Dust0741

joined 2 years ago
[–] Dust0741@lemmy.world 7 points 14 hours ago (1 children)

Just an FYI, pivpn is in a weird semi-maintained mode. You're probably fine, and I loved using Pivpn, but wg-easy is more maintained.

[–] Dust0741@lemmy.world 73 points 3 days ago (17 children)
[–] Dust0741@lemmy.world 7 points 1 month ago (1 children)

Don't ever use bit.ly. Post the real link

 

Has anyone tried Saily? (https://saily.com/) It claims to be an app to easily setup international eSIMs.

I am curious about its setup process and the information they collect. Can you sign up without the app? How about the app on a separate user profile (android)? Do they require ID to signup (or similar)?

It is a part of NordVPN, which gives some confidence that it is not a scam, however Nord doesn't have a good reputation for privacy, but neither do SIM's in general.

Is it worth bothering with anything like Saily for travel, or does the tried and true pre-paid SIM's?

[–] Dust0741@lemmy.world 117 points 1 month ago (50 children)

In what country can you get raided due to high electricity usage?

[–] Dust0741@lemmy.world 2 points 1 month ago (1 children)

Don't get attached to phones.

[–] Dust0741@lemmy.world 3 points 1 month ago (1 children)

I do this. Its great because of catchall emails and the ability to make one address per merchant. Then if a company leaks your email or gets hacked, you can simply change the email from hacked-company@domain.tld to hacked-company2@domain.tld and block the old address.

It also is good for ownership as you said. If Tuta gets purchased by Google (for example), then you can simply pivot to any of the many other email providers and not rely on a company being not evil.

[–] Dust0741@lemmy.world 15 points 2 months ago (1 children)

Renovate bot is the answer. I self host it. Feel free to ask questions

[–] Dust0741@lemmy.world 4 points 2 months ago

Makes a PR in a repo for updated versions. I.e. you have: image: nginx:1 And it'll make a PR for the latest version

A CI/CD tool will monitor for changes like this and redeploy.

 

Are there any guides out there for this? I can't seem to find anything. Renovates docs are good, but don't have a lot of detail on setting up the docker image for self hosting.

Thanks!

[–] Dust0741@lemmy.world 2 points 2 months ago* (last edited 2 months ago)

It should be yea. Just make sure you pass the USB through (or whatever connection method) and TEST

I've had success using the normal apt package

 

I am currently using NPM as my reverse proxy. It runs on a Raspberry Pi which also does pihole. I have a separate server for other non internet critical systems.

So local IP address mappings point a subdomain to the pi's IP, then nginx points to the correct device and port.

I am wondering if Traefik works the same way. Can I run Traefik on the Pi, then point my other sever at it? (I believe Caddy doesn't allow this)

 

I would like to migrate away from using .env for secrets, and use something hashicorp vault. How would one do this for something like pihole, where there is an env var with the password?

[–] Dust0741@lemmy.world 7 points 3 months ago* (last edited 3 months ago)

Unfortunately you can get a secure phone OR that. No overlap.

Edit: maybe one day

[–] Dust0741@lemmy.world 7 points 3 months ago

Markdown everything

[–] Dust0741@lemmy.world 2 points 3 months ago
 

With the latest release of android it now supports some Linux functionality. I got docker installed simply by following Docker's docs.

Any thoughts or uses for a mobile homelab? What would be useful to have mobile?

 

cross-posted from: https://lemmy.world/post/26434369

I want to compare the security of running my own:

  • Wireguard server
  • http proxy
  • socks5 proxy
  • Shadowsocks proxy

I currently port forward for wireguard, but would like some backups/alternatives, and censorship circumvention options. How risky or insecure are these protocols? Can I use them as normal VPNs into my homelab?

Any resources to research further?

Also: should I use my IP, or a domain? Which is better for censorship circumvention?

1
submitted 4 months ago* (last edited 4 months ago) by Dust0741@lemmy.world to c/selfhosted@lemmy.world
 

I want to compare the security of running my own:

  • Wireguard server
  • http proxy
  • socks5 proxy
  • Shadowsocks proxy

I currently port forward for wireguard, but would like some backups/alternatives, and censorship circumvention options. How risky or insecure are these protocols? Can I use them as normal VPNs into my homelab?

Any resources to research further?

Also: should I use my IP, or a domain? Which is better for censorship circumvention?

 

Is there a way to setup an SMB share or similar via docker? I want to be able to easily turn it off and bind it to a specific folder, and I am comfortable with docker.

Thanks!

 

I host Crafty Controller (docker) on my desktop, because it is faster than my server. However, I'd like it for a MC server to be always running, so I don't need to power on my desktop for anyone to join.

Minecraft runs fine on the server, as long as there aren't many people on, and aren't exploring new chunks. Generating new chunks is very cpu intensive, but one person exploring can be fine and is acceptable. However, I want a way to switch the same server to run on my desktop, nice and fast.

So basically, it of the time I want MC running on my server, and then when multiple people are playing (including me) I want to be able to turn off the server, and then turn it back on at my desktop.

I use NPM for my domain and SSL, however it'd be fine if people access at serverIP:port and desktopIP:port. That is acceptable (doesn't need to be mc.example.com, but would be nice)

Would Syncthing be the tool to use? I could use it to sync the folder of Crafty to each computer...

 

Is there any way to host an android app in a web browser?

Ideally with docker, likely all of Android, not just an app, but running just an app would be amazing.

 

I may explain this poorly, so feel free to ask clarifying questions.

I have my homelab setup, and you can access services at service.domain.com only on my network or on my Tailscale tailnet.

I use a pihole for my DNS, and so does my dad.

Would it be possible to install Tailscale on his pihole (or elsewhere) so that his entire network can access my services (ie service.domain.com) but not route all traffic over my pihole and still use his?

-1
submitted 8 months ago* (last edited 8 months ago) by Dust0741@lemmy.world to c/selfhosted@lemmy.world
 

I use Crafty Controller for Minecraft. I have a server running at 192.168.50.16:25540. I want it to resolve to minecraft.example.com. I have Nginx Proxy Manager setup for my domain and can access it from inside my network, but it'd be nice to be able to use a domain instead.

NPM only has options for http and https, so is this even possible using NPM?

EDIT: this is for only internal access I have external access via tailscale.

view more: next ›