Mikelius

Gentoo lured me into OpenRC a long time ago and it’s just basically my go to now. It’s just so easy and “feels” less bloated to me.

Def wouldn’t. As much as I love opnsense and recommend them, their major updates tend to break something every time for me. Then again, my overall setup is a lot more complex than the average person, so maybe that’s on me lol.

Never heard of chatto until this one… Anyone here tested it vs fluxxer and have any opinions?

Similar thing happen to me. Had a lightning strike fry the ONT port outside, the charge went through to the UPS cat5e surge protector and to my opnsense box and fried it. Luckily it stopped there.

This is where I tell everyone to never buy UPSs from CyberPower. I sent them the thing to inspect because it was guaranteed paying for the damages from power surges and they claimed there was nothing wrong with it and their inspection came clean. But they sent me a new one and said they won’t pay for my lost firewall.

Sorry to hear you got 10k in damages, that sucks. I’ve now got a whole house surge protector to try my best to avoid that (and I STILL unplug expensive things like my TV and stereo system).

My front yard takes over an hour with a push mower and the terrain is too complex for a ride mower. I’d be curious if I’d be the exception, unless the robot mowers are terrible at landscape changes like a robot vacuum would be. Including some boulders… But maybe still cheaper to hire some kid if I get that far on the lazy scale.

I was thinking Damn Small Linux. Felt weird reading “small damn small Linux”

This is exactly how my network is setup. All devices log to my syslog server which I feed into a database with a self made python app, and Grafana goes from there. It’s been running nonstop for like 5 years without any problems, so I’d say your in the right path!

It’s also helped me catch things like:

• finding out android leaked IPs outside VPN tunnels on connect (prior to headlines claiming this)
• finding out nslookup on termux ignores the phone’s DNS settings and tries to use Google instead
• finding other devices that ignore my DNS server settings
• noticing that my work Mac will turn itself on in some weird silent passive mode in the middle of the night to try and send data to apple (sleep or powered off don’t matter) - caught this from the logs sent by my router

Same here. I’m looking at all my other hobbies and trying to see which one would be the best… Unfortunately I doubt I could get anywhere near the same salary unless I find a way to start my own successful business out of one of them. That sounds just as stressful though lol

I’ve just use iptables rules which default block all docker containers any network access. I assign static ranges to those I permit access, though. It does occasionally throw me off when adding new services and not understanding why sometimes they don’t work right away, but I prefer it that way.

Big brain moment. If I create a license that makes it illegal to train AI on, and then prove they trained AI on it, can I do a takedown notice of their AI system or training model for copyright infringement?

Serious question. Any “legal smart” people out there know? lol

Still using my Gentoo install on my server which is now going on maybe 8 years?.. Never changing it lol.

Having a smart tv doesn’t mean you must use internet to utilize it. Mine is blocked from internet connectivity but connects to my media server on the local network. If anything, I prefer this so I don’t need an extra computer sitting in the living room and can instead use the same single media server my phones and computers do.

I bought a separate laptop and set it up with an encrypted password that both my wife and I know. It contains instructions on everything from my self hosted stuff to anything else related to my personal life that she would need. It’s 100% offline to keep it safe from a network compromise. This whole thing was especially important since I wanted to make sure my family could access all photos, calendar, contacts, etc for the last decade that are stored on my server.

It takes time to transfer everything to it (all in Obsidian) since it’s a brain dump… But it actually benefits me too. I’ve had a few times where I was like “how the hell did I set that up?” and had some instructions on there the helped lol.

Definitely recommend this to others to consider.

I’ll be honest, I think the grammar and way the post was written is what’s annoying me most. I’m reading it with at least 3 different possible meanings.

Interesting, I’ve never had this problem and have been using the auto upload for many years. I only use it for the photo taking, though. Any time I go through a phone cleanup and delete photos and videos, I’ll look at the folders I backup to on nc and actually go through them carefully to make sure everything was uploaded.

My install comes from f-droid so not sure if that’s something to do with it (unless yours is too).

I’ve got it setup automated on all my external domains, but trying to automate it on my internal-only domain is rather tedious since not only do I NOT want to open a port for it to confirm, but I have 2 other devices/services on the network not behind my primary reverse proxy that share the same cert.

What In need to do is setup my own custom cron that hits the hosting provider to update the DNS txt entries. Then I need to have it write and restart the services that use the cert. I’ve tried to automate this once before and it did not go so smoothly so I’ve been hesitant on wasting time to try it again… But maybe it’s time to.

What would be ideal is if I could allow it to be automated just by getting a one time dns approval and storing a local private/public key to prove to them that I’m the owner of the domain or something. Not aware of this being possible though.

I’d hesitate disabling it altogether, unless you’re absolutely certain nothing will need it. One suggestion I haven’t seen mentioned is looking at the other sysctl options that might be tweaked. Check with netstat how many of those connections are stuck in established, close wait, time waiting, etc. It’s possible you just need to lower the default values of things like nf_conntrack_tcp_timeout_established, for example. https://www.kernel.org/doc/html/latest/networking/nf_conntrack-sysctl.html - naturally, research anything you think you might want to change before you do.

Daily on my Gentoo server, through a Cronjob every morning. It’s a custom script though, so there’s more than just doing an emerge update. It’ll send me ntfy notifications for the update results, if there are new news items, and if there are any time config merge updates to make. A few other things as well but that’s the main stuff.

Other servers, typically weekly or only manually when I ssh into them (for the ones I don’t really feel the need to update frequently).

Man, we just can’t win with these UI tools, I also thought Bruno was the solution. Only use it on my work machine so that’s why I guess I never noticed this. Thank you for sharing, time to go back to digging for better alternatives.

I’m shocked how far I had to scroll down before it was mentioned, I was getting scared I would have to say it lol