🇨🇦

  • 5 Posts
  • 92 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • An $11/yr domain pointed at my IP. Port 443 is open to nginx, which proxies to the desired service depending on subdomain. (and explicitly drops any connection that uses my raw ip or an unrecognized name to connect, without responding at all)

    ACME.sh automatically refreshes my free ssl certificate every ~2months via DNS-01 verification and letsencrypt.

    And finally, I’ve got a dynamic IP, so DDClient keeps my domain pointed at the correct IP when/if it changes.


    There’s also pihole on the local network, replacing the WAN IP from external DNS, with the servers local IP, for LAN devices to use. But that’s very much optional, especially if your router performs NAT Hairpinning.

    This setup covers all ~24 of the services/web applications I host, though most other services have some additional configuration to make them only accessible from LAN/VPN despite using the same ports and nginx service. I can go into that if there’s interest.

    Only Emby/Jellyfin, Ombi, and Filebrowser are made accessible from WAN; so I can easily share those with friends/family without having to guide them through/restrict them to a vpn connection.




  • Hard to say for sure really.

    I can respect someone’s religious views as long as they aren’t trying to push them on me. That’s to say; not trying to make me believe the same or insist that I have to follow the rules of their chosen religion.

    As far as my own views go; I don’t follow any particular religion. I don’t necessarily believe there isn’t some form of god, but I don’t follow/believe in any specific deity either. Maybe there is, maybe there isn’t; but there have been hundreds of thousands of gods/goddesses/deities/religious figures throughout human history. Who’s to say you’ve chosen the correct one, along with the correct set of (sometimes oddly specific) rules and regulations to go along with it?

    You want commandments to follow? Here’s one:

    “Don’t be an asshole”

    Everything else kind of just falls into place around that. As long as we can respect each other and our differences; yeah, romance is certainly possible.







  • Trying to set that up to try out, but I can’t get it to see/use my config.yaml.

    /srv/filebrowser-new/data/config.yaml

    volumes:

    • /srv/filebrowser-new/data:/config environment:
    • FILEBROWSER_CONFIG=“/config/config.yaml”

    Says ‘/config/config.yaml’ doesn’t exist and will not start. Same thing if I mount the config file directly, instead of just its folder.

    If I remove the env var, it changes to “could not open config file ‘config.yaml’, using default settings” and starts at least. From there I can ‘ls -l’ through docker exec and see that my config is mounted exactly where it’s supposed to be ‘/config/config.yaml’ and has 777 perms, but filebrowser insists it doesn’t exist…

    My config is just the example for now.

    I don’t understand what I could possibly be doing wrong.

    /edit: three hours of messing around and I figured it out:

    • FILEBROWSER_CONFIG=“/config/config.yaml”

    Must not have quotation marks. Removed them and now it’s working.


  • Darkassassin07@lemmy.catomemes@lemmy.worldHold on babe
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 month ago

    I worked a warehouse a few years ago that had ~15 of the two pallet long ride-on pallet jacks and one that could carry three pallets.

    Each of the employees picking orders would drive them around, paletizing a whole order then dropping it off in a staging area to be wrapped and loaded on a truck later that night.

    You’d often have item bays waiting to be replenished before you could complete picking an order, so we used ride-ons that could carry two pallets allowing you to move on to a second order while you waited on the first.





  • FolderSync selectively syncs files/folders from my phone back to my server via ssh. Some folders are on a schedule, some monitor for changes and sync immediately; most are just one-way, some are two-way (files added to the server will sync back to the phone as well as uploading data to the server). There’s even one that automatically drops files into paperless-ngx’ consume folder for automatic document importing.

    From there BorgBackup makes a daily backup of the data, keeping historical backups for years with absolutely incredible efficiency. I currently have 21 backups of about ~550gb each. Borg stores this in 447gb of total disc space.



  • Without authentication; it’s possible to randomly generate UUIDs and use them to retrieve media from a jellyfin server. That’s about the only actually concerning issue on that list, and it’s incredibly minor IMO.

    With authentication, users (ie, the people you have trusted to access your server) can potentially attack each other, by changing each others settings and viewing each other’s watch history/favorites/etc.

    That’s it. These issues aren’t even worth talking about for 99.9% of jellyfin users.

    Should they be fixed? Sure, eventually. But these issues aren’t cause to yell about how insecure jellyfin is in every single conversation, and to go trying to scare everyone off of hosting it publicly. Stop spreading FUD.