vegetaaaaaaa

vegetaaaaaaa, 9 days ago (edited 6 days ago)

Shaarli + stack theme

vegetaaaaaaa, 23 days ago

I use netdata (the FOSS agent only, not the cloud offering) on all my servers (physical, VMs…) and stream all metrics to a parent netdata instance. It works extremely well for me.

Other solutions are too cumbersome and heavy on maintenance for me. You can query netdata from prometheus/grafana [1] if you really need custom dashboards.

I guess you wouldn’t be able to install it on the router/switch but there is a SNMP collector which should be able to query bandwidth info from the network appliances.

vegetaaaaaaa, 1 month ago

lsblk also show block devices and is prettier than looking directly at /sys/class/block

vegetaaaaaaa, 1 month ago

github.com/chriswayg/ansible-msmtp-mailer/…/14While msmtp has features to alter the envelope sender and recipient, it doesn’t alter the “To:” or “From:” message itself. When the Envelope doesn’t match these details, it can be considered spam

Oh I didn’t know that, good to know!

The proposed one-line wrapper looks like a nice solution

vegetaaaaaaa, 2 months ago

I think Peertube would be overkill for a single channel, but it’s the closest to YouTube in terms of features (multiple formats/transcoding, comments, etc). Otherwise I would just rip the channel with yt-dlp and setup a “mirror” on something simple like a static site or blog. Find something that works, then automate (a simple shell script + cron job would do the trick).

vegetaaaaaaa, 3 months ago

Quite fast.

KVM/libvirt VM with 4GB RAM and 4vCores shared with a dozen other services, storage is not the fastest (qcow2-backed disks on a ext4 partition inside a LUKS volume on a 5400RPM hard drive… I might move it so a SSD sometime soon) so features highly dependent on disk I/O (thumbnailing) are sometimes sluggish. There is an occasional slowdown, I suppose caused by APCu caches periodically being dropped, but once a page is loaded and the cache is warmed up, it becomes fast again.

Standard apache + php-fpm + postgresql setup as described in the Nextcloud official documentation, automated through this ansible role

vegetaaaaaaa, 3 months ago (edited 3 months ago)

Syslog over TCP with TLS (don’t want those sweet packets containing sensitive data leaving your box unencrypted). Bonus points for mutual authentication between the server/clients (just got it working and it’s 👌 - my implementation here

It solves the aggregation part but doesn’t solve the viewing/analysis part. I usually use lnav on simple setups (gotty as a poor man’s web interface for lnav when needed), and graylog on larger ones (definitely costly in terms of RAM and storage though)

vegetaaaaaaa, 3 months ago

The migration is bound to happen in the next few months, and I can’t recommend moving to incus yet since it’s not in stable/LTS repositories for Debian/Ubuntu, and I really don’t want to encourage adding third-party repositories to the mix - they are already widespread in the setup I inherited (new gig), and part of a major clusterfuck that is upgrade management (or the lack of). I really want to standardize on official distro repositories. On the other hand the current LXD packages are provided by snap (…) so that would still be an improvement, I guess.

Management is already sold to the idea of Proxmox (not by me), so I think I’ll take the path of least resistance. I’ve had mostly good experiences with it in the past, even if I found their custom kernels a bit strange to start with… do you have any links/info about the way in which Proxmox kernels/packages differ from Debian stable? I’d still like to put a word of caution about that.

vegetaaaaaaa, 3 months ago (edited 3 months ago)

clustering != HA

The “clustering” in libvirt is limited to remote controlling multiple nodes, and migrating hosts between them. To get the High Availability part you need to set it up through other means, e.g. pacemaker and a bunch of scripts.

vegetaaaaaaa, 4 months ago

Lemmy/Reddit feeds, Yotube channels and other video hosting sites, IT/technical blogs and websites, software releases, newspapers, personal blogs… Currently there are 651 feeds in my feed reader. Actually found this post in my RSS feeds.

vegetaaaaaaa, 3 months ago (edited 3 months ago)

You can probably use it by templating out github.com/nodiscc/xsrv/blob/…/index.html.j2 manually or using jinja2. basically remove the {% …%} markers and replace {{ … }} blocks with your own text/links.

You will need a copy of the res directory alongside index.html (images, stylesheet).

You can duplicate col-1-3 mobile-col-1-1 and col-1-6 mobile-col-1-2 and divs as many times as you like and they will arrange themselves on the page, responsively.

But yeah this is actually made with ansible/integration with my roles in mind.

vegetaaaaaaa, 4 months ago

Disk I/O always been the weak point of RPi, with slow USB being the only way to attach drives, and the USB port sharing the same bus as the network controller. A requirement for a frequently used Network-Attached Storage is… well… decently fast network and storage access. The Pi will not cut it for this specific task (moving external USB drives around your house would be faster and more practical).

vegetaaaaaaa, 4 months ago

It’s MIT github.com/go-gitea/gitea/blob/main/LICENSE

vegetaaaaaaa, 4 months ago

…orlitzky.com/…/in_defense_of_self-signed_certifi…

vegetaaaaaaa, 4 months ago

I use netdata badges to display the current status of services/HTTP checks to my users.

vegetaaaaaaa, 5 months ago

Debian is another popular choice for servers (Ubuntu is based on Debian, with a few things bolted on top which are in my opinion not worth it). The default Debian installation only consumes 1-2GB disk space (just deselect any desktop environment during the installation process)

vegetaaaaaaa, 6 months ago

www.rssboard.org/rss-specification

vegetaaaaaaa, 7 months ago

Could you detail how you would do this?

