You can do that with pihole and basically any reverse proxy. The process is the same, so you can follow tutorials, you just have to set up your domain through your pihole instance instead of a registrar. You can set pihole as your dns for specific devices, or you can set it as the default dns for your network through the router.
Did you have to use a display to flash? Some of them don't seem to have a display output and I don't know if that will be an issue. The apple thing concerns me. There are a few macs and iPhones on the network, but the macs are m1, and the oldest iphone would be a 12. Do you think that would be an issue? Also, which R3 router are you using specifically?
My family needs a new router to replace the old (though not old enough that it should be dying) netgear router that is slowly dying. I want to do something with good foss firmware like opnsense or openwrt. I was thinking that the BananaPi options look good, but had some concerns. I would like to install the firmware myself, rather than trust that the manufacturer didn't modify it in any way. I don't know if the pre-made openwrt bananapi routers can be flashed with custom firmware easily. Also I need something with wifi (ideally wifi 6 or better), though would be willing to consider a separate WAP. VLANs would be nice too, but I could live without them. Have any of you done this? What has your experience been, both with install and long term? Is there anything I should look out for that I might not think of? What resources can I use to find out more about this?
Edit: This is the one I'm looking at. Sorry for linking to Amazon but I used FF's remove tracking from URL feature. https://www.amazon.com/youyeetoo-BPI-R3-Development-MediaTek-Support/dp/B0BLVF9697/ref=cm_cr_arp_d_product_top?ie=UTF8
You may get better responses posting this on selfhosted@lemmy.world.
Unless I'm missing the joke, I think you're in the wrong place. Also, IDK.
Skimming the article, it appears they attacked a particular client that is popular in Korea.
They said they want a local backup so they don't have to redownload because bandwidth is expensive. I think a RAID makes more sense. I also don't think btrfs is a great idea for a boat. Power failures will probably be somewhat common, and btrfs is not the most stable, so I don't think I would trust it in weird conditions. Documentation is definitely a great idea though.
For hardware, I would go with sata ssds for storage. I also would recommend a separate boot drive as it makes re installing without loosing data a breeze. You could go with a new processor from intel or amd, and make sure it has onboard graphics. You should also go into the BIOS, enable xmp (always do that. It's free performance), and look for power saving settings. You could go for arm, but most arm computers lack expansion options and that can mean you use USB for drives which is unreliable. I think dc atx power supplies are a thing, but I know nothing about them. I would recommend doing ext4 and a raid, ideally 6 or 10. That will give you stability (from filesystem issues) and good reliability. I know RAID is not a backup, but in this case it may be what you want. RAID is for uptime, and it would be able to usually buy you enough time to finish your trip, or you could even have spare drives onboard and fix it while you're out in like 10 minutes. Also, I would highly recommend researching how to power it well. Starting an engine can mess with the power and could fry a computer. I don't know if a dc ups is a thing, but if it is, get it.
For software, use whatever you want, mostly. I always use debian for servers, but proxmox would probably be fine. You can use powertop to make sure it runs efficiently.
You can. I am lucky enough to not have been hacked after about a year of this, and I use a server in the living room. There are plenty of guides online for securing a server. Use common sense, and also look up threat modeling. You can also start hosting things locally and only host to the interwebs once you learn a little more. Basically, the idea that you need cloudflare and aws to not get hacked is because of misleading marketing.
I could be completely wrong, but I know they have a tagging system in place. The tags presumably come from metadata providers (they give basic information about the song, like who wrote it and when it was made, as well as pictures for album covers and such). After that they can pretty easily look for similarities, eg. two items both tagged funny. If you were concerned that they upload your listening history somewhere to come up with recommendations, they do not.
I know i2p is a bit hard, but if you can figure out how to torrent you should be able to. I would recommend i2p+, which is a fork of i2p that is compatible with regular i2p but is easier to setup. Get the installer here: https://i2pplus.github.io/. If you are on linux, don't worry about it being an exe, it is java and you can run it with "java -jar file.exe." After that, you can open a browser and type localhost:7657. Set your proxy in your browser to localhost:4444, for the http and https settings. It may be different if you use chrome. Now you should be able to access tracker2.postman.i2p/. Don't forget a slash at the end. Your browser won't recognize it as a website without it. You will need the torrent client, i2psnark, which can be accessed on localhost:7657/i2psnark.
This may sound complicated, but the steps to install i2p boil down to:
- Download installer
- Run installer
- Access i2p dashboard through browser
- Configure your browser to use i2p
I agree, though I wouldn't blame the article. If it is insecure, you shouldn't be using it unless it is set up to allow you to run a real os on it.
I think the teacher specified that we use eclipse, and most who didn't were using vscode. If I recall correctly, they did use eclipse. I don't remember how it handles saves, but I don't think it does that.
Gen Z here. Totally agree, though I personally am a bad example for this one. There was someone in my CS class once who I was put into a group with for a project. I needed some code that they had, so I asked them to put it on my flash drive. It was taking a while and eventually I asked why. They didn't know where their IDE saved their code, and were using Windows search to try and find it. They were pretty good at actual programming, logic, etc. though.
Openhab is a project like HomeAssistant. Both are basically websites that offer pre made smart home functionaility and can run on your own server. Openhab doesn't set a password by default (iirc), and when people expose it to the internet they end up with random bored people in another country somewhere flipping their lights on and off or adjusting their thermostat, though they could also get hacked. The openhab example was one of what not to do. I could have been more clear about that.
Security is an issue that people in this community are fairly opinionated on. Try to build up a practical knowledge of every tool you use (like tools for remotely managing your server). Think about how much access that tool gives you, and how easy it is to get. Ssh gets you basically full access to the system, except for bios level settings and things, but it is generally quite secure, and you can use keys instead of passwords. Cockpit, a remote management tool you can access from your browser, offers you a full terminal, so functionally the same access as ssh. However, hackers nearly got a back door into openssh (ssh is the protocol, openssh is the software on linux that implements that protocol), and cockpit is much less thoroughly looked at. Also cockpit doesn't let you use keys.
You're website will be static, which decreases the complexity and makes it easier to make it secure, so don't worry too much. Here are some links that might be useful: https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server
https://www.cyberciti.biz/tips/linux-security.html (this one seems to be geared more towards enterprise stuff, so not all of it is relevant, but a decent amount is.)
Edit: This one is good too. I recommend at least skimming it before the one above this. It will help you figure out which of the points in the link above are worth paying much attention to. https://owasp.org/www-community/Threat_Modeling
Yeah. I just forward SSH with keys only on a nonstandard port + fail2ban. Plus you can access local only services with an SSH port forward.
That's also why I don't use cockpit. It looks cool, but opens up vulnerabilities for very little benefit.
I believe zfs has deduplication built in if you want a separate backup partition. Not sure about its reliability though. Personally I just have a script that keeps a backup and an oldbackup, and they are both fairly small. I keep a file in my home dir called excluded for things like linux ISOs that don't need backed up.
To be fair, Netflix and the others all had to pay licensing fees and whatnot. I think governments should simply ban exclusivity deals so that competition can exist.
I just wanted to post this here because I want to help you all and hurt gen.xyz as much as possible. I had a .xyz domain through njal.la which I used to host jellyfin, homeassistant, and other basic things for friends and family. My domain recently became inaccessible without any notice. After a while of troubleshooting, I found that it had been reported to xyz as abuse, and they must have done zero investigation whatsoever before serverholding my domain. I thought about opening a ticket with xyz to get my domain back, but realized that I no longer wish to buy from some shitty company that will take down any site without warning. Bought a .com domain since they are somewhat reputable, and I would advise everyone here to never buy a .xyz domain. Angry rant over.
Currently, I use Debian on my server. I have an Intel Arc GPU that I use for transcoding, however hardware encoding doesn't work. I am able to get a slight performance benefit from decoding, but encoding would be much better. I have an A750 in my desktop (not server), and was able to get hardware acceleration working, but only with openSUSE Tumbleweed with the stable kernel (6.9.4). While I would love to have encoding, (I am limited on upload speed and av1 encoding isn't practical on the CPU for multiple streams), I doubt it would be stable using a rolling distro and non-standard kernel. Has anyone else tried anything like this? Are there any arc + jellyfin users out there who know any way to make this work, or any openSUSE self-hosters could vouch for its stability? I am willing to try almost any distro (except ubuntu) to make this work.
Edit: fixed. There was some firmware I needed to work on debian. I will link and such in a bit when I have time.
Hello. These questions are self-hosting related, but I feel they do partially belong here as they are also about fedora linux in general. I have a server which is currently running Debian. It has an arc GPU, and no matter what I do, video encoding refuses to work. I was thinking I might move it to Fedora, but have some questions first.
- How are Fedora's updates? I believe they are about once a year, so how is it to switch between versions? I can deal with annual maintenance, but don't want weird issues causing downtime.
- Also about updates, how should I do auto updates on fedora?
- I am currently on apparmor. I know seLinux has more features, but I have also heard that it can be annoying to deal with.
- I mentioned the arc GPU. Has anyone managed to get video encoding working on it on fedora? If so how?
Edit: also, how is it to move a raid over. It is mdadm raid 5 with ext4. It is VERY important that nothing happens to the data, unfortunately I have not yet implemented a backup, although I do intend to soon.
Basically title. I have a 7600(x)(t) 8G. I want drivers with opencl for hashcat. I know the proprietary ones work, but they are a ludicrously massive PITA. I am willing to use almost any distro to make this work (not Ubuntu, and not one of those random newer ones). I really hope I don't have to use the proprietary drivers.
Edit: found a good enough solution. I listed the card on ebay and will replace it with an intel arc soon.
The video is an old one about Katrina. I need it for homework. I have tried accessing it from CNN's website but CNN in their infinite wisdom put DRM on the video that is publicly available, and I assume that is why it doesn't work on mull, librewolf, or chromium (all show same error about neon request failed). I looked on the generic torrent sites to no avail. Any response would help, the questions are very specific to the video and it is due soon.
I recently found this on Reddit while looking into why jellyfin is effected so much by latency. I found that this worked and thought I would share it because it is generally applicable, takes five minutes to setup, and helps a lot with bandwidth on higher latency connections. I admit I am not sure of the technical stuff behind this, so if anyone would like to chime in that would be much appreciated.
I have a server running Debian with 24 TB of storage. I would ideally like to back up all of it, though much of it is torrents, so only the ones with low seeders really need backed up. I know about the 321 rule but it sounds like it would be expensive. What do you do for backups? Also if anyone uses tape drives for backups I am kinda curious about that potentially for offsite backups in a safe deposit box or something.
TLDR: title.
Edit: You have mentioned borg and rsync, and while borg looks good, I want to go with rsync as it seems to be more actively maintained. I would like to also have my backups encrypted, but rsync doesn't seem to have that built in. Does anyone know what to do for encrypted backups?
Hello internet users. I have tried gpt4all and like it, but it is very slow on my laptop. I was wondering if anyone here knows of any solutions I could run on my server (debian 12, amd cpu, intel a380 gpu) through a web interface. Has anyone found any good way to do this?
I have SSHFS on my server and would like to have it automatically mounted and store all of the documents, desktop, downloads, etc. on a couple computers. I am able to get it to all work except for mounting on startup. The server is Debian 12 and both clients are Tumbleweed. Nothing in fstab seems to work. When I add x-systemd.automount, well, at best programs that try to use it crash and at worst I have to go through recovery mode to get the system to boot properly. I am using ed25519 keys with no passwords for authentication. Does anyone know how I could get this to work?
Hello internet users. Someone in my family is looking to buy a car and wanted some recommendations for a private one. They are looking to buy new, and need Android Auto and CarPlay. I know all new cars suck for privacy by default, but I was hoping someone here could offer some insight as to which cars can be made better and what cars offer the best experience with minimal compromises on privacy and no subscription bs. I also have a Home Assistant instance that they can access remotely if there are any cars that can work well with that.
Edit: Android auto and CarPlay aren't as important as I thought.
I know this sounds like more of a "how do I use computes" question than a legitimate selfhosting question, but I think it fits here. My LibreX instance is hosted and appears to be fully functional, but when I try to add it to my browser it reports its url as 127.0.0.1:8080 instead of the actual address. I tried to get it to work with chromium as a troubleshooting step, and while it did let me change the address, it had some other stuff after the search.php?q= that made it return a 404. Does anyone know how to fix this?
edit: run with -e OPEN_SEARCH_HOST="https://yourdomain.tld" to get it to report the correct thing. You also have to remove and add it back in your search engine.
