- 0 Posts
- 48 Comments
2·1 month agowould rather not go that path
assuming that you’re to expose that to the Internet, my recommendation is to deploy only
- WAF solution, such as https://github.com/corazawaf/coraza-caddy
- bot blocker such as https://anubis.techaro.lol/docs/admin/environments/caddy
complicate the setup too much and it’s going to rather be more painful to maintain and also much easier to misconfigure.
The WAF covers OWASP Top 10 so that should give you around 70% protection which is still better than nothing
hmm I wonder if it’s because of the recent subscription hike … hmmmm
intense HMMMM
I was pondering the same for last couple of days and had some thoughts on how to make it feasible. My research led me so far to 2 prerequisites:
- must have Anubis in front
- must have a WAF solution in place that covers at least OWASP Top 10
I found pretty good Caddy documentation that covers both, so I think I’ll deploy a secondary Caddy reverse proxy that’ll perform such ops for public facing services.
Of course, I currently have only 1 Caddy instance reverse proxying my internal services, haven’t reached the part on traffic handling when my devices are connected to the “safe network” (aka my home LAN)
says repo is archived
afaik but I’m not sure, Jellyfin lacks support for OIDC AuthN which is a clear sign that you cannot expose this publicly.
dammit we have to donate even more now
wow! I checked this one but never thought it could also export them from iCloud 😮 cheers, will give it a shot
how did you export apple photos, asking because I’m transitioning currently to Immich
I started selfhosting just because throwing cash on subscriptions at big corpos is not feasible since subs are increasing on a year-on-year basis. To my mind, if I’m going to self-host to yet again pay sub prices defeats the sole purpose of selfhosting.
That money you can pocket and invest in your own hardware for spare parts, upgrades & the like
port knocking is still there btw
yikes!
How often were you running scrub & trim?
same here, took me 7m to set this up on OPNsense with FritzBox
a switch that’s 802.1Q capable, and plug your gateway to it. From here start tagging and enable VLAN tagging everywhere
damn, very evil company, I didn’t even know that
there are a large bunch spending time on Discord as well
Found a couple of them on SimpleX chat also, those you can find yourself in SimpleX directory: Linux, Selfhosting and homelab (I think)
Then there are some forums like Proxmox, Nextcloud and idk others, however these are scattered
will do, tysm 🙏
good for wife, definitely gonna try this one out.
For myself not so much, all my clothes I can fit in one suitcase 😅
can’t wait to install one in the toilet and have them listening me fart all over the place