• 3 Posts
  • 96 Comments
Joined 1Y ago
cake
Cake day: Jul 02, 2023

help-circle
rss

Why don’t you use something like Tailscale? Other than that using non standard ports greatly reduces the risks of you getting compromised. The majority of attacks come from port scanners scanning for default ports and trying to use known vulnerabilities.



And that’s the biggest ISPs, plus he can still use Tailscale or Zerotier and still be able to access his network. Plus IPv6 IPs should be easy to assign and won’t be paid or limited.


Usually German ISPs are giving you IPv6.


Most likely you are under CGNAT, so your best bet is Tailscale, Wireguard, CloudFlare Tunnel or Zero Tier. Pick your poison.


With this GPU you can install a media server like Plex or Jellyfin and offload the transcoding on the GPU, but mind you you will still have a high idle load consumption.

Normally in a headless home server I would need virtualisation and low idle power consumption. So this GPU and PSU are a bit of an overkill if you are not planning to fully utilise them.


Another piece of the puzzle is probably your WiFi router, as you normally won’t get speeds near 1Gbps over WiFi. In order to benefit maximally from it, you need to connect your devices (laptops, stationary PC, TV, etc.) with a cable to get the most of it.

You should also try to disable some pfSense plugins, like OpenVPN, zenArmor, etc. as they will severely limit your bandwidth throughput. But as others said, most likely you will also need to upgrade your hardware box, and you can migrate to OPNsense while at it.



Just changing the SSH port to non standard port would greatly reduce that risk. Disable root login and password login, use VLANs and containers whenever possible, update your services regularly and you will be mostly fine


If you are behind CGNAT and use some tunnel (Wireguard, Tailscale, etc.) to access your services which are running on Docker containers, the attack vector is almost not existing.


Do you really need multiple VMs, can’t you run all at one? The easiest would be to install some windows/Linux on a single machine. Then stream your games with Sunshine/Moonshine and connect over RDP/VPN?


https://github.com/awesome-selfhosted/awesome-selfhosted - just pick one or more services from the list and start looking into their documentation.

YouTube and the web are full of information and guides how you can do it. Me personally I would suggest you to use Docker container and Docker compose if possible. You can see how you can install Docker or Podman to run the containers.



That’s why I also switched to Obsidian. Used it for a while, but the inability to port it to another app turned me off.



Have you tried https://shadowsocks.org/? I don’t have any experience with it, but heard it is good at masquerading your traffic and making it almost impossible for your ISP to block it


The reality is that you won’t learn much just by reading, you need to try to debug stuff and eventually work in the area to truly learn.

But I am sure there are plenty of tutorials and video courses in various platforms where you can learn a bit on the topic. Coursera might be a good place to start as you can enroll for free to those courses if I am not wrong.


https://www.baeldung.com/linux/network-speed-testing try some of the options offered here.

You can also try rsync/rclone too and see how they perform.


SCP encrypts your traffic before sending it, so it might be CPU/RAM bottleneck. You can try with different cypher or different compression levels, which are defined in your .ssh/config file.


Sorry in that case I would recommend you do iperf and see what the traffic would be. Make sure you whitelist the traffic as well.


Try to execute

ping -c 1000 1.1.1.1

And check for any packet loss and jitter.

Additionally I would also recommend trying a different test server and comparing the results.

Keep in mind that your ISP might also have issues with the connectivity which can be fixed in the following days.


If you ask me, Unraid went the Plex way, enshittification ensues.



That’s the agile mentality, where PO are pressuring you to deliver on your Sprint goals. In my opinion working on Scrums really burns down people


The most concerning part about Rustdesk is that they delete issues that question the source of the software or Rustdesk’s potential to be influenced by the CPP.

Seriously, if you make the effort to create a big piece of software and then you open source it and then someone opens a ticket in GitHub asking you those questions, how would you feel?

Because neither “what is the source of the software” nor “potential influence by the CPP” has anything to do with the software itself.

You are free to conduct a security audit of the project and based on the results you can open this thread but saying that they have deleted issues opened on their GitHub page that have nothing to do with the software itself is a pure form of witch hunt and I am genuinely surprised how many people have agreed with you.



I can only feel sorry for you and would strongly recommend you to seek some specialised help.


I am not Chinese, I am born and raised in the EU and I am Caucasian.

I am just irritated that FOSS software is being questioned just because it might have been developed by Chinese programmers.

And for the record you can’t be sure that any commercial software isn’t compromised or it doesn’t have backdoors, it just makes detecting those backdoors a lot harder.


So now I got labelled leftist? That’s very presumptuous of you, don’t you think? You know there are more shades of gray and in normal democracies we have more than two political parties. But nice of you trying to generalise my whole personality, based on a couple of sentences, written in a social platform.

And for the record, English isn’t my native language. And surprisingly there are other reasonable human beings living outside the US (surprise, surprise) who might have slightly different world views from you. The world doesn’t revolve around the US, no matter what your politicians are telling you.


Can you answer me if he will have questioned this piece of software if it was developed in the US, Europe or any other part of the world? And he presumes that by default if something is developed in China must be riddled with backdoors.

Same with the Huawei’s network equipment, that the US forced so many governments not to use. And to the best of my knowledge this was never proven.

Shall I also remind you that the US isn’t spotless either https://www.vice.com/en/article/5d9bp8/us-spies-allies-south-korea-pentagon-leak

U.S. officials have been scrambling to mend ties with its allies following a leak of secret documents showing that the U.S. spied on its friends—again.


CSS can become tedious, especially if you are targeting mobile device and tablets and building this in plain HTML CSS and PHP is way too much work and the end result will probably still not be very responsive and won’t look so great.

This approach is definitely an overkill and if the OP doesn’t want to use this as an educational project I will strongly suggest not to go this route. Just use some of the tools the other has suggested here, like Grav, Hugo, etc.


So your point is that a FOSS application made in China is sketchy by default or what exactly?

Damn, you Americans are really brainwashed that everything that originates from China is bad.

You know you are free to use TeamViewer or Anydesk and no one is forcing you to use Rustdesk.


In my opinion you should take the opportunity and check if you will like this new job. And mind you in a lot of jobs there is room for some programming to automate some processes internally in the company if you feel like it.

But it is great that you acknowledge your weaknesses and accept them. I am also leading a team of sw devs and have a couple of juniors in my team and I try to dedicate enough time to them to explain to them more complex topics, give them recommendations on how to write better and more maintainable code, etc. And I have the feeling your lead isn’t doing much or showing interest in your work, which is a pity and very demotivating because I have been in your shoes before and know exactly the feeling.

And a bit of perspective, I have a guy in my team who is pretty smart and overall a great Dev, the problem is that it is extremely difficult to work with him, he doesn’t have a high working culture, thinks that others are stupid and doesn’t do his job well. I know how much he can but it is really a pain to work with him. Believe me I tried a lot of different approaches with him to make it work and so far with mixed results.

On the other hand I have a junior in my team who isn’t the best programmer and I believe he will never be, but he is very positive, works hard, really tries and in general has a very high work culture and it is so much more enjoyable to work with him, so you realise that skills and brain capacity aren’t everything and that sometimes work attitude is way more important.

I wish you all the best in your new endeavour and I hope you feel happier soon.


Fair point, my life is a bit fucked up at the moment and work is something I haven’t managed to fuck up yet and at least gives me a bit sense of accomplishment and it keeps me busy of not overthinking and getting crazy.

I know this is a treacherous road which often leads to workaholism and I guess I am half there yet. But I am also having sometimes problems of concentrating on more mundane and boring stuff and I procrastinate and working overtime is making things square.

When you are young everything looks so much simpler and the older you get the more demons there are and life fucks us over big time or at least some of us. And the worst part is when you realise that there isn’t anyone else’s fault, that due to your own stupidity you are in this situation but there isn’t coming back, you can’t reload life and you should continue playing this game till the very end and try to get the best of it.

And you know what’s even worse, that some people have it way worse than me and honestly speaking I don’t know how they manage to cope. I am more or less privileged to be born in Europe and have a safe and more or less comfortable life that we all take for granted.

Sorry for the rant!


I fell in the trap of the first two points and figured out that delegating tasks is really hard, as I usually can finish them faster.

But I am trying to protect my team and defend them in front of the upper management. It is okay for me to work overtime and not get compensated for that but it is not okay for them to do the same, as their salaries are lower.

You should also understand that different people have different skillset/interest and are more suitable for different tasks. It is really important to know your team and to be able to motivate them.

And don’t forget to regularly check on them and show interest in their tasks. I am trying to create an atmosphere where we are all equal and we can all contribute to a task and I am also working along with them to show them a good example.



Depends if the stream is clear or protected with some kind of DRM. I would say you can try with ffmpeg. Just open the network tab in developers tools and look for a GET request that downloads some file ending with .mpd (MPEG-Dash) or .mp3u8 (HLS) and provide this URL to ffmpeg as an input.




You can do that fairly easy with a simple bash script and ffmpeg or bat


Setup guide Proxmox, Opnsense, HA, OpenWRT
So I bought a fanless firewall appliance with 4x2.5Gbps ports and I would like to setup Proxmox on two identical SSD drives. I also want to configure a bridge on my ISP router and then configure the router as a firewall on top of Proxmox. My plan is to install HA on top of Proxmox too. My goal is to separate both my normal WiFi connection into two or even 3 VLANs, one for normal devices, one for IoT and a third for Guest VLAN. And I would like the Home Assistant to have access to both my normal SSID and IoT VLANs. For the Access point I have a mesh router that doesn't support VLANs and I was thinking temporary to repurpose an old Netgear R7800 and here I don't know whether I should simply configure the Guest SSID to be for the IoT or repurpose the 2.4GHz network and leave the 5Ghz for normal devices. Currently on the WiFi router I have OpenWRT but I am also considering switching to Voxel? Can you maybe recommend some tutorials with what settings and setup to use and if you had similar network setup to give me some hints on what to
fedilink


Home Asistant on Proxmox running ZFS Raid1
I have just installed Proxmox 8.0.2 on my fanless PC over two identical 2TB SSDs and set-up ZFS RAID1 during install. Now I want to install homeassistant as a VM. I have created the VM, downloaded the Home Assistant qcow2 and transferred the qcow2 image to the /root of the Proxmox but don't know how I can link it to my HA VM. I saw that it is not a good idea to have qcow2 over ZFS especially in the case of SSD due to the higher wear of the SSDs so I was wondering what my options are. I am also open to re-install Proxmox and change the drive setup. What's the best path ahead of me?
fedilink