ez pz:

#!/usr/sbin/nft -f
table inet filter {
    chain input {
        type filter hook input priority raw; policy accept;
        iif "lo" accept
        ct state established,related accept
        iif "enp1s0" udp dport 51820 accept
        iif "enp1s0" drop
    }

    chain forward {
        type filter hook forward priority raw; policy accept;
        iif "lo" accept
        ct state established,related accept
        iif "enp1s0" udp dport 51820 accept
        iif "enp1s0" drop
    }

    chain output {
        type filter hook output priority raw; policy accept;
    }
}

My new strategy is to block EVERY port except WireGuard. This doesn’t work for things you want to host publicly ofc, like a website, but for most self host stuff I don’t see anything better than that.

I use MXRoute, which is a similar tiny/one-person email service. Also great so far. I use it for personal stuff + a client’s professional business emails, and haven’t had any issues with either.

Supporting small businesses like these feels great!

Also the Android TV app is AWESOME!

What do you run Android TV on? Raspberry Pi? My cheapo solution has been to use an old Android phone that supports DP alt mode (USB-C to HDMI adapter) combined with a USB hub + generic air mouse/remote + customized launcher.

It actually works surprisingly well. I installed FCast on it, so it even works like a Chromecast. If I’m watching a video on my phone using Grayjay, I can just cast it to the phone and it will start playing automatically. The only thing stopping it from being perfect is that it can’t turn the TV on automatically. As a plus, since the phone has a battery, it’s always powered on so I don’t have to wait for stuff to boot, and it uses relatively little power.

… but overall it’s janky and finicky, and the OEM bloatware is probably spying on me, so I’ve been looking for alternatives that can match the good parts of this setup.

I don’t like Raspberry Pis for this because they’re overpriced. I have a couple that I could use for this, but I’m hoping to find a cheaper solution, and one that I can recommend to friends/family when they ask. (the Android phone I’m using cost me a total of $15 on ebay)

I use podman, and the standalone tool “buildah” can build images from dockerfiles, and the tool “skopeo” can upload it to an image repository.

I’m a fan of beancount and it’s corresponding web interface fava.

Since the underlying format is human readable text, it’s easy to edit by hand, and you can send the raw file to your accountant as-is and they should have no issues understanding it.

TiddlyWiki might interest you. It’s an entire wiki stored in a single HTML file. You can even use it without a web server if you want (although a web server makes editing more convenient)

vim ~/.ssh/config

Is smallstep free to self host? Looking at their pricing page it’s kind of unclear, and their saas is pretty pricey.

This is the same as assuming anything written in Rust is secure. (i.e. it’s very wrong)

That looks like a cool setup, but I would never trust important data to some crypto shit (Storj) no matter what kind of track record they have.

Yeah rsync.net has always been pricey.

Mxroute is great. It just works, and there’s no sneaky fees, upsells, or any other bullshit.

I thought about doing something like this, but came to the conclusion that ActivityPub doesn’t make too much sense for a traditional blog. A static site generator with RSS is cheaper, easier to host, more reliable, and a better experience for users.

If I want it on the fediverse, I can just post a link on my mastodon account/lemmy communities. If I’m extra lazy, I can automate that part.

The main issue with the AP protocol is that there’s no way to see old posts. If a new user wants to see your blog content, their server might not have recorded older articles. It’s simply not a good protocol choice for publishing that type of content (IMO)

Wordpress+AP would solve that problem, but only because wordpress remains accessible as a regular website. Unless you want to integrate e.g. a comments/like system using AP identities, I don’t think it’s worth the hassle of maintaining a stack like that.

Plus, if you are publishing content directly to the fediverse, you need to worry about how your article’s formatting will render in the various fediverse clients out there. You’ll also need to worry about actually federating with other servers, and potentially being blocked for arbitrary/technical reasons you need to debug.

…those are just my initial thoughts on this idea. I’m interested to hear opinions from others who disagree and/or are running their own AP blog. SSG + RSS still feels like the winning combo to me.