@vegetaaaaaaa@lemmy.world avatar

vegetaaaaaaa

@vegetaaaaaaa@lemmy.world

gitlab.com/nodiscc/ · github.com/nodiscc/

This profile is from a federated server and may be incomplete. Browse more on the original instance.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar
vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

what should I use as my base DN?

I posted this a while ago about LDAP basics: lemmy.world/comment/1539633

The base DN is usually the DN under which your user accounts (inetOrgPersons) can be found. In my case it is ou=users,dc=example,dc=org.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Lemmy is licensed under AGPL choosealicense.com/licenses/agpl-3.0/

When a modified version is used to provide a service over a network, the complete source code of the modified version must be made available.

vegetaaaaaaa, (edited )
@vegetaaaaaaa@lemmy.world avatar

I use openLDAP + LDAP Account Manager and Self-service password. Deployed/managed through this ansible role

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Keycloak is nice, but probably overkill for what OP needs. Keep it simple.

vegetaaaaaaa, (edited )
@vegetaaaaaaa@lemmy.world avatar

I want to look into apt-cacher-ng for learning purposes, to stop 10s of VMs in my homelab from adding load to Debian official repos, and also to check if there is a way to have it only mirror a list of “approved” packages.

saw a huge time improvement even though I have a good internet connection

Note that for best performance you should use deb.debian.org

Semi-related I have set up a personal APT repository on gitlab pages: nodiscc.gitlab.io/toolbox/ (I think Ubuntu users would call that a “PPA”). It uses aptly and a homegrown Makefile/Gitlab CI-based build system (sources/build tools are linked from the page). I wouldn’t recommend this exact setup for critical production needs, but it works.

How to store backups?

Hi, currently I have a almost none backups and I want to change them. I have a PC with Nextcloud on 500gb ssd that I also use for gaming (1tb system drive). Nextcloud would be used to store/sync images, documents, contacts, and calendar from my phone and laptop. I also have an old pc that has 2x 80gb, 120gb, 320gb, and 500gb...

vegetaaaaaaa, (edited )
@vegetaaaaaaa@lemmy.world avatar

Don’t use a synchronized folder as a backup solution (delete a file by mistake on your local replica -> the deletion gets replicated to the server -> you lose both copies).

old pc that has 2x 80gb, 120gb, 320gb, and 500gb hdd

You can make a JBOD array out of that using LVM (add all disks as PVs, create a single VG on top of that, create a single LV on top of that VG, create a filesystem on top of that LV, format it as ext4 filesystem, mount this filesystem somewhere, access it over SFTP or another file transfer protocol).

But if the disks are old, I wouldn’t trust them as reliable backup storage. You can use them to store data that will be backed up somewhere else. Or as an expendable TEMP directory (this is what I do with my old disks).

My advice is get a large disk for this PC, store backups on that. You don’t necessarily need RAID (RAID is a high availability mechanism, not a backup). Setup backup software on this old PC to pull automatic daily backups from your server (and possibly other devices/desktops… personally I don’t bother with that. Anything that is not on the server is expendable). I use rsnapshot for that, simple config file, basic deduplication, simple filesystem-backed backups so I can access the files without any special software, gets the job done. There are a few threads here about backup software recommendations:

In addition I make regular, manual, offsite copies of the backup server’s backups/ directory to removable media (stash the drive somewhere where a disaster that destroys the backup server will not also destroy the offsite backup drive).

Prefer pull-based backup strategies, where hosts being backed up do not have write access to the backup server (else a compromised host could alter previous backups).

Monitor correct execution of backups (my simple solution to that, is to have cron create/update a state file after correct execution, and have the netdata agent check the date of last modification of this file. If it has not been modified in the last 24-25hrs, something is wrong and I get an alert).

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

JBOD here just means “show me this bunch of old drives as a single drive/partition”. It’s just a recommendation to at least get something out of these drives - but don’t use this as backup storage , these drives are old and if a single one fails, you lose access to the whole array.

If you’re not sure what to do with them, just get an USB/SATA dock or adapter, and treat them as old books: copy not-so-valuable stuff on them, and store them in a bookshelf with labels such as Old movies, Wikipedia dumps 2015-2022…

Definitely get a good, new drive for backup storage. And possibly another one for offsite backups.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

File synchronization is not a backup.

What is your contingency for when the ISP goes down?

In my ever-ongoing struggle to disentangle myself and my family from our corporate overlords I have gleefully dived into self-hosting and have a little intranet oasis available; media, passwords, backups, files, notes, contacts, calendars – basically everything I needed the Big G suite for at one point, I’m hosting locally,...

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

USB tethering between home server and cellphone with cheap data plan. Setup iptables rules/default routes on the server and other devices on my LAN, to route traffic to the Internet through the server and the USB modem/phone. Call ISP and wait 3 months for them to unfuck phone/fiber pole trashed by tractor. Keep paying for service while it is down. Keep calm and carry on, at least I got a backup Internet access.

I don’t need to access this server from outside (and it wouldn’t work as the mobile Internet plan uses CGNAT), just to have the laptop or phone on the same LAN once in a while to let Nextcloud sync do its thing (essential files, Keepass database…). I suppose I could set up a wireguard tunnel between the home server and my cheap VPS, and access it from there, I just don’t have the need for it.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

I have a script that runs nightly via cron, it checks if a reboot is required through needrestart, logs the action and reboots the host if required (kernel update or glibc update): github.com/…/usr_local_bin_needrestart-autorestar…

Nightly is a baseline, if requirements dictate that the host should not reboot without warning at 5am, I adjust the cron expression.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

awesome-selfhosted.net/tags/office-suites.html

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Any journaled filesystem is mostly fine (e.g. good old ext4).

Same as you, if power goes down for a long time I have bigger problems than not being able to access my home server. Guess I could still hook it up to my car battery and DC->AC converter if I really wanted to, and use my phone as 4G modem/backup internet access.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

You’re probably not gonna get metadata

You can do it using –write-info-json option [1] and github.com/…/jellyfin-youtube-metadata-plugin which reads metadata from yt-dlp’s .info.json files and displays it in Jellyfin.

This is what I do - except I don’t use a Web UI, but a script that downloads videos I bookmark on my shaarli instance [1]. Having a local copy of my bookmarked videos is nice (but takes quite a bit of disk space)

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Certbot is great. Let's Encrypt is great. (lemmy.world)

I’ve been downloading SSL certificates from my domain provider, using cat to join them together to make the fullchain.pem, uploading them to the server, and myself adding a 90 day calendar reminder. Every time I did this I’d think I should find out about this Certbot thing....

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Wait until you hear about mod_md

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Matrix (synapse) + element-web works for me, although I didn’t get many people on board.

Mumble is what I use the most, with 2-10 users - it’s primarily for VoIP/gaming comms, but also has basic text chat. Text messages are not persistent though, and there is no web interface, only desktop/mobile clients.

For pragmatism, I just use Signal (not self-hosted) because it is at least partly FOSS, looks reasonably secure/private, and the UX is good enough so I could get people to use it.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

I have tried a few other matrix servers (dendrite and conduit), something always ended up not working because they don’t implement everything synapse (the reference server) does, or there were bugs - generally audio/video calling or file transfer would break. Synapse worked out of the box. It also has good documentation.

I don’t see any performance problems or abnormal resource usage with synapse either. As I said I don’t use it that much, so maybe there is something nasty I didn’t see yet. From what I’ve read, it is only a problem when you federate with “large” instances/rooms, but my server is not federated, it’s just a basic private chat server.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Now that dendrite is baasically feature complete I’m curious when was the last time you used it? I remember having issues with bridges one or two years ago.

About that time, yeah, ~1 year ago.

I needed a full replacement for RocketChat (ditched RC for many reasons, unaddressed security/privacy issues, painful and frequent major version upgrades, dependency on mongodb, corporate-driven development/removing security features from community edition, no lifecycle/EOL policy…) so I needed proper file upload/audio/video chat integration - Currently using the jitsi-meet integration, but might switch to element-call someday… In this regard my current setup appears to work well, so there’s no incentive to change…

I also wanted to set up a few bridges, started implementing the IRC bridge but didn’t go very far (tried going off the beaten path and making it work with podman, it might take a while). The steam chat bridge is also planned, but it doesn’t appear to be very well-maintained and I’m afraid it will break without warning, and the signal bridge which looks OK.

Currently I’m juggling between clients for all these different chat networks, feels like it’s 2002 again.

Ansible role to deploy/maintain Synapse + Element-web here if you’re interested.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Careful this will also delete your unused volumes (not attached to a running container because it is stopped for whatever reason counts as unused). For this reason alone, always use bind mounts for volumes you care about.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

run docker without sudo.

Doing that, you effectively give the user account root access without password

docker run --volume /etc:/host_etc debian /bin/bash -> can read/write anything below the host’s /etc directory, including shadow file, etc.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Second GNUCash or homebank. I sync the database between machines using nextcloud.

vegetaaaaaaa,
@vegetaaaaaaa@lemmy.world avatar

Symlinks are the simplest solution (just checked, it works)


<span style="color:#323232;">$ tree test-role*
</span><span style="color:#323232;">test-role1
</span><span style="color:#323232;">├── tasks
</span><span style="color:#323232;">│  └── main.yml
</span><span style="color:#323232;">└── templates
</span><span style="color:#323232;">    └── template1.j2
</span><span style="color:#323232;">test-role2
</span><span style="color:#323232;">├── tasks
</span><span style="color:#323232;">│ └── main.yml
</span><span style="color:#323232;">└── templates
</span><span style="color:#323232;">    └── template1.j2 -> ../../test-role1/templates/template1.j2
</span><span style="color:#323232;">
</span><span style="color:#323232;">$  cat test-role1/tasks/main.yml 
</span><span style="color:#323232;">- name: copy template
</span><span style="color:#323232;">  tags: test-role1
</span><span style="color:#323232;">  become: yes
</span><span style="color:#323232;">  template:
</span><span style="color:#323232;">    src: template1.j2
</span><span style="color:#323232;">    dest: /root/template1
</span><span style="color:#323232;">
</span><span style="color:#323232;">$ cat test-role2/tasks/main.yml 
</span><span style="color:#323232;">- name: copy template
</span><span style="color:#323232;">  tags: test-role2
</span><span style="color:#323232;">  become: yes
</span><span style="color:#323232;">  template:
</span><span style="color:#323232;">    src: template1.j2
</span><span style="color:#323232;">    dest: /root/template1
</span><span style="color:#323232;">
</span><span style="color:#323232;">$ ansible-playbook playbook.yml --diff --check --tags test-role2
</span><span style="color:#323232;">...
</span><span style="color:#323232;">TASK [test-role2 : copy template] *****************
</span><span style="color:#323232;">--- before
</span><span style="color:#323232;">+++ after: /home/deploy/.ansible/tmp/ansible-local-143602q8imzfz/tmp8g6dn_h1/template1.j2
</span><span style="color:#323232;">@@ -0,0 +1 @@
</span><span style="color:#323232;">+this is a template
</span><span style="color:#323232;">
</span>
  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • GTA5RPClips
  • Youngstown
  • everett
  • slotface
  • rosin
  • osvaldo12
  • mdbf
  • ngwrru68w68
  • JUstTest
  • cubers
  • modclub
  • normalnudes
  • tester
  • khanakhh
  • Durango
  • ethstaker
  • tacticalgear
  • Leos
  • provamag3
  • anitta
  • cisconetworking
  • lostlight
  • All magazines
    •