I mean… Normally men measure something other than beards. This is such a weird choice!

I’m a syaadmin now, but self hosting nextcloud is what got me my first IT job. I now host a bunch of stuff (even email!), lemmy included.

how did you decide that you would like to self-host? I wanted my friends to play a cs1.6 map I had created.

dire problems, including those that accumulate over time

That’s not a thing. You create problems over time by experimening in what is, effectively, production load. If all you ever did was install any distro and kept it up to date - not much can break. Granted - shit happens, but it’s incredibly rare.

As an example - I’ve set up my mail server in May 2019. Chose archlinux, because I never wanted to go through a big upgrade. The only exta software installed there is mail-server related. Direct from the repos. I’ve become confident enough that now there’s a nightly cronjob to update the system with a hook to reboot if kernel or init gets updated.

In all those 5 a bit years I’ve had one issue where I hqd to revert a kernel update.

Another example is tang on an ubuntu server. This was at a previous workplace, but essentially it’s a piece of software from the repos. Originally installed on 16.04, has gone without reprovisioning all the way to 22.04. I’ve now left the company, but I hear it’s still running.

Upgrading an ubuntu desktop fleet with a myriad of custom software, on the other hand… let’s just not talk about it.

I’m not the best person to query about backups, but in your situation I would do the following, assuming both server and desktop run on BTRFS:

Have a script on the desktop that starts btrfs-receive and then notifies the server that it should start btrfs-send.

You can also do rsync if BTRFS is not a thing you use, but It would either be expensive storage wise, or you would only ever have 1 backup - latest.

Wireguard works best for private traffic, but you can’t host a public site with that.

Of course you can! Nginx and wireguard on a VPS and actual services wherever you want.

If you can dedicate some time to constant keep up - pick a rolling distro. Doing major version upgrades has never not had problems for me. Every major distro has one.

My choice is Gentoo, but I’m weird like that. Having said that - my email server has been running happily on Arch for just over 5 years now.

The lemmy instance I host is on Debian testing - Gentoo was not available on DO - no issues so far.

Even when it’s mostly containers - why waste time every n years doing the big upgrade? Small change is always safer.

Is this the repo of the tool?

That’s not what I meant.

Never had a chance to give syncthing a shot, but nextcloud works very well. On top of that, if you ever want to ditch apple/google - it will also happily sync your contacts, calendar, etc, as well as more niche stuff like bike rides. It can become chonky, but that really depends on how much stuff you’re asking it to do.

Precision guesswork here, but I’ve had nginx (not on opnsense) redirecting me to the default host quite a few times recently - all times it was me cocking up its config. It could be that nginx is waiting for the actual target until it times out and then just gives a your opnsense gui as the most reasonable response.

I’d start checking its config. Or pasting it here, after removing secrets, it any.

Is it all or nothing sort of deal?

Dunno, worked well for me. Give it a shot and see if anything needs to be disabled.

I’d been running OPNsense in a VM for some time. I used xen as a hypervisor, but that shouldn’t really be a requirement. Passed the nics through and it was golden! All the benefits of a VM - quick boot-up, snapshots on the hypervisor - it’s truly glorious :)

I don’t have your requirements, but nextcloud with Memories works well enough for me. Nextcloud does the file things, including auto upload from phones. Memories then displays those photos.

NFS comes to mind, naturally.

I remember some years ago scp had a big issue, can’t recall what, though. But that made me have a look at rsync, and I’ve been using that ever since. Flags are a bit atteocious, but I’ve aliases rsync -avz status=progress to copy and it’s been happy days. One other benefit - incremental copy. Helps in cases where a copy procedure had been stopped for whatever reason.

Am I so out of touch or young people are wrong? :)

Is it too much to ask for both? :D

What is a recommended SSD nowadays? I don’t really have a criteria other than avoiding the noise - sata works well enough for me.

MG Premium has won its bizarre lawsuit against pirate site Goodporn.

I guess it’s that

I think this is the way!

Would be a real shame if my instance’s logrotate was set to, say, only keep a few days of webserver logs. Real shame.

Good luck establishing precedent with that!

Deluge is another client that supports sequential downloads. It’s my personal favourite because it’s also built on a client-server model, so I can have thr client on all my devices connecting to a single server.

I didn’t add it to any lists, but to the network interface itself. You know the output of ip a? The one pihole listens on (wg0 in my case, because wireguard) has something like, say, 10.0.0.1, but also 8.8.8.8. So when a DNS packet is spit out by chromecast to go to 8.8.8.8 UDP port 53 - my pihole happily answers that request. You could also do a separate unbound instance on a new virtual interface with a quad8 ip and just forward everything to pihole, if you fancy.

Being locked into googles DNS gives me problems

I solved that by adding an 8.8.8.8 ip to my pihole interface. Because of how TCP/IP works, this has the fewest hops and is, therefore, the one to be used. I’m blocking all outbound DNS traffic for good measure.

I will applaud anything embracing self hosting, but I feel like author is forgetting the experience gained during those years. Things have been simple for way longer than docker existed.

Separate. That’s the whole point of containerisation! Otherwise you’re just doing a regular deploy with extra steps

I would suggest having an nginx as a reverse proxy (I prefer avoiding a container as it’s easier to manage) and the have your services in whatever medium you prefer.

Plug your pies into wireguard. Problem solved.

I don’t have something specific to read, my statement comes from questioning the declared permissions by apps. Why would, say, facebook - an app that, essentially, downloads and uploads content via http, need access to location, gyro, contacts, texts, call history, making calls, microphone, etc? Also, while I can’t prove it, as someone who works in computing I can guarantee there are undocumented/buggy/testing APIs and just straight up bugs that companies with enough resources can and do find and abuse. Cambridge analytica has only strengthened my view on this.

That’s… Not at all how it works.

Don’t worry, you’re one of today’s lucky 10000!

Launcher on android is just that - an app to launch other apps. Other apps can and do run in the background, without ever being explicitly launched. Think play services, location provider, wifi connection manager, etc. Since google runs its stuff at the highest level - nothing can hide from it. Other apps, like netflix, utilise internal telemetry. Assholes like facebook push the boundaries to the limit and collect literally every input of every sensor to have as much data about your environment as possible.

TL;DR - custom launcher cool, but no cure.

Do yourself a favour and don’t host it, yet. Lemmy is not quality software. You have 3 options here:

• pay someone to take care of it for you
• learn more about computer management and computers in general, first; then host it
• ignore the first two options, which will inevitably lead to your instance crashing and burning

Best of luck!

Packet sniffing.

You could just have a dedicated backup user that is in all the groups of you docker volumes.

That is actually somewhat less of an issue now that bans and content removal are federating. Kbin is the easiest to abuse at the moment, but, luckily, there aren’t many instances of it.

I would advise against it.

• Lemmy can act in mysterious ways
• Lemmy’s database can act in mysterious ways
• You don’t sound like you know how computers work
• The above is necessary to have any reasonable uptime.

Seriously? :D You seriously considered the idea o bits - the smallest possible unit - to be divided into a thousand subunits? :D Get lost

That is definitely not the point of this post.

And that, kids, is why maths is absolutely necessary if you want to amount to anything more than a shitty webdev.

I’ve not thought of such a thing before. How does it work on a technical level? Can’t imagine a sim+gps being useful for long.

I’m gonna go with yes 😁