vegetaaaaaaa

vegetaaaaaaa, 2 days ago

Netdata can also expose metrics to prometheus which you can then use in Grafana for more advanced/customizable dashboards learn.netdata.cloud/docs/…/prometheus

vegetaaaaaaa, 4 days ago

lsblk also show block devices and is prettier than looking directly at /sys/class/block

vegetaaaaaaa, 4 days ago

I just don’t have that much time to spend on initial implementation and upkeep

Well k8s is a poor choice of platform for you :D

vegetaaaaaaa, 25 days ago

Don’t mind him. He’s always there ranting about who knows what whenever software he dislikes is mentioned. Lookup his comment history for more of the same.

Easiest method to summon him is to mention Nextcloud and Proxmox in the same sentence.

vegetaaaaaaa, 26 days ago

Not an answer but still relevant: I actively avoid enabling unattended-upgrades for third-party repositories like Docker (or anything that is not an official Debian repository) because they don’t have the same stability guarantees, and rely on other upgrade notification methods instead.

how bad of an idea is this to run a DNS in docker and use it for the host and other containers?

Personally I would simply install dnsmasq directly on the host because it is one apt install and a configuration file away. Keep it simple.

vegetaaaaaaa, 25 days ago

Usually you would have a second DNS resolver configured in /etc/resolv.conf (or whatever name resolution config system you are using, resolvconf, systemd-networkd, etc). The system will fall back to this resolver if the first resolver fails to respond (and/or replies NXDOMAIN, I’m not sure. The exact order and fallback conditions may vary depending on which system you use). This can be another dnsmasq instance, a public DNS resolver, your ISP’s resolver, etc. This allows at least basic DNS resolution to work before your dnsmasq instance comes back up.

I would also add automatic monitoring for dnsmasq (either check that the service/container is running, or check the TCP connection to port 53, or check that DNS resolution is working for a known domain, etc)

vegetaaaaaaa, 25 days ago

msmtp never failed me

vegetaaaaaaa, 24 days ago (edited 24 days ago)

You can definitely replace senders with correct mail addresses for relaying through SMTP servers that expect them (this is what I do):

<span style="font-style:italic;color:#969896;"># /etc/msmtprc
</span><span style="color:#323232;">account default
</span><span style="color:#323232;">...
</span><span style="color:#323232;">host smtp.gmail.com
</span><span style="color:#323232;">auto_from on
</span><span style="color:#323232;">auth on
</span><span style="color:#323232;">user myaddress
</span><span style="color:#323232;">password hunter2
</span><span style="color:#323232;">
</span><span style="font-style:italic;color:#969896;"># Replace local recipients with addresses in the aliases file
</span><span style="color:#323232;">aliases /etc/aliases
</span>

<span style="font-style:italic;color:#969896;"># /etc/aliases
</span><span style="color:#323232;">mailer-daemon: postmaster
</span><span style="color:#323232;">postmaster: root
</span><span style="color:#323232;">nobody: root
</span><span style="color:#323232;">hostmaster: root
</span><span style="color:#323232;">usenet: root
</span><span style="color:#323232;">news: root
</span><span style="color:#323232;">webmaster: root
</span><span style="color:#323232;">www: root
</span><span style="color:#323232;">ftp: root
</span><span style="color:#323232;">abuse: root
</span><span style="color:#323232;">noc: root
</span><span style="color:#323232;">security: root
</span><span style="color:#323232;">root: default
</span><span style="color:#323232;">www-data: root
</span><span style="color:#323232;">default: myaddress@gmail.com
</span>

(the only thing I changed from the defaults in the aliases file is adding the last line)

This makes it so all/most system accounts susceptible to send mail are aliased to root, and root in turn is aliased to my email address (which is the one configured in host/user/password in msmtprc)

Edit: I think it’s actually the auto_from option which interests you. Check the msmtp manpage

vegetaaaaaaa, 23 days ago

github.com/chriswayg/ansible-msmtp-mailer/…/14While msmtp has features to alter the envelope sender and recipient, it doesn’t alter the “To:” or “From:” message itself. When the Envelope doesn’t match these details, it can be considered spam

Oh I didn’t know that, good to know!

