@dan@upvote.au avatar

dan

@dan@upvote.au

Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
d.sb
Mastodon: @dan

This profile is from a federated server and may be incomplete. Browse more on the original instance.

dan,
@dan@upvote.au avatar

Isn’t this actually more likely to happen if it’s closed-source, since the code isn’t visible to third-parties like security researchers? That’s why zero days are a thing.

dan,
@dan@upvote.au avatar

Apparently it lets you set up Kubernetes pretty easily too? idk I don’t use Kubernetes.

dan, (edited )
@dan@upvote.au avatar

If you ever switch to AdGuard Home, adguardhome-sync is pretty good. IMO AdGuard Home is better since it has all of PiHole’s features plus it supports DNS-over-HTTPS out-of-the-box, so your ISP can’t spy on your DNS queries (non-encrypted DNS queries can be easily intercepted and modified by your ISP even if you use a third-party DNS server, since they’re unencrypted and unauthenticated)

dan,
@dan@upvote.au avatar

If only everyone was on IPv6, then everything could use SLAAC and worrying about IP assignment for client systems would be a thing of the past. IPv6 on a home LAN generally only uses DHCPv6 for configuring the DNS servers - client systems get IPs using SLAAC and learn their gateway using RAs (router advertisements).

dan, (edited )
@dan@upvote.au avatar

Sure, but that’s extra manual setup, and the point of running something like PiHole is to have a nice UI to manage things.

AdGuard Home uses DNS-over-HTTPS by default, so it’s immediately more privacy-focused than PiHole. I’m really surprised that PiHole hasn’t done this.

dan,
@dan@upvote.au avatar

That’s literally the second paragraph in the linked article. Do people not actually read the articles on here?

dan,
@dan@upvote.au avatar

Microsoft have quite a bit of software that runs on Linux (PowerShell, VS Code, .NET, Azure tools, Intune / Endpoint Manager, even SQL Server) so it’s understandable that they’d have documentation to explain it to their customers.

dan,
@dan@upvote.au avatar

My comment is licensed under GPL. If you look at it when you reply, it means your reply is a derivative work and must retain the license. Have fun.

Lighter weight replacements for Sentry bug logging

I love Sentry, but it’s very heavy. It runs close to 50 Docker containers, some of which use more than 1GB RAM each. I’m running it on a VPS with 10GB RAM and it barely fits on there. They used to say 8GB RAM is required but bumped it to 16GB RAM after I started using it....

dan,
@dan@upvote.au avatar

Thanks! I’ll try it out. I don’t see anything on their site about JavaScript source mapping, so I assume they don’t do it. With Sentry, you upload the source map to the server as part of your JS build process, and their backend automatically maps minified stack traces to unminified ones using the uploaded source map. Maybe I’d be fine losing that in exchange for something lighter weight.

dan,
@dan@upvote.au avatar

Perfect, thanks. Strange that it’s not in their docs, but it does seem like their docs are very minimal.

dan,
@dan@upvote.au avatar

Nice to see you on here! I understand the lack of time - I’ve got some projects I’ve had on hold for years because of time constraints. I’m definitely going to try Glitchtip.

If I get some free time, I’ll see if I can write some docs about using source maps for JS apps. Sounds like it works in the same way as Sentry’s does.

It was a great idea for GlitchTip to reuse the Sentry SDKs and CLI, because their SDKs are solid. They’ve got the best .NET SDK out of all of the error logging systems I evaluated two years ago which is why I was using Sentry. Unfortunately, Sentry has become significantly heavier over those two years.

dan, (edited )
@dan@upvote.au avatar

Wait until they discover that Windows Server 2022 exists. Also, Windows 2000.

dan,
@dan@upvote.au avatar

Authentik is pretty good. Authelia is good too, and lighter weight.

You can combine Authelia with LLDAP to get a web UI for user management and LDAP for apps that don’t support OpenID Connect (like Home Assistant).

dan,
@dan@upvote.au avatar

Raindrop doesn’t seem to be self-hosted? This is the selfhosted community…

dan, (edited )
@dan@upvote.au avatar

So is this like a self-hosted equivalent to pinboard.in? Can I import all my existing Pinboard bookmarks including their tags?

dan,
@dan@upvote.au avatar

Interesting… How does Authentik do 2FA for LDAP?

I’m going to try it out and see how it compares to Authelia. My home server has 64GB RAM and I have VPSes with 16GB and 48GB RAM so RAM isn’t much of an issue :D

dan, (edited )
@dan@upvote.au avatar

LDAP sends username and password over the network though… It doesn’t use regular web-based authentication. How would it add 2FA to that?

dan,
@dan@upvote.au avatar

Ohhhh, interesting. Sorry, I didn’t watch the video yet. Thank you!!

dan, (edited )
@dan@upvote.au avatar

I’ve got one with HostHatch that’s 10TB of space for $10/month. It was an offer they had during Black Friday 2020. They had a similar offer during Black Friday 2023 but I think it was around $20/month, paid yearly.

I live in the San Francisco Bay Area and my storage server is in Los Angeles, which is around 10ms round-trip ping time from my home internet connection.

Hetzner is good too. They have relatively cheap “storage boxes” that are a shared environment rather than a VPS. You don’t get proper SSH access, but they do support FTPS, SFTP, Samba, Borgbackup, Restic, rclone, rsync and WebDAV. www.hetzner.com/storage/storage-box

Borgbackup encrypts the backups, so the host won’t be able to actually view your backups.

dan, (edited )
@dan@upvote.au avatar

Try MySQL instead of MariaDB. They have some performance tweaks in version 10 that aren’t present in MariaDB.

Also, tune your MySQL (or MariaDB) server. Make sure all tables use InnoDB. Enable the slow query log and analyze slow queries (there may be missing indices). If there’s a lot of unique queries, increase the query cache size.

The easy approach is to run MySQLTuner after the MySQL or MariaDB server has been up for at least a week, and go through its suggestions.

There shouldn’t be a significant difference in performance between PostgreSQL and MySQL/MariaDB if both have been optimized. Out-of-the-box config isn’t ideal for a production system.

dan,
@dan@upvote.au avatar

Aww, nice gift!

I’m using a workstation board in my server. Asus Pro WS W680M-ACE SE along with a Core i5-13500. Intel support ECC for consumer CPUs but only when using workstation motherboards :/. The IPMI on this board works well though.

dan,
@dan@upvote.au avatar

I think so, but I don’t have any vPro capable CPUs so I haven’t been able to try it.

dan, (edited )
@dan@upvote.au avatar

Wouldn’t it have been cheaper to get a motherboard with IPMI/BMC? Last I looked, the prebuilt PiKVMs were quite expensive.

dan, (edited )
@dan@upvote.au avatar

It’ll work fine. A NAS is just a PC. Try Unraid if you want a user friendly UI. It costs money but it’s only a one off payment for a lifetime license, and they have a free trial.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #