This is a bit of a Pokemon starter question. Just pick one and see where it takes you! They do roughly the same job, especially now that docker has a rootless mode. At the end of the day you’re learning a new technology and that’s a positive thing.
- 0 Posts
- 26 Comments
Joined 1 year ago
Cake day: September 8th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Genuine question – how does it “use” that water? Isn’t it primarily utilized for plain old water cooling, where in mind it just evaporates at worst?
What are we going to do, build high speed rail!? A technology so advanced that China alone has enough track in active operation to traverse the US over 13 times as of three years ago? I dunno, seems like a gamble
My process for project identification has been:
- Be annoyed at ads/payment structure/whatever in some app or service
- Search https://alternativeto.net/ for alternatives to the thing I’m annoyed with (filtering by Open Source and my devices)
- Try out 1-2 of the top alternatives
- Settle on what service I want to run
- Install, route the subdomain, etc. if necessary (otherwise just access via my tailnet)
As for how to deploy, docker / podman are great! With podman I’d recommend looking into their systemd integrations too. Incus is a neat LXC option too, meant more for longer term services (less micro service focused, good and bad).
Hope this helps!
Haha I’ve had a journey to get here, all because I have a 12th gen Framework.
Initially I got Debian Sid working but ran into power management issues with the module system. I switched over to arch and loved that for a while but frankly I was too careless and kept breaking my system. The way I use Arch it wasn’t a stable daily driver. Then I switched over to NixOS and loved it, but I bricked 3 of 4 ports with a firmware update (again me being careless). Graciously, Framework helped me fix the issue.
After all of that I decided to go with a distro that is officially supported by Framework. Between Ubuntu and Fedora I choose Fedora since they don’t have ads for Ubuntu Pro :) I also like SELinux by default and wanted to broaden my horizons
I tried Debian + Nix once upon a time too. Honestly flatpaks and containers did everything I needed and more, and every dev team I’ve been on already has familiarity with the container workflow.
I’m a huge fan of Debian and Nix, don’t get me wrong, but it was shy of perfect for my use case. Glad it works for you though! I’ve been using Fedora + Nix home-manager with flakes for almost two years and I don’t think I’ll ever go back
Yakuake is similar but drop down based (like quake). I love having a hot key to access my terminal (tabs, splits, and all). Especially when editing in vim and looking at docs in Firefox it’s such a buttery smooth workflow.
Real men use Incus NixOS containers for reproducible builds instead of wimpy dockerfiles 😤😤
/s – for real though, I hope someday you finally remove the stick from where the sun doesn’t shine ;)
What no love for Incus round these parts?
1·9 months agoI see a lot of love for proxmox in this thread.
Word of warning from my experience, sometimes PfSense seems to get confused with virtual interfaces. It works flawlessly once it’s up and running, but every time I reboot I have to assign interfaces. It will hang until I do so and will not completely come back online until I manually intervene.
Oh cool! I didn’t realize pandoc was extensible enough to deal with this kind of conversion. I’ll give it a look!
With the rise of these .md based personal knowledge database applications it would be amazing to see some conversion software.
I understand that each has their special sauce. Does anyone know what would be the most difficult part about building a tool like that to copy in Logseq data to SB for example?
42·9 months agoAs an avid NewPipe user I like that it’s an approximately identical tool with more functionality!
It seems like a fork where (I wish) a plugin could (ideally) be in NewPipe. It may also be a nice nod to the original devs to change the default color scheme of the fork so nobody gets confused as to who forked from who.
Overall very cool work! I hope they continue to have success and make progress.
Right!! Just like anything there’s a trade-off.
Glad you phrased the well-intentioned (and fair) critique in a kind way! I love it when there’s good discourse around these topics
You make a great point. I really shouldn’t contribute to the boogeyman-ification of port forwarding.
I certainly agree there is nothing inherently wrong or dangerous with port forwarding in and of itself. It’s like saying a hammer is bad. Not true in the slightest! A newbie swinging it around like there’s no tomorrow might smack their fingers a few times, but that’s no fault of hammer :)
Port forwarding is a tool, and is great/necessary for many jobs. For my use case I love that Wireguard offers a great alternative that: completes my goal, forces the use of keys, and makes it easy to do so.
Couldn’t agree more! Tailscale also lets you use Mullvad (up to 5 devices per Mullvad account, across all clients) as an exit node.
I’ll assume you mean what I mean when I say I want to be safe with my self hosting – that is, “safe” but also easily accessible enough that my friends/family don’t balk the first time they try to log in or reset their password. There are all kinds of strategies you can use to protect your data, but I’ll cover the few that I find to be reasonable.
-
Port Forwarding – as someone mentioned already, port forwarding raw internet traffic to a server is probably a bad idea based on the information given. Especially since it isn’t strictly necessary.
-
Consumer Grade Tunnel Services – I’m sure there are others, but cloudflare tunnels can be a safer option of exposing a service to the public internet.
-
Personal VPN (my pick) – if your number of users is small, it may be easiest to set up a private VPN. This has the added benefit of making things like PiHole available to all of your devices wherever you go. Popular options include Tailscale (easiest, but relies on trusting Tailscale) or Wireguard/OpenVPN (bare bones with excellent documentation). I think there are similar options to tailscale through NordVPN (and probably others), where it “magically” handles connecting your devices but then you face a ~5 device limit.
With Wireguard or OpenVPN you may ask: “How do I do that without opening a port? You just said that was a bad idea!” Well, the best way that I have come up with is to use a VPS (providers include Digital Ocean, Linode to name a few) where you typically get a public IP address for free (as in free beer). You still have a public port open in your virtual private network, but it’s an acceptable risk (in my mind, for my threat model) given it’s on a machine that you don’t own or care about. You can wipe that VPS machine any time you want, the cost is time.
It’s all a trade-off. You can go to much further lengths than I’ve described here to be “safer” but this is the threshold that I’ve found to be easy and Good Enough for Me™.
If I were starting over I would start with Tailscale and work up from there. There are many many good options and only you can decide which one is best for your situation!
-
It’s definitely a skill that I haven’t mastered either! That being said I think it’s one of the pillars of being a bonafide “super user” and I’d like to set there one day :)
Maybe I’ll take inspiration from this post and write something up about what I learn in the future about manpages.
Cheers and happy tinkering!
Thanks for putting this out for public benefit! I haven’t messed around with MacOS much but the things you’ve mentioned are nice to know.
I believe that’s a shell/bash standard variable, but I need to learn where it came from and how it works
You may know this already, but I’ve found the
man(as in manual) utility to be one of the most useful things in GNU/Linux user space. I don’t have much insight into ‘${file##*/}’ off the cuff, but I can tell you there’s manual entries forfile,sh, andbashthat may help you track it down.# simply type man [some-command] man file man sh man bash man man # very useful for getting started!Manpages are local to your system so they’re extremely fast to pull up and searchable!
Here’s some online info on
manif you’re interested:
I’ll try to keep this to lesser known apps:
Catima (saves barcodes for gift cards, gym memberships, etc so you don’t have to worry about the physical card)
Cofi (nice timer for active guidance through coffee brewing recipes)
10,000 Sentences (a language practicing app that doesn’t have a mildly threatening owl 😉)
OSMAnd+ Mapillary, Overlay Maps, and 3D Features (seriously, the best. I only use Google maps to get around traffic these days since, unfortunately, Magic Earth doesn’t work very well in my area)
Obtanium (as a gateway to lesser known software, no shipping to an app store required!)
RethinkDNS (an absolutely amazing piece of software that gives you fine-grained control of the domains your apps are talking to. A bit of a battery sync but it’s been a game changer for me. On my GrapheneOS setup I use it in the Google sandbox to reduce the amount of data scraping servers my Google apps can talk to)