YouTubeWebsitePixelfed

Let me know if you want to mod any communities I’ve setup here on lemmy.world, thank you.


  • 0 Posts
  • 37 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle



  • I’ve managed to keep my KeePass database for almost 20 years going back as far as when I was a dumb teenager. Back then it was as simple as having a couple extra copies on usb drives and Google Drive, but now I keep proper backups.

    My take is, I’d rather control it myself, I am responsible enough to take care of my data, and I actually wouldn’t trust someone else to do it. That’s a huge reason I selfhost in the first place, a lack of trust in others’ services. Also, online services are a bigger target because of the number of customers, and maybe even the importance of some of their customers, whereas I’m not a target at all. No one is going to go after me specifically.



  • I know this doesn’t fit your criterea OP, but if anyone else is looking for some kind of notification service, I use: SMTP to Telegram

    I get instantly notified on my phone for healthchecks.io failures, cronjob reports for different scripts like borg backups or ddns update failures, certain Home Assistant scripts, and Sonarr completions so I know when a new TV episode is done downloading, and a bunch of other things set to notify on failure like SMART failures or snapraid-runner failures or distro updates… so many things. It’s nice having peace of mind that if I haven’t been notified that something is wrong, then I know everything is working, and I do not need to check on it. So it’s one of my favorite services that I’m running.

    I don’t think I need to say it, but this is obviously not something you would put facing WAN as there is no TLS nor authentication.


  • Most of the amcrest cameras have rtsp and don’t require cloud access, in fact I block mine from WAN altogether.

    I have one wired POE outdoor camera and one wireless inside camera from them. Both are great cameras that I can fully control locally. Just make sure it has rtsp, because I’m not sure if every model they make has it.


  • I read it as the lists are awesome, not necessary everything in the lists.

    I will tell you right now that I also think your idea is bad because I wouldn’t follow a list with subjective criteria and selections. I don’t want someone making those subjective decisions for me. Who is to say what awesome is? You don’t know what I’m looking for in a service, you don’t know what I value. If I prioritize privacy and security over form and function, I guarantee it is not going to be the popular or “awesome” option.

    Example:

    The tide is changing in this regard but 3 years ago, jellyfin was much less mature and Plex was really the most popular option for streaming media. Honestly, very few people talked about jellyfin and if they did, it was usually about it’s deficiencies. So 3 years ago, according to most peoples’ criteria, Plex might be the top option on a list, maybe even the only option with a couple of honorable mentions. But according to me, I wouldn’t even put Plex on a list because I don’t consider it selfhosting being that it relies on 3rd party servers. So who is right? There is not right or wrong, it’s subjective, everyone has to make their own decisions. So you see the problem. That is merely one example of countless because everyone prioritizes things differently.







  • You are talking about security when that is not the purpose of it. So yes, you are off on a tangent and missing the point of it.

    It should be clear to people who don’t understand security that running a protocol on a different port doesn’t mean shit for safety.

    It is clear, it’s clear to everyone, so why did you randomly interject irrelevant information? Because you incorrectly assumed someone thought it had to do with security… but no one here thought it had anything to do with security. Everyone understood it but for you, and you were corrected not only by me but the other person.

    Because it doesn’t get as much attention” wouldn’t mean anything to any enterprise firewall the moment it’s not an http header.

    As I’ve said, I’ve used it a few times to escape firewalls… it works. Will it always work? No, I never made the claim this will bypass all firewalls… the strictest of firewalls will block it, but there are other ways around those firewalls. E.g. proxytunnel, stunnel4


  • I think you may be still missing the point because it was never implied that the port change is for security; the security is in disabling password authentication and only accepting key based authentication. The reason I put it on 443 is because it is a port that is usually allowed by firewalls and doesn’t get as much attention. So if I am on a network that is blocking access for standard VPN or SSH ports then it might just be enough for me to bypass it. And it’s traffic on a port that is going to see a lot of other encrypted traffic going across it, so it looks more natural then just popping some other random ports that could potentially raise an alarm.


  • Unless you need to share/provide services for a public, then you shouldn’t be setting up reverse proxies or cloudflare tunnels in my opinion. All you need is WireGuard for you and the handful of users that might be using it.

    I have two ports open for:

    1. WireGuard

    2. SSH Tunnel

    Both of these services will only accept key based authentication.

    WireGuard is the main way that my wife and me access the services away from home. When our phones disconnect from our home’s SSID, Tasker automatically connects to the WireGuard tunnel so we never lose access to services.