I would re-read all docs about podman networking, different network modes, experiment with systemd PrivateNetwork option, re-read some basic about network namespaces, etc ;) I have no precise guide as I’ve never attempted it, so I would do some research, trial and error, take notes, etc, which is the stage you’re at.

Edit: cloudnull.io/…/35d5ccf03e4e6cbd03c3c45528775ab3, …

Could you confirm if one can reach one’s containers on the loopback address in a separate network namespace on podman?

I think each pod uses its own network namespace [1]. You should check the docs and experiment (ip netns, ip addr, ip link, ip route…).

I think it’s doable, but pretty much uncharted territory - at least the docs for basic building blocks exist, but I’ve never come across a real world example of how to do this. So if you go this way, you will be on your own debugging, documenting and maintaining the system and fixing it when it breaks. It will be an interesting learning experiment though, hope you can document and share the outcome. Good luck!

vegetaaaaaaa, 8 months ago

ewww you’re right. Thanks for reporting this, I will have a look at it.

github.com/awesome-selfhosted/…/281

vegetaaaaaaa, 8 months ago (edited 8 months ago)

I use openLDAP + LDAP Account Manager and Self-service password. Deployed/managed through this ansible role

vegetaaaaaaa, 8 months ago (edited 8 months ago)

I want to look into apt-cacher-ng for learning purposes, to stop 10s of VMs in my homelab from adding load to Debian official repos, and also to check if there is a way to have it only mirror a list of “approved” packages.

saw a huge time improvement even though I have a good internet connection

Note that for best performance you should use deb.debian.org

Semi-related I have set up a personal APT repository on gitlab pages: nodiscc.gitlab.io/toolbox/ (I think Ubuntu users would call that a “PPA”). It uses aptly and a homegrown Makefile/Gitlab CI-based build system (sources/build tools are linked from the page). I wouldn’t recommend this exact setup for critical production needs, but it works.

vegetaaaaaaa, 11 months ago

I use thunderbird connected to my normal mail account and the dovecot server to transfer mail archives between both.

I used to backup my mail to the “Local folders” account in thunderbird; that also works. It’s more for the convenience of having “everything on the server” and having access to my mail archive from a laptop and a desktop. It’s also easier to backup and restore for me.

vegetaaaaaaa, 11 months ago

I have to agree with the second reply there though (and will definitely downvote these kind of posts):

It sometimes feels like if you take any day in a vacuum and look at the posts, it’s: 75% things that’ve either been answered 300 times already or are Googleable; 15% troubleshooting that would probably be better asked towards that software’s community; 5% “hey there’s an update!” spam (4% of that being from the 300 different no code internal apps builders); and MAYBE 5% original content, questions, or good discussions.

vegetaaaaaaa, 11 months ago

FTP requires a installing a thick client, is an old, insecure, complicated protocol, doesn't play well with firewalls... FTP must die! https://mywiki.wooledge.org/FtpMustDie. At least use SFTP (not FTPS) which is built-in to SSH servers and much simpler to setup. But then good luck explaining normal users how to configure a client (WinSCP is decent but sill requires some configuration) unless they are running Linux (most file managers support SFTP in a simplified way).

An alternative is Samba/SMB (multiplatform file sharing protocol Linux/OSX/Windows) - configuring it is a bit involved, but definitely doable. Client setup/file manager integration is OK.

But I would rather use Nextcloud for this, a simple web interface is probably more intuitive for non-technical users. And you get other features such as comments, tags... if that's your thing. Can also be accessed from desktop file managers using WebDAV.

SMB would probably have the best performance of the three, though. Depends on the number and size of files being shared.

vegetaaaaaaa, 11 months ago

This answer says it all. A reverse proxy dispatches HTTP requests to several “backend” services (your applications), depending on what domain name is requested in the HTTP request headers. For example using Apache as a reverse proxy, a config block such as

<pre style="background-color:#ffffff;">
<span style="color:#323232;"><VirtualHost *:443>
</span><span style="color:#323232;">  ServerName  media.example.org
</span><span style="color:#323232;">  ...
</span><span style="color:#323232;">  ProxyPass "/" "http://127.0.0.1:8096/"
</span><span style="color:#323232;"></VirtualHost>
</span>

will redirect requests made on port 443 with the HTTP header Host: media.example.org (for example a request to https://media.example.org/my/page) to the “backend” service listening on 127.0.0.1 (local machine), port 8096 (which may be a media server, a wiki, …). This way you only have to expose ports 80/443 to the outside network, and the reverse proxy will take care of dispatching requests to the correct “backend” service.

Most web servers can be used as reverse proxies.

In addition, since all requests go through the proxy, it is a good place to manage centralized logging, SSL/TLS certificates, access control such as IP whitelisting/blacklisting, automatic redirects…