The proposed one-line wrapper looks like a nice solution

vegetaaaaaaa, 1 month ago

See you back on Debian in a few months

vegetaaaaaaa, 1 month ago

RSS feeds

vegetaaaaaaa, 1 month ago (edited 1 month ago)

How does this compare to awesome-selfhosted.net ?

vegetaaaaaaa, 1 month ago

docs.nextcloud.com/…/source_installation.html

vegetaaaaaaa, 1 month ago

• What backup service do you use? - Lemmy.world
• What are your backup solutions? - Lemmy.world
• How do you guys back up your server? - Lemmy.world
• How do you backup things to your server? - Lemmy.world
• How to store backups? - Lemmy.world
• How do you backup your data? - Lemmy.world
• Need help with a backup solution - Lemmy.World

vegetaaaaaaa, 1 month ago

If this is a “shared hosting” type of server (LAMP stack), you can usually run PHP applications (assuming they are pre-packaged and don’t need composer install or similar during the install process). Check awesome-selfhosted.net/platforms/php.html

vegetaaaaaaa, 1 month ago

I think Peertube would be overkill for a single channel, but it’s the closest to YouTube in terms of features (multiple formats/transcoding, comments, etc). Otherwise I would just rip the channel with yt-dlp and setup a “mirror” on something simple like a static site or blog. Find something that works, then automate (a simple shell script + cron job would do the trick).

vegetaaaaaaa, 1 month ago

On my desktop I do this with quodlibet alongside the KDE connect applet + KDE connect android app, which lets the phone control media players on the desktop. You probably don’t want to run a full desktop environment just for this, but it’s a good option if you already have a desktop PC with decent speakers.

Mentioning it just in case, because it works for me. If you’re looking for a purely headless server there are other good suggestions in this thread.

vegetaaaaaaa, 1 month ago

I can manually monitor but it doesn’t happen just then

Setup proper monitoring with history. That way yo don’t have to babysit the server, you can just look at the charts after a crash. I usually go with netdata

vegetaaaaaaa, 1 month ago

You could create the alias alias docker=“podman”

There’s even an official Debian package that takes care of this for you: packages.debian.org/bookworm/podman-docker

vegetaaaaaaa, 2 months ago (edited 2 months ago)

sftp://USERNAME@SERVER:PORT in the address bar of most file managers will work. You can omit the port if it’s the default (22), you can omit the username if it’s the same as your local user.

You can also add the server as a favorite/shortcut in your file manager sidebar (it works at least in Thunar and Nautilus). Or you can edit ~/.config/gtk-3.0/bookmarks directly:

<span style="color:#323232;">file:///some/local/directory
</span><span style="color:#323232;">file:///some/other/directory
</span><span style="color:#323232;">sftp://my.example.org/home/myuser my.example.org
</span><span style="color:#323232;">sftp://otheruser@my.example.net:2222/home/otheruser my.example.net
</span>

vegetaaaaaaa, 2 months ago

Quite fast.

KVM/libvirt VM with 4GB RAM and 4vCores shared with a dozen other services, storage is not the fastest (qcow2-backed disks on a ext4 partition inside a LUKS volume on a 5400RPM hard drive… I might move it so a SSD sometime soon) so features highly dependent on disk I/O (thumbnailing) are sometimes sluggish. There is an occasional slowdown, I suppose caused by APCu caches periodically being dropped, but once a page is loaded and the cache is warmed up, it becomes fast again.

Standard apache + php-fpm + postgresql setup as described in the Nextcloud official documentation, automated through this ansible role

vegetaaaaaaa, 2 months ago

Obfuscation can be helpful in not disclosing which are some services or naming schemes

The “obfuscation” benefits of wildcard certificates are very limited (public DNS records can still easily be found with tools such as sublist3r), and they’re definitely a security liability (get the private key of the cert stolen from a single server -> TLS potentially compromised on all your servers using the wildcard cert)

vegetaaaaaaa, 2 months ago (edited 2 months ago)

Syslog over TCP with TLS (don’t want those sweet packets containing sensitive data leaving your box unencrypted). Bonus points for mutual authentication between the server/clients (just got it working and it’s 👌 - my implementation here

It solves the aggregation part but doesn’t solve the viewing/analysis part. I usually use lnav on simple setups (gotty as a poor man’s web interface for lnav when needed), and graylog on larger ones (definitely costly in terms of RAM and storage though)

vegetaaaaaaa, 2 months ago

In my basic tests (initial setup of an AD DC, just a lab environment), it does work through WinRM. What gave me a headache is tying to enable “secure” (TLS) WinrRM using a self-signed certificate. I should do some cleanup and post the setup someday.