irotsoma

joined 1 year ago
[–] irotsoma@lemmy.blahaj.zone 3 points 5 months ago

Problem isn't the hosting, it's the content licensing. It's difficult to get a legal copy of the content that you can actually possess. Without that, doesn't matter if you are streaming the content through self-hosted servers or playing it locally. It's the content itself that is the real issue. It's often just not "sold" only "licensed" or "rented".

[–] irotsoma@lemmy.blahaj.zone 39 points 6 months ago (3 children)

No. At least not in the way most people expect.

It does block some tracking and ads that Chrome alone allows or explicitly adds. But it simply shifts that tracking to Brave. The idea was that you'd still get the benefits of that tracking by giving all of your data to Brave instead. I honestly never was convinced by this considering your data is still being sold, just by a different company so it doesn't sound much better to me. Supposedly, according to them, Brave is more trustworthy and gives you more control over what they track and sell, but I don't trust that business model. There's no real incentive for them to do what they said they would.

[–] irotsoma@lemmy.blahaj.zone 1 points 6 months ago (1 children)

Right, but not all have fixed that. I still see lots of cases where I have to turn off several options individually. Though these could be sites outside of the EU jurisdiction, so they just don't care, or sites that make enough money off of the tracking data, that the fines would be insignificant even if the EU were to get around to fining them.

And again the comment stands that it's not the law, but the implementations that are bad. The law requires it to be simple, but that's not what was implemented.

[–] irotsoma@lemmy.blahaj.zone 28 points 7 months ago (6 children)

Problem is not the law, but that the companies implemented it in as annoying of a way as possible to get people pissed off about the law and force it to be dropped, or for what actually happened which is that it's too much work to not opt-in to the cookies which essentially makes it opt-out not in.

And the idea to remove the requirements for "simple statistics" or whatever terminology they use will just get abused by using other illicit tracking tech to link the cookies to uniquely identify a person anyway. So it will effectively make the popups unnecessary in any circumstances and still allow tracking for marketing and surveillance.

[–] irotsoma@lemmy.blahaj.zone 2 points 7 months ago

Depends on what exactly it's tracking. Is it tracking downloads from the Play Store. Installs based on a tracker embedded in the app once installed, or logins through the app. You'll likely have to ask the friend to check the terms of the sponsorship to determine that.

[–] irotsoma@lemmy.blahaj.zone 3 points 7 months ago

It's become a pretty standard practice on Apple, Samsung, and Google devices as well as many other Android manufacturers to enable data sharing by default in the US. Especially the last few administrations want as much data as possible about the people, and in the US pretty much all of the companies share this kind of data pretty freely without requiring any judicial oversight since the supreme court has been corrupted. And the current administration HSS basically cut all investigation into any corporations that are friendly to them, so there's no essentially no risk in collecting, leaking, or selling this data, so why bother making it opt-in. And recently, it's explicitly risky to not collect and share as much data as possible with the government.

[–] irotsoma@lemmy.blahaj.zone 2 points 7 months ago

This is what I use. I mostly just have the DNS filter turned on to allow for blocking similar to what my pihole does at home, bit allows me to have it when I'm outside of the house, too. But it has lots of other capabilities like a firewall, proxying through Wiegaurd or Tor, anti-censorship features, etc. It does use your device's VPN connection but it creates a local VPN just to force routing all apps through it and then if you want an additional external VPN you use the proxying, but that's optional.

But the DNS-only option doesn't drain the battery like a full filter/firewall may, so that's one reason I only use it for that. And I use GrapheneOS, so apps are easier to control at the OS level than standard Android, do it's not as necessary for me anyway.

[–] irotsoma@lemmy.blahaj.zone 2 points 7 months ago* (last edited 7 months ago) (1 children)

Yeah, forgejo will give you many of the features of GitHub. Not the proprietary ones like the Actions Marketplace of course, but a lot of equivalent features. It's lightweight enough though that even if you never use it for anything beyond git, creating pull requests, and some basic CI, it's not going to require much power to run it.

Do you need the public to have access to it? That would be the only reason for federation that I could think of. That's not available quite yet.

[–] irotsoma@lemmy.blahaj.zone 8 points 7 months ago* (last edited 7 months ago)

They don't want change. That's never been the goal. The goal is to create enemies, but make them people who are not able to fight back. Fascism requires an enemy to "fight" in order to get people to ignore the bad stuff and focus on the fight. Fascism can't survive in a peaceful, happy society. The mistake Nazis made was picking a group that was too large and they didn't already have a noose around.

[–] irotsoma@lemmy.blahaj.zone 2 points 7 months ago

Nah they'll be able to get out, likely for free if they don't mind a bit of detainment first. What they should be doing is finding a new place to work or seeing if their current employers will move them to an office in another country. And big companies should be expanding their offices in other countries to make up for the loss of workers, or moving their offices back to places where American tech workers are willing to live rather than moving to conservative states and then pretending there aren't educated workers for them to hire in the US.

[–] irotsoma@lemmy.blahaj.zone 23 points 7 months ago (5 children)

I self-host forgejo, it's one of the easiest systems I self-host.

But which features other than a plain git repo are you looking for? That will mostly determine your options. There are tons of git repos, and even just a plain git repo on a server with an ssh tunnel is enough if you don't need anything beyond that.

[–] irotsoma@lemmy.blahaj.zone 6 points 7 months ago

Uggghhh, I have to fly next month. Not going to be fun...

 

I'm starting a project to make my home hosted services exposure to the internet a little easier to keep secure.

I have various web services such as Immich, JellyFin, and a few other services that either have high storage needs and this would be expensive in the cloud, or things that use more private data. Many of these are exposed to the internet. This network has a domain assigned and each service is assigned a subdomain. These are running in a K0s Kubernetes cluster on a separate VLAN from my home devoces on a couple of NUCs and a raspberry pi. And use Traefik reverse proxy and Keycloak OIDC.

I also have a few VPS's running things that need faster responses or don't store as much data. This has a separate domain.

Right now I have an OPNSense router that is the target of all the home domain's traffic using dynamic DNS and that forwards it to Traefik on the Kubernetes cluster.

I'd like to instead close off the home network a bit more so I don't have to devote so much to security and can just drop a lot of the malicious connections coming in regularly. I also have the problem that my ISP still only offers 6rd for IPv6 which is basically useless. So I was considering several tunneling technologies that would have the exit node on a VPS. But also need to be able to access the services while at home without the traffic exiting the network.

I've narrowed in on headscale/tailscale and pangolin. I really like that pangolin uses traefik because I'm already familiar with it and it's already in use in both my domains.

So I'm going to start working on setting up pangolin to see how it goes, but I haven't seen many examples and I haven't seen any that use Kubernetes on the internal network side. Sure I could set up a separate docker instance to host the services, but I really like that kubernetes is able to load balance so that one of my NUCs is almost always in low power mode during off hours when no maintenance tasks are running. So I don't want to put other non-kubernetes services on there nor do I want to have to set up a totally separate server if not necessary.

I haven't dug in too deep yet, so I was hoping to see if anyone else had any experience with setting up pangolin with kubernetes on the internal network side?

view more: next ›