Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)S

StarkZarn

@ starkzarn @infosec.pub

Posts
15
Comments
94
Joined
3 yr. ago

  • Gryt-Chat: Like Discord but Self Hosted

    Jump

  • XMPP gang rise up! There are dozens of us!

  • Hardware Watchdogs & Auto Reboots in Proxmox

    Jump

  • I'm all about adding to the proverbial arsenal. 🤘

  • Hardware Watchdogs & Auto Reboots in Proxmox

    Jump

  • You're absolutely right! I'd point you back to my notion of cost-benefit analysis. Anything more than the 20min that I've spent on analysis so far isn't worth my time. If the VM falls over permanently, that was a risk and my time savings has already been worth that risk. If I were looking at something like a production file server or domain controller, sure -- I'd spend more time on it. Likely though, I'd just have engineered it better in the first place. Not every problem warrants a high precision solution. 🙂

  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Hardware Watchdogs & Auto Reboots in Proxmox

    roguesecurity.dev /blog/watchdogs

  • How to self-host a Prosody XMPP server on Bazzite with Podman for Movim

    Jump

  • I'd be interested in seeing that, or at least knowing which ejabberd container you chose and why.

  • 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

    Jump

  • Rybbit - Open source Google Analytics replacement

    Jump

  • Hey thanks so much for the engagement. I was trying to run it on a VPS that cost $35/year. 2GiB of RAM wasn't quite enough to make it work for me, granted that was with the webserver and ancillary supporting services.

    I'll find an opportunity to test it out though, as rybbit looks great. I appreciate the mention on the other FOSS products, that's a good look for you. I have plenty of experience with umami already. Cheers!

  • Rybbit - Open source Google Analytics replacement

    Jump

  • Glad to see you post this here. I've been experimenting with selfhosted analytics for a while now and have attempted your project here a couple times. The thing that kills me is the Clickhouse requirement. It makes it impossible to host on a lightweight VPS. Like why should my analytics platform require so much more compute than my simple static site? Am I missing something?

  • How to Run Custom Linux Images on Oracle Free Tier

    Jump

  • Okay this is excellent content, thank you!

    I went through and fiddled with some more stuff to try and get this working to no avail. However, it inspired me to take apart netboot.xyz a bit more, and I was able to grab an efi and get next boot to load the efi file. It took me too long to realize you need the console tty arguments as part of the boot cmdline to get it working interactively, but after I got there I got it netbooted. Sadly though, it almost immediately runs into an OOM condition and thus isn't practical on a free tier x86 asset. It would probably work on an aarch64 node, but I already have my allotted arm node spun up and working so I don't have a free one to practice with.

    Solid write-up though, thank you for putting that together!

  • How to Run Custom Linux Images on Oracle Free Tier

    Jump

  • The "gotcha" with Oracle free tier is that you can't install from arbitrary media, so the typical netboot.xyz or any iPXE workflow is out. No console access, no pre-bootloader access, nothing.

    I've been fiddling with kexec, but it doesn't seem like a supported method of loading the lkrn file from netboot...

    This is super interesting to me, so by all means, if you have the kung-fu to show how this works I would happily read through that!

  • How to Run Custom Linux Images on Oracle Free Tier

    Jump

  • Interesting. I've had two instances running for over 2 years and haven't noticed that. It might be that I just don't notice it though. I'm not scrutinizing it much.

  • How to Run Custom Linux Images on Oracle Free Tier

    Jump

  • I am not well versed with kexec but I always understood it to be a kernel reboot without power cycling the "metal." Please enlighten us with an example! I don't see how you'd replace the entire userspace (and possibly filesystem) with simply kexec.

  • How to Run Custom Linux Images on Oracle Free Tier

    Jump

  • Certainly! As others have said, don't hang anything worth value on it without an out of band backup strategy, they're famous for unscrupulously deleting things with no warning. Oracle is a miserable company.

    Free is free though!

  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    How to Run Custom Linux Images on Oracle Free Tier

    roguesecurity.dev /blog/custom-oracle-image

  • Is Kagi search engine worth it?

    Jump

  • Mullvad Leta is the way

  • A Beginners Guide To Selfhosting Part 1

    Jump

  • I would recommend giscus over discus, but yes, certainly a valid approach!

  • A Beginners Guide To Selfhosting Part 1

    Jump
  • Deleted

    "We need to go beyond Signal" – How today's AWS outage shows the weaknesses of centralized apps

    Jump

  • XMPP is the way! I recently dove in as a replacement to matrix and have really enjoyed it.

  • End-to-End Encrypted Chat that YOU Control: Hosting XMPP (Jabber) with Prosody

    Jump

  • Agreed, prosody is great! I've been doing some experimenting with ejabberd and it seems more enterprise-ready, but I haven't found anything that is discernable as far as feature advantages.

  • End-to-End Encrypted Chat that YOU Control: Hosting XMPP (Jabber) with Prosody

    Jump

  • Sounds like a great opportunity to breath some life into it! If you really have the itch for IRC, there's a slidge bridge to connect IRC to XMPP!

  • End-to-End Encrypted Chat that YOU Control: Hosting XMPP (Jabber) with Prosody

    Jump

  • Agreed! Runtime environment management is so much nicer with modern containerization. You or ally can't overstate how much better it is to have app stack state be entirely divorced from OS state. I'm very pleased they're back on the bandwagon as well.

    Stand up a server and come join our MUC!

  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    End-to-End Encrypted Chat that YOU Control: Hosting XMPP (Jabber) with Prosody

    roguesecurity.dev /blog/xmpp
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Systemd Service Hardening

    roguesecurity.dev /blog/systemd-hardening
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Self-host Meshtastic Metrics in Grafana

    roguesecurity.dev /blog/meshtastic-metrics
  • Meshtastic @mander.xyz
    StarkZarn @infosec.pub

    Self-host Meshtastic Metrics in Grafana

    roguesecurity.dev /blog/meshtastic-metrics
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Monitor your AREDN Node with Prometheus and Grafana

    roguesecurity.dev /blog/aredn-metrics
  • Amateur Radio @lemmy.radio
    StarkZarn @infosec.pub

    Monitor your AREDN Node with Prometheus and Grafana

    roguesecurity.dev /blog/aredn-metrics
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Intercept and Monitor TLS Traffic with mitmproxy Using Podman

    roguesecurity.dev /blog/mitmproxy-podman
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Leveraging Authelia for OIDC Single Sign-On (SSO) with Headscale

    roguesecurity.dev /blog/headscale-oidc
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Monitor Your Network the GPL Way with LibreNMS

    roguesecurity.dev /blog/librenms
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Monitoring OPNSense Logs with Grafana Loki (Part 2)

    roguesecurity.dev /blog/opnsense-loki-part2
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Monitoring OPNSense Logs with Grafana Loki

    roguesecurity.dev /blog/opnsense-loki
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    How to Host Headscale on a Linux Server with Podman Quadlets (Part 2)

    roguesecurity.dev /blog/headscale-quadlet-part2
  • Selfhosted @lemmy.world
    StarkZarn @infosec.pub

    Traefik with Socket Activation via Podman Quadlets

    roguesecurity.dev /blog/headscale-quadlet