N0x0n

@N0x0n@lemmy.ml

This profile is from a federated server and may be incomplete. Browse more on the original instance.

N0x0n, (edited )

For me Debian or LMDE is good for a home server due to not continuous package update, just major security an important ones.

You can have a similar experience from a rolling release with debian !

Trixie (testing) or Sid (unstable) or backports !

Backports seems promising because that’s the version of the package going into the next debian release.

N0x0n,

Edited !

N0x0n, (edited )

Fingerprint resistance of firefox? Is more like somewhat…

You have to change a few things in about:config, disable webRTC and spoof:

  • user-agent
  • font fingerprint
  • audio context …

But it’s the “best” OOTB alternative we can have rn.

N0x0n, (edited )

Haha… If elections had any impact, it’s long time ago we would have seen any changes… ! Every year the same parade, with the illusion of choice between a turd or a piece of shit… Either way, they both come out of the same a Hole and reeks the same…

Money = power ! Vote with your wallet instead… Stop buying unecessary things, just shut down your TV, radio, mobile… and open your mind to the REAL outside world, reconnect with your intuition, stop filling your body with deadly poison and stop being a brainless sheep (not saying you’re, it’s a figure of speech).

Than maybe we will see some real changes :)

N0x0n,

Can’t argue against that :)

N0x0n,

Hey, could you elaborate or send some lecture? I have the upstream quad9 DoH address in adguard. It’s supposed to better encrypt my traffic right? Never saw any ads or strange DNS requests.

Never heard about ads being inject though DoH or DoT, or did I misunderstood your comment?

N0x0n, (edited )

That’s the spirit 🫶.

That’s really what I’m doing on my debian server where I host my docker containers.

I don’t care if I brick my system while playing arround because every day at 00:00 a crontab job dumps all my database and saves all my docker volumes and docker-compose to an external HD and saves most important dotfiles and wireguard configuration.

Back Up and running in 30 min !

2 years in, still going strong and learning everyday something new, keeping everything I learn in a markdown file.

  • Personal CA with self-signed certificate by an intermediate CA chain
  • Wireguard tunnel routing all my devices traffic to protonVPN
  • Alot of docker stuff
  • Alot of networking stuff (DNS, cryptography…)
  • LVM, bash…
  • …

Wild ride, sometimes alot of frustration, but what an empowering experience !

Grocery shopping apps

I am currently using Bring! with my wife to organize our grocery shopping. I am looking for a self hosted alternative. I looked at the awesome self-hosted list and tried Specifically Clementines and of course Grocy. I like that Grocy also includes meal planning although the whole inventory management is too much for us. What I...

N0x0n,

Yeah, I know !

How I do it:

I bought a mobile holder for bicycles, and put it on the cart when I’m in the store. It works, its not perfect but I does what I need !

But i totally agree that the grocery list could be better integrated, but it’s FOSS, self-hosted and free. So I’m happy :)

N0x0n, (edited )

I really like tandoor reciepe. Maybe not exactly what your are looking for, but who knows :).

I like how the meal planner works and that you can save your own meal reciepes, add them to a grocery list…

BUT it is maybe a bit too complex and to much features?

N0x0n,

Great read thank you !

One technical question if you don’t mind.

Maybe add a firewall rule that allows traffic from the NAS to the internet but not the other way around.

How does that work¿ I mean if the internet traffic isn’t allowed to the NAS, how can the NAS get updates than?

N0x0n,

Yeah hard times for privacy focused youtube alternatives… I don’t have any issues at the moment with LibreTube on android. But it’s bases on the Piped api.

But a few months back there were less working servers. Maybe because of youtube’s new policy? Have to investigate invidious and piped github’s issue page

N0x0n,

Thanks :) !

N0x0n,

Are flash games still a thing? I remember those old sticky fighting flash games on newsgroupe.

Someone kind enough in webdev to elaborate why someone would care to revive/reimplemente old flash player tech?

N0x0n, (edited )

Ugh permission issues…

I have no idea how the shotshare image works, but an easier method is to specify the puid/pgid in the docker-compose:


<span style="color:#323232;">environment:
</span><span style="color:#323232;">  - PUID=82
</span><span style="color:#323232;">  - PGID=82
</span>

If the docker image supports it, the –user flag is also helpful :).

I know those works with volume mounts, no idea about bind mounts.

N0x0n,

Edited! XD maybe that wasn’t the best acronym ?

