[-] lemmyvore@feddit.nl 65 points 9 months ago

We don't know yet, the first frame has been rendering for the last two weeks.

[-] lemmyvore@feddit.nl 56 points 10 months ago

Everybody should be using DNS over HTTPS (DoH) or over TLS (DoT) nowadays. Clear DNS is way too easy to subvert and even when it's not being tampered with most ISP snoop on it to compile statistics about what their customers visit.

DoH and DoT aren't a full-proof solution though. HTTPS connections still leak domain names when the target server doesn't use Encrypted Hello (ECH) and you need to be using DoH for ECH to work.

Even if all that is in place, a determined ISP, workplace or state actor can identify DoH/DoT servers and compile block lists, perform deep packet inspection to detect such connections regardless of server, or set up their own honey trap servers.

There's also the negative side of DoH/DoT, when appliances and IoT devices on your network use it to bypass your control over your LAN.

[-] lemmyvore@feddit.nl 57 points 11 months ago

Means they'd like to replace cookies with something proprietary that they control.

[-] lemmyvore@feddit.nl 58 points 2 years ago

Torrent clients are banned from the Apple Store and you can't sideload apps. It's a very restrictive device in many respects.

[-] lemmyvore@feddit.nl 75 points 2 years ago

Title is a bit misleading. Starting with 2024 the site will be moving to a new API. The payment is too be able to continue to use the old API a while longer (for software that can't be changed yet).

[-] lemmyvore@feddit.nl 68 points 2 years ago

I've had Google temporarily lock my account even though:

  • I knew my username and password.
  • I knew the answer to my secret questions.
  • I had the 2FA code from the authenticator app.
  • I had access to my email and could confirm it's me using links they sent in mails.
  • They had my phone number and could send a text with a confirmation code.
  • They could pop up a confirmation notification right on the phone.
  • They could probably have asked me to fart in B flat and they'd detect it, they're so far up my ass.

None of that matters. Their stupid system will automatically decide to lock you out for whatever reason and that's it.

I'm glad I reduced the use of that email address down to nothing and that I moved out my calendar and events and I'm no longer using Google Pay.

[-] lemmyvore@feddit.nl 53 points 2 years ago

Oil lobby and other interests. Follow the money. Plus it's easy to play on people's fears about radioactive waste.

Oh well, countries that know what's what just quietly build and use their reactors and go about their business. Finland for example is set for a while now.

[-] lemmyvore@feddit.nl 65 points 2 years ago

There's only so many ways you can arrange a group of people, what they post and their audience. The fediverse is exploring most variations right now and it came up with things like decentralization and activity pub which are unlike any of the big platforms of yore.

It resembles the internet of the 90s only superficially. The underlying infrastructure and technology is completely different today. Most of the lean towards the 90s is caused by taking inspiration from the way they dealt with similar threats.

98

I've been using Gandi for over 20 years, almost since it was founded. Since being acquired in 2019 by Montefiore Investment and this year by Total Webhosting Solutions their service have become more and more expensive and have finally priced me out.

For context, I administer a bunch of domains, mailboxes and HTML websites for my family and extended family, and I prefer services hosted in the EU because of GDPR and local availability.

This post is meant as a list of practical decisions in 2023 for the small time selfhoster. If anybody wants to comment on what Gandi (or rather TWS) is doing feel free to do so in the comments, I'm curious myself.

Prices I've mentioned use my country's VAT so will vary slightly for you.

Domain names

Domain names have always been a bit on the expensive side with Gandi but they used to include a lot of features for free with them (SSL, DNSSEC, mailboxes, a small static website, WHOIS privacy, local contact for TLDs that need it etc.) and what they added extra was proportional to the base TLD cost.

For the next renewal all my domains were slated to jump to €28 across the board. If you have domains with Gandi try adding some renewals to the cart and check in advance.

I had to look for an European registrar because I have lots of European ccTLDs that the usual suspects like Cloudflare and Porkbun don't support.