Hello. I just got a google pixel with grapheneos, and would like a way to use Apple's find-my or something similar with family members who still use Apple. I would like something open source that can either proxy my location to Find My or serve as an alternative. I know these apps and services are inherently not private but I do need it so please don't be the guy to say "just don't use it," I would if it were an option. Thanks.
Greetings, internet strangers. I just got a Martin Jerry Tasmota smart switch and would like to connect it to OpenHab or something similar. I have ruled out HomeAssistant because their docker image doesn’t have plugin support and I need to run it on an existing Debian 12 server. I know a little bit about mqtt but not much. If anyone could tell me how or recommend a guide to configuring a Tasmota switch with OpenHab or similar with a mqtt broker that would be great. Thanks.
Edit: typo
Hi. I am currently pirating on a dedicated server (Debian 12) running i2p, jellyfin, qBittorrent-nox, and a vpn. I tried mullvad for a bit but need to get air VPN set up now. My current setup to actually get content to jellyfin is this:
- Try to find it on i2p, if there skip to step 4
- SSH into server and turn on vpn + qBittorrent
- Torrent Linux ISOs
- SSH again and copy the file into jellyfin (really space inefficient, would love a solution to this in particular without shitloads of symlinks.)
- Rename files to work with jellyfin
- Login to jellyfin and refresh libraries
- If Linux ISO not on i2p, cross seed
Obviously this sucks. I know *arr would help, but I don’t know how to set up a VPN to not interfere with jellyfin connections to outside of LAN.
How would you go about automating this? Do you think I am a complete idiot going about it all wrong? (I know I do) Have any of you found a solution to vpns interfering with jellyfin?
Hello, fellow internet users. I am currently using Debian but would like a distro to try the new Gnome on. I have been using Debian for a while and I love the stability, but would like newer packages. I also, for no rational reason, would like to be able to use the default package manager exclusively. I used Fedora before and liked it more than Debian (apart from that it felt vaguely Windowsey) but I would like to distance myself from the whole red hat thing. What distro do you think I should get?
I am looking at getting a fp4. (Pretty seriously, I am typing this on an older phone because I listed my newer phone on eBay to switch) I want a good, privacy focused operating system to run on it and was wondering what you all run and what your experiences have been. My main concerns are:
-
Support - I don’t want my operating system maintained by just 1 or 2 random people on github.
-
Features - I want the basic stuff to work but am concerned about the fingerprint sensor and cameras.
-
Privacy - I want something ideally completely degoogled.
-
Stability - I don’t know much about android but I use Debian lts if that tells you anything about the kind of update schedule I want.
I know this is a lot to ask of an os but do you have any recommendations?
Hi. I have been downloading Debian images through i2p, but because of the limited selection of Debian isos available on i2p I decided to get Mullvad to download them on the clear web (and add them to i2p of course.) I use a dedicated server for i2p, jellyfin, and nginx. When I added Mullvad and qBittorrent, Mullvad started proxying connections for nginx, breaking it. Does anyone know how to make Mullvad only proxy qBittorrent and nothing else, or at least not proxy nginx?
I have tried adding the 5 ish pids for nginx to the mullvad split tunnel, but even then it doesn’t work. The only option I can think of right now is to either run mullvad and qbit in one docker container or run nginx on a separate machine. I have no idea how to do the docker thing and don’t want to buy new stuff for this. Are there any other options or does anyone know how to do the docker thing?
Hi. I recently had some issues with my lemmy client which made me accidentally post the exact same thing here twice. The posts were about privacy on my school issued computer. I could have made it more clear, but I wanted privacy from the companies that make their spyware not from the school that owns the computer. Anyway, as of now one post has more than 40 upvotes and less than 5 down. The other has 10 up and 5 down as well as significantly less helpful and more critical comments. My hypothesis is whether the early comments were helpful or critical determined what other people said. I am curios to see what everyone thinks of this.
Hi. My school just started issuing devices last year, and they have this Lightspeed spyware on them. Last year I was able to remove it by booting into Linux from a flash drive and moving the files to a separate drive and then back at the end of the year. This year I have heard from sources that they have ways of detecting someone booting from Linux so I am hesitant to do that option. My only other idea is to buy an old laptop off eBay that looks like it and install Linux on it. I could probably get one for about 50€. Does anyone have any cheaper ideas?
Oh also talking to IT isn’t an option.