• 4 Posts
  • 97 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle



  • Dropping instead of blocking might technically be better because it wastes a bit more bot time and they see it as “it doesn’t exist” rather than an obsticle to try exploits on. Not sure if that is true though.

    For me:

    • ssh server only with keys

    • absolutely no ssh forwarding, only available to local network via firewall rules

    • docker socket proxy for everything that needs socket access

    • drop non-used ports, limit IPs for local-only services (e.g. paperless)

    • crowdsec on traefik for the rest (sadly it blocks my VPN IPs also)

    • Authelia over everything that doesn’t break the native apps (jellyfin and home assistant are the two that it breaks so far, and HA was very intermittent so I made a separate authelia rule and mobile DNS entry for slightly reduced rules)

    • proper umask rules on all docker directories (or as much as possible)

    • main drive FDE with a separate boot drive with FDE keyfile on a dongle that is removed except for updates and booting to make snatch-and-grabs useless and compromising bootloader impractical

    • full disk encryption with passworded data drives, so even if a smash and grab happens when I leave the dongle in, the sensitive data is still encrypted and the keys aren’t in memory (makes a startup script with a password needed, so no automated startups for me)

    For more info, I followed a lot of stuff on: https://github.com/imthenachoman/How-To-Secure-A-Linux-Server



  • I think now I understand why apps exist that track subscriptions and give you suggestions on which to cancel.

    It seems “normal people” subscribe to damn near everything that they get more than an hour of use out of. Subscribing to a productivity, social media, or shopping app?? Those things already harvest the fuck out of your data and sell it to the lowest bidder. The only things I have ever considered subscribing to are health/fitness apps or streaming apps (because you have to).

    How are people affording having 20 subscriptions to stuff they probably barely use?








  • The only thing about jellyfin is the damn subtitles. Subtitle sync is horrible. They added a subtitle offset feature last year which was a good workaround and then removed it a few months ago on androidtv and android. Now the subtitle offset on the web player doesn’t do anything anymore either

    Even Subgen generated subtitles, which are pretty perfectly in sync in reality, are sometimes played back at an incorrect speed so it will progressively get more and more out of sync, but there is no way to tell what speed the subtitles are being played at.

    Also it just ignores themes a lot of times or only displays themes on the admin console and nowhere else.

    That said, jellyfin is still amazing!





  • Crazy enough, I have everything going that I want to on my server!

    • *arr suite and jellyfin
    • traefik reverse proxy with crowdsec + bouncer for some sites (e.g. not documents or media)
    • paperless-ngx for documents
    • immich for photos
    • leantime to manage personal projects
    • Book stack for a personal wiki
    • calibre-web for my library
    • syncthing for file and music syncing so I don’t have to stream music
    • valheim server for me and my friends
    • boinc for turning my server to a productive heater in the winter
    • home assistant for my in-renovation smart home

    As far as my server goes, I have everything I need. Maybe setting up something for sharing files over the web if needed. I used nextcloud for that before it killed itself completely and I realized I never really needed it.

    Next is working on my smart home because we had to fully strip the house to renovate. KNX first, zwave for things that KNX doesn’t have or are crazy expensive, ESPHome for everything that the other two can’t accomplish. Minimal 2.4GHz interference and don’t have to rely as much as possible on flaky wireless in a brick house.



  • It really really depends on what you have for heating.

    Floor heating + heat pump? You don’t need to mess around with target temp much because the principle behind it is thermal mass buildup and maintaining that. You have to tune thermostatic valves on the room level. Then you can have one central thermostat simply slightly change the target temperature with many hours of delay. That doesn’t seem too useful to me to automate.

    Do you have radiators? Then you can get zwave or ZigBee valves and tie them together with whatever thermostat that you want in home assistant. Then you can set per room/zone heat depending on whatever sensors you have.

    Do you have central forced air heating and air conditioning? Then you have pretty much target temp and on/off control unless you want to put in motorized automatic registers or redesign your entire duct system for per-room duct valves.

    Individual heat pumps/airco units with radiator based heating is the most “per room” customizable and probably the most useful to put automations on in Home Assistant.

    Ventilation can be useful by monitoring CO2 levels and humidity. Then you can use either the fan units themselves or socket switches to actuate those and put whatever sensors you want wherever it is useful.

    I am probably missing some stuff here, but there are only a few HVAC setups that actually benefit from automation, in my opinion. Mainly ventilation, infrared, and non centralized forced air heat pumps. Plus heating and cooling is something you want to work 100% flawlessly even if your router dies, your home assistant falls off a cliff, and your ZigBee/zwave controller dies.


  • Different philosophy.

    Ntfy uses pub-sub like MQTT. It publishes messages and anyone (with access) can subscribe to it. Want to connect 250 clients across 50 people to have the same messages delivered? Easy.

    Gotify uses end to end messaging. A user creates an application on their chosen client. Gotify uses a REST api send the notification pulled from the chosen app to the user who made it. Want to do the same as above? You have to set it up 250 times. Gotify was the first to have authentication and some people say it is more robust, but I can’t speak on that. Also gotify is easier to set up and makes sense for a single user.

    Someone can correct me if I am wrong, but that is the biggest architectural difference.