An other way to express “etc” xD

N0x0n, (edited )

I’m also interested :)

What I can add is that if you selfhost locally your arr stack with jellyfin, there is no need for reverse proxy, authelia…or whatsoever !

If you are going to host you stack and make it available over the net and open ports in your router, yeah it’s mandatory ! With a wireguard tunnel… (I think portainer is the way to go for most user).

Locally you can just connect to your jellyfin’s private ip without to much complicated overheat.

Just secure and isolate your torrent connection and use a good VPN (like proton VPN).

A good starting point: github.com/navilg/media-stack/blob/…/README.md

N0x0n,

Immich isn’t the easiest docker stack ! I will up it on my own server and give you some feedback.

Because their isn’t any network configuration in the compose it uses the default docker network. Thus… maybe… it overlaps with your own network, that’s what your first post was about :)

I will look into it and if nobody comes up with an anwser before me, will give you some feedback on how it went and try to find out what’s wrong !

N0x0n,

First find out what’s your debian network configuration if it’s a fresh install and everything is installed by default, you get your ip and network from DHCP


<span style="color:#323232;">> ip a
</span>

If your ethernet or wifi networks is in the inet 172.17.0.1/16 brd 172.17.255.255 range it overlaps with the default docker bridge network.

N0x0n, (edited )

So I got it up and running in 10 minutes just by copy/pasting the docker-compose.yaml and .env files. So their configuration files are working flawlessly.

Either you have a router misconfiguration or a docker network misconfiguration. Either way If I were you I would first start without duckdns.org domain name and without to much complex network configuration. Start slow and build up to more complex configurations.

  1. Leave your router defaults network configuration, without any open ports.
  2. See if your spare laptop server has internet access when everything is defaulted (if not that’s the first thing to solve)
    • Check if your networks configuration is in the inet 172.17.0.1/16 brd 172.17.255.255 range (dockers default bridge network)
    • Default routes on your laptop
    • DHCP or manual

The important part is to make your laptop have internet access without changing to much, the default DHCP works great !

  1. Fresh docker installation and don’t forget to delete your json file (/etc/docker/daemon.json)
  2. Try again with the docker-compose.yaml and .env from immich’s github

If your network configuration is wrong from the beginning, you are in for bad times specially if you are going to use duckdns ! Try to make it work on your local network first and than you can go crazy.

Also if you do not know what you are doing, please don’t make your containers accessible to the web ! Rather use a wireguard server to access all your containers from everywhere in the world with a secure tunnel !

If you’re a beginner, there is alot to grasp before having a good working laptop server :)

N0x0n,

Good to know ! Have fun self-hosting ! :D

N0x0n, (edited )

Humm… this seems rather strange. Maybe show us you docker-compose to have a look on how you configured immich’s network?

169.254.0.0/16 are APIPA addresses . So this a network misconfiguration.

After searching the web, I tried to create /etc/docker/daemon.json

This is not how you configure a docker network. This is only used if your local networks overlaps with docker’s defaut network.

The easiest way i can think on how to make your docker-compose work is to reinstall docker and use the host network. DO NOT forget to delete the /etc/docker/daemon.json file in case you want a fresh start. This seems a badly network configuration on you docker stack !

This will give you a good starting point! After that try to configure a bridge network for your docker compose.

Normally after you get the gist on how docker works, it’s rather easy!

N0x0n,

Nah, that’s not how it works ! I have over 10 applications and half of them have databases, and that’s the prime objective of containers ! Less resource intensive and easier to deploy on low end machines. If I had to deploy 10 VMs for my 10 applications, my computer would not be able to handle it !

I have no idea how it works underneath, that’s a more technical question on how container engines work. But if you searx it or ask chatGPT (if you use this kind of tool) i’m sure you will find out how it works :).

N0x0n,

This how I do it, not saying it’s the best way, but serves me well :).

For each type of application, 1 docker-compose.yaml. This will have all linked containers in 1 file but all your different applications are seperate !

Every application in it’s respective folder.

  • home/user/docker/app1/docker-compose.yml
  • home/user/docker/app2/docker-compose.yml
  • home/user/docker/app3/docker-compose.yml

Everything is behind an application proxy (traefik in my case) and served with self-signed certificate.

I access all my apps through their domain name on my LAN with wireguard.

N0x0n,

Looks like a cool project ! But uuhg, i’m already struggling with native docker sometimes, and having hard times with bash scripts…

Makes me feel sad… learning something like C must make you feel like a super hero! but totally out of my league !

If only I had read the books my father bought back then… rather than playing counter-strike 1.5 xD

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #