Redirect 302 redirect from GET @entry_comment_create (eb8263)

GET https://kbin.spritesserver.nl/m/selfhosted@lemmy.world/t/33065/Starting-over-and-doing-it-right/favourites

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
14.96 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.06 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#1790
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#314
    +icon: Proxies\__CG__\App\Entity\Image {#295 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#322
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#286 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#282 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#271 …}
    +entries: Doctrine\ORM\PersistentCollection {#229 …}
    +posts: Doctrine\ORM\PersistentCollection {#187 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#249 …}
    +bans: Doctrine\ORM\PersistentCollection {#166 …}
    +reports: Doctrine\ORM\PersistentCollection {#152 …}
    +badges: Doctrine\ORM\PersistentCollection {#130 …}
    +logs: Doctrine\ORM\PersistentCollection {#120 …}
    +awards: Doctrine\ORM\PersistentCollection {#109 …}
    +categories: Doctrine\ORM\PersistentCollection {#96 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#323
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#317
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Starting-over-and-doing-it-right"
  +title: "Starting over and doing it "right""
  +url: null
  +body: """
    Y’all, this is gonna be super broad, and I apologize for that, but I’m pretty new to all this and am looking for advice and guidance because I’m pretty overwhelmed at the moment. Any help is very, very appreciated.\n
    \n
    For the last ~3 years, I’ve been running a basic home server on an old computer. Right now, it is hosting HomeAssistant, Frigate NVR, their various dependencies, and other things I use (such as zigbee2mqtt, zwave-js-ui, node-red, mosquitto, vscode, etc).\n
    \n
    This old server has been my “learning playground” for the last few years, as it was my very first home server and my first foray into linux. That said, it’s obviously got some shortcomings in terms of basic setup (it’s probably not secure, it’s definitely messy, some things don’t work as I’d like, etc). It’s currently on its way out (the motherboard is slowly kicking the bucket on me), so it’s time to replace it, and I kind of what to start over (not completely - I’ve hundreds of automations in home assistant and node-red, for instance, that I don’t want to have to completely re-write, so I intend to export/import those as needed) and do it “right” this time - at this point, I think this is where I’m hung up, paralyzed by a fear of doing it “wrong” and winding up with an inefficient, insecure mess.\n
    \n
    The new server, I want to be much more robust in terms of capability, and I have a handful of things I’d really love to do: pi-hole (though I need to buy a new router for this, so that has to come later on unless it’d save a bunch of headache doing it from the get-go), NAS, media server (plex/jellyfin), *arr stuff, as well as plenty of new things I’d love to self-host like Trilium notes, Tandoor or Mealie, Grocy, backups of local PCs/phones/etc (nextcloud?)… obviously this part is impossible to completely cover, but I suspect the hardware (list below) should be capable?\n
    \n
    I would love to put all my security cameras on their own subnet or vlan or something to keep them more secure.\n
    \n
    I need everything to be fully but securely accessible from outside the network. I’ve recently set up nginx for this on my current server and it works well, though I probably didn’t do it 100% “right.” Is something like Tailscale something I should look to use in conjuction with that? In place of? Not at all?\n
    \n
    I’ve also looked at something like Authelia for SSO, which would probably be convenient but also probably isn’t entirely necessary.\n
    \n
    Currently considering Proxmox, but then again, TrueNAS would be helpful for the storage aspect of all this. Can/should you run TrueNAS inside Proxmox? Should I be looking elsewhere entirely?\n
    \n
    Here’s the hardware for the recently-retired gaming PC I’ll be using:  \n
    [pcpartpicker.com/list/chV3jH](https://pcpartpicker.com/list/chV3jH)  \n
    Also various SSDs and HDDs.\n
    \n
    I’m in this weird place where I don’t have too much room to play around because I want to get all my home automation and security stuff back up as quickly as possible, but I don’t want to screw this all up.\n
    \n
    Again, any help/advice/input at all is super, super appreciated.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 38
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1728873093 {#2407
    date: 2024-10-14 04:31:33.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 33065
  -titleTs: "'right':6 'start':1"
  -bodyTs: "'/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':509 '100':419 '3':46 'access':391 'advic':26 'also':443,457,510 'apolog':11 'appreci':42,568 'around':531 'arr':315 'aspect':476 'assist':188 'authelia':448 'autom':185,540 'back':544 'backup':338 'basic':53,127 'broad':8 'bucket':161 'bunch':301 'buy':283 'camera':369 'can/should':480 'capabl':262,360 'come':293 'complet':180,203,349 'comput':59 'conjuct':432 'consid':464 'conveni':455 'cover':350 'current':150,406,463 'd':145,271,298,325 'definit':136 'depend':70 'didn':415 'elsewher':490 'entir':461,491 'etc':88,147 'everyth':385 'export/import':211 'fear':236 'first':107,112 'foray':113 'frigat':66 'fulli':388 'game':501 'get':309,536 'get-go':308 'go':310 'gonna':5 'got':121 'groci':337 'guidanc':28 'hand':267 'hardwar':355,495 'hdds':514 'headach':303 'help':38,472 'help/advice/input':562 'hole':278 'home':54,108,187,539 'homeassist':65 'host':64,330 'hundr':183 'hung':231 'imposs':347 'ineffici':246 'insecur':247 'insid':484 'instanc':194 'intend':209 'isn':459 'js':81 'keep':379 'kick':159 'kind':173 'last':45,99 'later':294 'learn':95 'like':146,331,423,447 'linux':115 'list':356 'll':504 'local':340 'look':24,428,444,489 'love':273,326,363 'm':16,31,230,516 'meali':336 'media':312 'mess':248 'messi':137 'moment':36 'mosquitto':86 'motherboard':156 'much':256,527 'nas':311 'necessari':462 'need':214,281,384 'network':395 'new':18,250,285,322 'nextcloud':342 'nginx':401 'node':84,191 'node-r':83,190 'note':333 'nvr':67 'obvious':120,343 'old':58,90 'outsid':393 'overwhelm':33 'paralyz':233 'part':345 'pc':502 'pcpartpicker.com':508 'pcpartpicker.com/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':507 'pcs/phones/etc':341 'pi':277 'pi-hol':276 'place':436,520 'play':530 'playground':96 'plenti':320 'plex/jellyfin':314 'point':223 'possibl':549 'pretti':17,32 'probabl':131,414,453,458 'proxmox':465,485 'put':365 'quick':547 're':205 're-writ':204 'realli':272 'recent':398,499 'recently-retir':498 'red':85,192 'replac':169 'retir':500 'right':60,218,420 'robust':258 'room':528 'router':286 'run':51,482 'said':117 'save':299 'screw':556 'secur':133,368,382,390,542 'self':329 'self-host':328 'server':55,91,109,251,313,407 'set':399 'setup':128 'shortcom':123 'slowli':158 'someth':377,422,425,446 'ssds':512 'sso':450 'start':177 'storag':475 'stuff':316,543 'subnet':373 'super':7,566,567 'suspect':353 'tailscal':424 'tandoor':334 'term':125,260 'thing':73,139,269,323 'think':225 'though':279,412 'time':167,220 'trilium':332 'truena':469,483 'ui':82 'unless':296 'use':75,430,506 'various':69,511 've':49,182,397,442 'vlan':375 'vscode':87 'want':199,253,534,554 'way':153 'weird':519 'well':318,411 'wind':242 'work':142,410 'would':362,452,470 'write':206 'wrong':240 'y':1 'year':47,101 'zigbee2mqtt':78 'zwave':80 'zwave-js-ui':79"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706300711
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/13070962"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706214311 {#100
    date: 2024-01-25 21:25:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#1790
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#314
    +icon: Proxies\__CG__\App\Entity\Image {#295 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#322
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#286 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#282 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#271 …}
    +entries: Doctrine\ORM\PersistentCollection {#229 …}
    +posts: Doctrine\ORM\PersistentCollection {#187 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#249 …}
    +bans: Doctrine\ORM\PersistentCollection {#166 …}
    +reports: Doctrine\ORM\PersistentCollection {#152 …}
    +badges: Doctrine\ORM\PersistentCollection {#130 …}
    +logs: Doctrine\ORM\PersistentCollection {#120 …}
    +awards: Doctrine\ORM\PersistentCollection {#109 …}
    +categories: Doctrine\ORM\PersistentCollection {#96 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#323
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#317
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Starting-over-and-doing-it-right"
  +title: "Starting over and doing it "right""
  +url: null
  +body: """
    Y’all, this is gonna be super broad, and I apologize for that, but I’m pretty new to all this and am looking for advice and guidance because I’m pretty overwhelmed at the moment. Any help is very, very appreciated.\n
    \n
    For the last ~3 years, I’ve been running a basic home server on an old computer. Right now, it is hosting HomeAssistant, Frigate NVR, their various dependencies, and other things I use (such as zigbee2mqtt, zwave-js-ui, node-red, mosquitto, vscode, etc).\n
    \n
    This old server has been my “learning playground” for the last few years, as it was my very first home server and my first foray into linux. That said, it’s obviously got some shortcomings in terms of basic setup (it’s probably not secure, it’s definitely messy, some things don’t work as I’d like, etc). It’s currently on its way out (the motherboard is slowly kicking the bucket on me), so it’s time to replace it, and I kind of what to start over (not completely - I’ve hundreds of automations in home assistant and node-red, for instance, that I don’t want to have to completely re-write, so I intend to export/import those as needed) and do it “right” this time - at this point, I think this is where I’m hung up, paralyzed by a fear of doing it “wrong” and winding up with an inefficient, insecure mess.\n
    \n
    The new server, I want to be much more robust in terms of capability, and I have a handful of things I’d really love to do: pi-hole (though I need to buy a new router for this, so that has to come later on unless it’d save a bunch of headache doing it from the get-go), NAS, media server (plex/jellyfin), *arr stuff, as well as plenty of new things I’d love to self-host like Trilium notes, Tandoor or Mealie, Grocy, backups of local PCs/phones/etc (nextcloud?)… obviously this part is impossible to completely cover, but I suspect the hardware (list below) should be capable?\n
    \n
    I would love to put all my security cameras on their own subnet or vlan or something to keep them more secure.\n
    \n
    I need everything to be fully but securely accessible from outside the network. I’ve recently set up nginx for this on my current server and it works well, though I probably didn’t do it 100% “right.” Is something like Tailscale something I should look to use in conjuction with that? In place of? Not at all?\n
    \n
    I’ve also looked at something like Authelia for SSO, which would probably be convenient but also probably isn’t entirely necessary.\n
    \n
    Currently considering Proxmox, but then again, TrueNAS would be helpful for the storage aspect of all this. Can/should you run TrueNAS inside Proxmox? Should I be looking elsewhere entirely?\n
    \n
    Here’s the hardware for the recently-retired gaming PC I’ll be using:  \n
    [pcpartpicker.com/list/chV3jH](https://pcpartpicker.com/list/chV3jH)  \n
    Also various SSDs and HDDs.\n
    \n
    I’m in this weird place where I don’t have too much room to play around because I want to get all my home automation and security stuff back up as quickly as possible, but I don’t want to screw this all up.\n
    \n
    Again, any help/advice/input at all is super, super appreciated.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 38
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1728873093 {#2407
    date: 2024-10-14 04:31:33.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 33065
  -titleTs: "'right':6 'start':1"
