im just surprised that there weren't any checks that could have prevented an unknowing customer from exposing their devices. Nothing on the fiber modem was labeled, so im kinda worried how many things could be potentially exposed
This looks rather like a discovery issue and is quite common with newly created instances on the Fediverse. You have to search for everything you want for a couple of times before you make your instance aware of the content or other instances aware of yours.
You can more easily overcome this by connecting your instance to an ActivityPub Relay, but I don't know how this is done on a Kbin instance.
I think a wiki of useful software and communities would be great! On reddit, weekly threads were often designed to corral posts so that the subreddit wasn't flooded with similar topics. It seems like that's not a problem here, so weekly posts would have to be pretty open-ended to spur discussion. For example, this week there could be a Black Friday Hardware Deals Post or something (e.g. I hear those 18TB WD hard drives at Best Buy are decent starter NAS material). Next week, there could be a post about shucking the drives.
Spotube is pretty good. You login through Spotify and it uses the Spotify API to import all your playlists and recommendations. It does have a few flaws, but overall, it's a better experience than the Spotify app imo.
You can also get Spotube on the Google Play store and other stores I'm assuming. Or you can get it from F-Droid which is a free and open source alternative to the play store.
Tailscale is my goto. I can just use regular remote desktop like I'm on my home LAN. Having said that - I run this on my own laptop that I bring with me. I'd never set it up on a work computer.
Media (after the character in American Gods). The bots running on her are Snaffle (video downloader), Severina (audio downloader), Bubble (binary media search agent), and Phylos (physical media search agent, which queries that section of my card catalogue).
On the conflicting configuration side of things that you mentioned, you need to run your services isolated from each other. Docker is one way to do it, if everything you need runs in Docker containers. I personally use LXD to run lightweight system containers and isolate my services. I use one container, for example, to run Docker.
With that being said, there’s usually a lot of studying involved in learning each technology which helps your server setup. You are the one to decide if it’s worth it.
I’ve been testing photoview.github.io running locally on docker and it’s working just fine. Face recognition works amazingly well and fast.
Nextcloud also has a photo album app with face recognition (additional app) which I’ve been meaning to try. There is also the new memories.gallery also in my list of apps to test :)
LetsEncrypt provides free certificates. I would setup Nginx Proxy Manager and use DNS challenge with your dyndns provider to get HTTPS on your home services.
My problem - and I'm not alone - is that I really don't want to expose anything publicly. Is there a way to do this without exposing anything to the Internet?
I am new at this, but from my understanding, if you want to not expose anything to internet, you would need to create your own CA server to create your own certificates and have the necessary encryption certs for your own https on your home lab.
Gotta live on the edge, man. Open up your router. All ports. Firewalls are for pansies. Connect your laptop directly to the modem. Enable ssh and rdp. What could go wrong?
You can setup a VPS between the internet and your home network to limit the exposition of your home network. When a client pings yourdomain.com, it sees the ip of the VPS and not the IP of your home network.
Otherwise, a VPN + home CA server will make your home network accessible and encrypted as well
You don’t have to expose Nginx publicly. It can exist privately on your network. I have my own domain and DNS server internally. For example nginx.home.datallboy.com and jellyfin.home.datallboy.com will resolve to NPM server at 192.168.1.10. Then nginx can listen for jellyfin.home.datallboy.com, and proxy those connections to my Jellyfin VM at 192.168.1.20.
Since I own my domain (datallboy.com), I let Nginx Proxy Manager do DNS challenge which is only used to authenticate that I own the domain. This will insert a TXT record on public DNS records for verification, and it can be removed afterwards. LetsEncrypt will then issue a certificate for https://jellyfin.home.datallboy.com which I can only access locally on my network since it only resolves to private IP addresses. The only thing “exposed” is that LetsEncrypt issued a certificate to your domain, which isn’t accessible to the internet anyways.
I have a public domain that I only use internally on my home network. I have a local DNS server that handles all my internal DNS records. So I just point my DNS records to my nginx proxy manager's local IP address and let it create certs using DNS Challenge. So I don't need to expose anything external to make it work.
IDrive Is the cheapest and it's what I use. They allow Linux backups and it's 1/3 the price of backblaze buckets. They also give the same amount of backup storage in cloud storage. Encryption is done locally before uploading. I think I got 5TB for $70? That's all I need for critical data. All the rest of my 100 TB of data is Linux ISOs.
selfhosted
Activo
Esta revista es de un servidor federado y podría estar incompleta. Explorar más contenido en la instancia original.