    The SSH tunnel is just a fallback in case I get behind a firewall that might be doing DPI and blocking VPN traffic. The SSH tunnel operates on 443 to hopefully appear to be SSL traffic and allowed through. I’ve used it a very limited amount of times to get out from strict corporate firewalls.


    • Scheduled Jobs
      • script to update subdomain ( E.g. home.domain.com) with external home IP address
      • script to run snapraidrunner
      • script to check docker services and report healthchecks
      • script to update and clean kodi libraries
      • script to backup with borg
    • Snapraid on 4x8TB
    • NAS - Samba shares
      • backups
        • computers
        • phones
      • public
      • media
        • music
        • tv
        • movies
    • SSH Tunnel
    • WireGuard (primary way to access services away from home)
    • Print server
    • Docker
      • Server 1 (ThinkCentre M93p, Intel i5-4570T 8GB RAM)
        • healthchecks (monitors services and makes sure scripts run otherwise notifies me)
        • smtp_to_telegram (most services support email notification, this is a way to use the built in notfication of most services but be notified instantly)
        • trilium (notes with tree structure organization)
        • pinry (image board, think pinterest)
        • portainer (GUI to manage docker services)
        • adguardhome (DNS adblocking like pihole but better in my opinion)
        • rustdesk (remote admin software, think remote desktop)
        • ulogger (what I use to map my motorcyle rides)
        • dozzle (docker log viewer)
        • mariadb (database for services that require mysql)
        • postgres (database for services that require postgres)
      • Server 2 (ThinkCentre M93p, Intel i5-4570, 20GB RAM)
        • omada-controller (controller for my tp-link router/switches/aps)
        • home assistant (control smart devices, setup automations)
        • airsonic (stream my music)
        • airsonic-refix (an alternative GUI for airsonic)
        • paperless-ngx (searchable document archive, I keep manuals and some receipts and tax documents)
        • redis (dependency for some services)
        • lidarr (manages music and auto downloads monitored artists/albums)
        • jackett (manages torrent trackers and can combine them into one query for things like lidarr/sonarr/etc.)
        • openbooks (download ebooks for my paperwhite)
        • sabnzbd (client for usenet downloads, integrates into lidarr/sonarr/etc.)
        • sonarr (manages tv shows and auto downloads them)
        • esphome (makes flashes firmware on devices easier)
        • agendav (web calendar, integrates with baikal or any caldav service)
        • baikal (keeps my calendar and contacts)
        • photoprism (photo manager, prefer over immich until immich has better read only integration)
        • stash (nsfw)
        • deluge (torrent client, integrates with lidarr/sonarr/etc.)
        • portainer (GUI to manage docker services)
        • dozzle (docker log viewer)
        • nginx proxy manager (use it to set subdomains for the services… E.g. arisonic.home.lan)
        • wallabag (save webpages for later viewing, doesn’t seem to work on a lot of sites so I usually just use SingleFile and save to a folder on the NAS instead so I might down this)
        • syncthing (mainly use it to backup all the photos and /sdcard/ dir on my phone, but also keep some configs synced between laptops/desktops)
        • adguardhome (backup to the other adguard dns)
        • nginx
          • Homer dashboard (my favorite dashboard, but been looking at homepage lately)
          • DokuWiki (favorite wiki, prefer the classic styling)
          • minimalist-web-notepad (very fast and easy notes for quick and temporary notes)


  • It sounds like we have similar setups. I do the same with syncthing, works great, and not only backs up my photos but everything else on my phone like custom ringtones, notifications, exported backups from many different apps along with full neo-backup exports… basically all the common /sdcard/ directories like: Audio, Backups, DCIM, Downloads, Pictures, Documents, Screenshots etc.

    I’m interested in immich for it’s multiuser sharing so I can easily share photos with others in the house. I have a huge directory of images, all sorted in folders, so until I can add that read only, immich isn’t an option for me. I tried setting it up with the monolithic docker image, and it didn’t import the directory the way I wanted it to, and seemingly made full copies of all the images into it’s own upload directory when I tried importing with the cli-tool. I was looking at it recently and the read only mode seems early stages. How do you like it so far?

    Immich seems like it’s aim is to be firstly a phone photo backup solution… and that is not what I want… I already have a backup solution. All I really want is a mobile friendly way to look at all the photos I have already. PhotoPrism works exactly how I want but the one feature it lacks that I would really like is multiuser. I have seen there is a workaround for sharing with PhotoPrism where you can run individual instances for each user and then share a common directory… and right now that is preferable to immich for me unless they sort out the read only feature.