  -bodyTs: "'/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':509 '100':419 '3':46 'access':391 'advic':26 'also':443,457,510 'apolog':11 'appreci':42,568 'around':531 'arr':315 'aspect':476 'assist':188 'authelia':448 'autom':185,540 'back':544 'backup':338 'basic':53,127 'broad':8 'bucket':161 'bunch':301 'buy':283 'camera':369 'can/should':480 'capabl':262,360 'come':293 'complet':180,203,349 'comput':59 'conjuct':432 'consid':464 'conveni':455 'cover':350 'current':150,406,463 'd':145,271,298,325 'definit':136 'depend':70 'didn':415 'elsewher':490 'entir':461,491 'etc':88,147 'everyth':385 'export/import':211 'fear':236 'first':107,112 'foray':113 'frigat':66 'fulli':388 'game':501 'get':309,536 'get-go':308 'go':310 'gonna':5 'got':121 'groci':337 'guidanc':28 'hand':267 'hardwar':355,495 'hdds':514 'headach':303 'help':38,472 'help/advice/input':562 'hole':278 'home':54,108,187,539 'homeassist':65 'host':64,330 'hundr':183 'hung':231 'imposs':347 'ineffici':246 'insecur':247 'insid':484 'instanc':194 'intend':209 'isn':459 'js':81 'keep':379 'kick':159 'kind':173 'last':45,99 'later':294 'learn':95 'like':146,331,423,447 'linux':115 'list':356 'll':504 'local':340 'look':24,428,444,489 'love':273,326,363 'm':16,31,230,516 'meali':336 'media':312 'mess':248 'messi':137 'moment':36 'mosquitto':86 'motherboard':156 'much':256,527 'nas':311 'necessari':462 'need':214,281,384 'network':395 'new':18,250,285,322 'nextcloud':342 'nginx':401 'node':84,191 'node-r':83,190 'note':333 'nvr':67 'obvious':120,343 'old':58,90 'outsid':393 'overwhelm':33 'paralyz':233 'part':345 'pc':502 'pcpartpicker.com':508 'pcpartpicker.com/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':507 'pcs/phones/etc':341 'pi':277 'pi-hol':276 'place':436,520 'play':530 'playground':96 'plenti':320 'plex/jellyfin':314 'point':223 'possibl':549 'pretti':17,32 'probabl':131,414,453,458 'proxmox':465,485 'put':365 'quick':547 're':205 're-writ':204 'realli':272 'recent':398,499 'recently-retir':498 'red':85,192 'replac':169 'retir':500 'right':60,218,420 'robust':258 'room':528 'router':286 'run':51,482 'said':117 'save':299 'screw':556 'secur':133,368,382,390,542 'self':329 'self-host':328 'server':55,91,109,251,313,407 'set':399 'setup':128 'shortcom':123 'slowli':158 'someth':377,422,425,446 'ssds':512 'sso':450 'start':177 'storag':475 'stuff':316,543 'subnet':373 'super':7,566,567 'suspect':353 'tailscal':424 'tandoor':334 'term':125,260 'thing':73,139,269,323 'think':225 'though':279,412 'time':167,220 'trilium':332 'truena':469,483 'ui':82 'unless':296 'use':75,430,506 'various':69,511 've':49,182,397,442 'vlan':375 'vscode':87 'want':199,253,534,554 'way':153 'weird':519 'well':318,411 'wind':242 'work':142,410 'would':362,452,470 'write':206 'wrong':240 'y':1 'year':47,101 'zigbee2mqtt':78 'zwave':80 'zwave-js-ui':79"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706300711
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/13070962"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706214311 {#100
    date: 2024-01-25 21:25:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#1790
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#314
    +icon: Proxies\__CG__\App\Entity\Image {#295 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#322
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#286 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#282 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#271 …}
    +entries: Doctrine\ORM\PersistentCollection {#229 …}
    +posts: Doctrine\ORM\PersistentCollection {#187 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#249 …}
    +bans: Doctrine\ORM\PersistentCollection {#166 …}
    +reports: Doctrine\ORM\PersistentCollection {#152 …}
    +badges: Doctrine\ORM\PersistentCollection {#130 …}
    +logs: Doctrine\ORM\PersistentCollection {#120 …}
    +awards: Doctrine\ORM\PersistentCollection {#109 …}
    +categories: Doctrine\ORM\PersistentCollection {#96 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#323
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#317
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "Starting-over-and-doing-it-right"
  +title: "Starting over and doing it "right""
  +url: null
  +body: """
    Y’all, this is gonna be super broad, and I apologize for that, but I’m pretty new to all this and am looking for advice and guidance because I’m pretty overwhelmed at the moment. Any help is very, very appreciated.\n