I'm moving to INWX.de and will be saving 25-60% per domain. This takes into account WHOIS privacy where needed for an extra 5€/domain (EU ccTLDs are private due to GDPR but we own a couple of TLDs too) as well as local contact services where required (price varies by country).

Email

I manage multiple mailboxes but they have low traffic and low storage requirements. Gandi will be offering them at €55/mailbox/year. I'm not questioning their pricing, 3-4€/month for email is common, but typically charged by email-focused services.

Anyway, this per-mailbox model would price us into hundreds of euros for resources that go 99% unused. I'm switching to Migadu.com, who allows unlimited domains and mailboxes (within common sense) under a single account and charges for the conflated storage space and emails sent/received across all mailboxes.

Migadu tiers start at 20€/year for 5GB and 200/20/day (soft limits).

Webhosting

We were using Gandi's smallest hosting package for about 100€/year, which was slated to jump to €135. Not an outlandish price for your typical PHP + MySQL hosting, especially since it had some VPS-like features. Then again the typical webhosting service would include a couple of mailboxes and some other goodies.

This was a good opportunity for us to reevaluate out hosting needs and realize we can ditch PHP+MySQL (if we really have to revisit it we'll consider VPS offers in the future). It's mostly static sites, image galleries and a bit of blogging. We've cached all our stuff as plain HTML/CSS/images and moved it to BunnyCDN.

Bunny lets you define a file bundle, gives you FTP access with a unique username+password, lets you pick the extent of replication, puts a CDN on top of it, and lets you point a domain name to it. Also throws a bunch of web server-ish features on top like rules/rewrites and Let's Encrypt SSL.

They actually offer more features than that but I've just mentioned the minimum you need for serving a bunch of static websites.

Bunny pricing starts at $0.01/GB (with a minimum of $1/month) and you pay as you go.

Nameservers

Since we're doing this I've taken the opportunity to dab into DNS. Turns out it's not that hard. There's only like half a dozen of commonly used DNS record types and everybody's helping you with them – email services like Migadu generate the email-related ones for you, registrars and managed DNS services generate the SOA for you, they have forms that tell you what fields are needed etc.

There are lots of managed DNS options. Registrars usually include nameservers and let you mess with the records so INWX was one choice. Bunny offers DNS service that integrates with their CDN. deSEC is a completely free service I'll be using as backup.

All of the above also offer APIs so a bash script will be taking care of dynamic DNS.

[-] lemmyvore@feddit.nl 57 points 2 years ago* (last edited 2 years ago)

We badly need Lemmy clients that can merge instances even if they're defederated, as well as the other way around, filter out entire instances even if your instance won't defederate from them. Letting instance owners dictate what you can or cannot see is not the way.

There are clients that will do the former (eg. Liftoff) but I'm not aware of any that will do the latter. I don't understand why, it can't be that hard to filter users and communities by instance.

[-] lemmyvore@feddit.nl 62 points 2 years ago* (last edited 2 years ago)

Driver shortage led the county to reconfigure school bus routes trying to "stretch" existing drivers, but the new routes made things even worse. Kids weren't stuck on the bus, they were stuck waiting for buses at bus stops.

Better articles:

[-] lemmyvore@feddit.nl 68 points 2 years ago

If you try to access an old Linux install you could run into the exact same problem. Both Linux and Windows nowadays use filesystems with permissions embedded into them, so if the user on the new install doesn't match the old one you'll have a problem.

[-] lemmyvore@feddit.nl 56 points 2 years ago

We already have sufficient attestation for the web. It's called SSL/TLS. It guarantees that what the browser sees is what the server put out.

WEI is about blocking the browser from modifying the website in any way on the client side. Can it be used for good? Sure. Will the company whose income is 90% ads, spies on billions of people, and owns 90% of the browser market share use it for good? Hmm...

