to get running. It's something to keep an eye on, it's in good company with the other ones like Umbel and CasaOS, each has their own qualities.

    For those wanting more fine grained control over the apps and installs, Tipi is a bit more opinionated to the port numbers and paths used and you can't easily modify those (at least from what I could tell). In the long run, this is a non issue for the most part if you are starting on a freshly installed server and don't want to handle the challenges of proper path mapping, reverse proxying and so forth. (They include Traefik in the install). Not having to worry if port 3000 is already taken or 8080 is, you can trust that it will handle it and it does!