    \n
    For the last ~3 years, I’ve been running a basic home server on an old computer. Right now, it is hosting HomeAssistant, Frigate NVR, their various dependencies, and other things I use (such as zigbee2mqtt, zwave-js-ui, node-red, mosquitto, vscode, etc).\n
    \n
    This old server has been my “learning playground” for the last few years, as it was my very first home server and my first foray into linux. That said, it’s obviously got some shortcomings in terms of basic setup (it’s probably not secure, it’s definitely messy, some things don’t work as I’d like, etc). It’s currently on its way out (the motherboard is slowly kicking the bucket on me), so it’s time to replace it, and I kind of what to start over (not completely - I’ve hundreds of automations in home assistant and node-red, for instance, that I don’t want to have to completely re-write, so I intend to export/import those as needed) and do it “right” this time - at this point, I think this is where I’m hung up, paralyzed by a fear of doing it “wrong” and winding up with an inefficient, insecure mess.\n
    \n
    The new server, I want to be much more robust in terms of capability, and I have a handful of things I’d really love to do: pi-hole (though I need to buy a new router for this, so that has to come later on unless it’d save a bunch of headache doing it from the get-go), NAS, media server (plex/jellyfin), *arr stuff, as well as plenty of new things I’d love to self-host like Trilium notes, Tandoor or Mealie, Grocy, backups of local PCs/phones/etc (nextcloud?)… obviously this part is impossible to completely cover, but I suspect the hardware (list below) should be capable?\n
    \n
    I would love to put all my security cameras on their own subnet or vlan or something to keep them more secure.\n
    \n
    I need everything to be fully but securely accessible from outside the network. I’ve recently set up nginx for this on my current server and it works well, though I probably didn’t do it 100% “right.” Is something like Tailscale something I should look to use in conjuction with that? In place of? Not at all?\n
    \n
    I’ve also looked at something like Authelia for SSO, which would probably be convenient but also probably isn’t entirely necessary.\n
    \n
    Currently considering Proxmox, but then again, TrueNAS would be helpful for the storage aspect of all this. Can/should you run TrueNAS inside Proxmox? Should I be looking elsewhere entirely?\n
    \n
    Here’s the hardware for the recently-retired gaming PC I’ll be using:  \n
    [pcpartpicker.com/list/chV3jH](https://pcpartpicker.com/list/chV3jH)  \n
    Also various SSDs and HDDs.\n
    \n
    I’m in this weird place where I don’t have too much room to play around because I want to get all my home automation and security stuff back up as quickly as possible, but I don’t want to screw this all up.\n
    \n
    Again, any help/advice/input at all is super, super appreciated.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 38
  +favouriteCount: 47
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1728873093 {#2407
    date: 2024-10-14 04:31:33.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 33065
  -titleTs: "'right':6 'start':1"
  -bodyTs: "'/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':509 '100':419 '3':46 'access':391 'advic':26 'also':443,457,510 'apolog':11 'appreci':42,568 'around':531 'arr':315 'aspect':476 'assist':188 'authelia':448 'autom':185,540 'back':544 'backup':338 'basic':53,127 'broad':8 'bucket':161 'bunch':301 'buy':283 'camera':369 'can/should':480 'capabl':262,360 'come':293 'complet':180,203,349 'comput':59 'conjuct':432 'consid':464 'conveni':455 'cover':350 'current':150,406,463 'd':145,271,298,325 'definit':136 'depend':70 'didn':415 'elsewher':490 'entir':461,491 'etc':88,147 'everyth':385 'export/import':211 'fear':236 'first':107,112 'foray':113 'frigat':66 'fulli':388 'game':501 'get':309,536 'get-go':308 'go':310 'gonna':5 'got':121 'groci':337 'guidanc':28 'hand':267 'hardwar':355,495 'hdds':514 'headach':303 'help':38,472 'help/advice/input':562 'hole':278 'home':54,108,187,539 'homeassist':65 'host':64,330 'hundr':183 'hung':231 'imposs':347 'ineffici':246 'insecur':247 'insid':484 'instanc':194 