18
submitted 2 years ago* (last edited 2 years ago) by lemmyvore@feddit.nl to c/selfhosted@lemmy.world

Upgrading a self-hosted server (1)

Welcome

Hi, I'm starting a series of posts that will follow the upgrades I'll be doing to a self-hosted machine that serves as NAS and also runs all kinds of self-hosted software. I'm lazy so it will probably take time, don't expect me to post too often.

About me: I've been using Linux exclusively for personal use (both desktop and servers) for about 20 years now. I've used several distributions over the years, I've built my own stuff from source (including kernels) and I've done Linux From Scratch. I'm not a Linux expert or professional sysadmin but I know my way around it, and I can learn what I don't know. So don't be afraid to make any suggestions no matter how complicated.

The current state of the machine

  • It's a PC using an i5 7400 CPU, has a built-in GPU with support for h264 hardware encoding and MPEG2, VP8, VP9 and HEVC hardware decoding (this will come in handy for video transcoding).
  • Only 4 GB of RAM, I have ordered a dual 2x16 GB kit.
  • The system drive is a Transcend M.2 SSD (32 GB). SATA rather than PCIe unfortunately but it will do fine for the time being.
  • The OS is Ubuntu Server 16.04 LTS using Expanded Security Maintenance for updates.
  • It's currently running SSH, NFS, Samba, CUPS, OpenVPN, Emby and Deluge on bare metal. Some of them come from distro packages, some from binary releases straight from the developer.
  • There are 6 HDDs forming 3 pairs of RAID 1 arrays. 6 drives was a limit I chose from the beginning, and the case and motherboard were chosen accordingly (cage for 6 drives and 6 SATA connectors).
  • My ISP provides a public dynamic IP and allows port forwards.
  • I have a router that I've recently upgraded to the latest OpenWRT so it also runs Linux, can install packages, it has a web admin interface etc. and can do some interesting stuff.

What I'd like to do

  • Increase the RAM to 32 GB.
  • Stick with a Linux distro, as opposed to a NAS-tailored OS, Unraid etc.
  • Install Debian Stable on a SSD, most likely via debootstrap from the Ubuntu system.
  • Add a GRUB menu entry that makes a passthrough to the other system, so I can keep them both around for a while.
  • Use docker-compose and possibly Portainer for as many of the services as it makes sense. Not sure if it's worth bothering to make containers for things like SSH, NFS, Samba.
  • Add more services. I'd like to try Jellyfin, NextCloud and other stuff (trying to degoogle for example).
  • I'd like to find a better solution for accessing services from outside the LAN. Currently using OpenVPN which is nice for individual devices but gets complicated when you want an entire remote LAN to be able to access (to allow smart TVs or Chromecast to use Emby/Jellyfin for example). I'm hoping Authelia + reverse proxy will be able to help with this.

What I'm not interested in

  • Not interested in using Plex. I've used it for a couple of years, it's a fine piece of software but I don't like the fact they now mandate access through their server or injecting ads.
  • Not interested in changing the filesystem or the RAID setup for the HDDs. RAID 1 pairs give me enough redundancy. The HDD upgrades are very simple. I'm fine with losing 50% of capacity.

Any and all suggestions and comments are welcome! Even if they're about things I said I'm not interested in. It's always possible there are things I haven't considered.

9
submitted 2 years ago by lemmyvore@feddit.nl to c/android@lemmy.world

So I got a notification that Google is going to retire the reminders feature from Calendar and make it a Tasks feature instead.

The only reason I was using Google:s Calendar app was for their reminders (and because they've made it impossible for third party apps to use reminders).

The most important part of reminders for me was the way they worked, by putting up a notification that didn't go away until manually dismissed. Very useful for important stuff like taking a medicine.

Any suggestions for other apps that have similar notifications? It would be great if they were a calendar app, and even greater if they are synced to a calendar over a standard (like CalDAV etc.) so I can self-host it.

view more: ‹ prev next ›

lemmyvore

joined 2 years ago