'intend':209 'isn':459 'js':81 'keep':379 'kick':159 'kind':173 'last':45,99 'later':294 'learn':95 'like':146,331,423,447 'linux':115 'list':356 'll':504 'local':340 'look':24,428,444,489 'love':273,326,363 'm':16,31,230,516 'meali':336 'media':312 'mess':248 'messi':137 'moment':36 'mosquitto':86 'motherboard':156 'much':256,527 'nas':311 'necessari':462 'need':214,281,384 'network':395 'new':18,250,285,322 'nextcloud':342 'nginx':401 'node':84,191 'node-r':83,190 'note':333 'nvr':67 'obvious':120,343 'old':58,90 'outsid':393 'overwhelm':33 'paralyz':233 'part':345 'pc':502 'pcpartpicker.com':508 'pcpartpicker.com/list/chv3jh](https://pcpartpicker.com/list/chv3jh)':507 'pcs/phones/etc':341 'pi':277 'pi-hol':276 'place':436,520 'play':530 'playground':96 'plenti':320 'plex/jellyfin':314 'point':223 'possibl':549 'pretti':17,32 'probabl':131,414,453,458 'proxmox':465,485 'put':365 'quick':547 're':205 're-writ':204 'realli':272 'recent':398,499 'recently-retir':498 'red':85,192 'replac':169 'retir':500 'right':60,218,420 'robust':258 'room':528 'router':286 'run':51,482 'said':117 'save':299 'screw':556 'secur':133,368,382,390,542 'self':329 'self-host':328 'server':55,91,109,251,313,407 'set':399 'setup':128 'shortcom':123 'slowli':158 'someth':377,422,425,446 'ssds':512 'sso':450 'start':177 'storag':475 'stuff':316,543 'subnet':373 'super':7,566,567 'suspect':353 'tailscal':424 'tandoor':334 'term':125,260 'thing':73,139,269,323 'think':225 'though':279,412 'time':167,220 'trilium':332 'truena':469,483 'ui':82 'unless':296 'use':75,430,506 'various':69,511 've':49,182,397,442 'vlan':375 'vscode':87 'want':199,253,534,554 'way':153 'weird':519 'well':318,411 'wind':242 'work':142,410 'would':362,452,470 'write':206 'wrong':240 'y':1 'year':47,101 'zigbee2mqtt':78 'zwave':80 'zwave-js-ui':79"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706300711
  +visibility: "visible             "
  +apId: "https://lemmy.dbzer0.com/post/13070962"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706214311 {#100
    date: 2024-01-25 21:25:11.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED edit
App\Entity\Magazine {#314
  +icon: Proxies\__CG__\App\Entity\Image {#295 …}
  +name: "selfhosted@lemmy.world"
  +title: "selfhosted"
  +description: """
    A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
    \n
    Rules:\n
    \n
    - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
    - No spam posting.\n
    - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
    - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
    - No trolling.\n
    \n
    Resources:\n
    \n
    - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
    - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
    - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
    \n
    > Any issues on the community? Report it using the report flag.\n
    \n
    > Questions? DM the mods!
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 222
  +entryCommentCount: 3916
  +postCount: 0
  +postCommentCount: 0
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582735 {#322
    date: 2024-10-22 09:38:55.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#286 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#282 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#271 …}
  +entries: Doctrine\ORM\PersistentCollection {#229 …}
  +posts: Doctrine\ORM\PersistentCollection {#187 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#249 …}
  +bans: Doctrine\ORM\PersistentCollection {#166 …}
  +reports: Doctrine\ORM\PersistentCollection {#152 …}
  +badges: Doctrine\ORM\PersistentCollection {#130 …}
  +logs: Doctrine\ORM\PersistentCollection {#120 …}
  +awards: Doctrine\ORM\PersistentCollection {#109 …}
  +categories: Doctrine\ORM\PersistentCollection {#96 …}
  -id: 120
  +apId: "selfhosted@lemmy.world"
  +apProfileId: "https://lemmy.world/c/selfhosted"
  +apPublicUrl: "https://lemmy.world/c/selfhosted"
  +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "selfhosted"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1703473826 {#323
    date: 2023-12-25 04:10:26.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1703473826 {#317
    date: 2023-12-25 04:10:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details