• 1 Post
  • 32 Comments
Joined 2 years ago
cake
Cake day: July 21st, 2023

help-circle




  • I’ve been running tge AIO container for several years now and it is running perfectly fine. I only enable whatever I use, so for instance no Collabora.

    But for Collabora, while it should be good for single-person use, if you require some kind of collaborative simultaneous work, you should probably set up the high-performance backend. I did this at work for a NC-instance hosted via Hetzner and it works well when we tried it, but we don’t really use those kinds of tools much in our daily work.


  • It depends on what service - some, like Jellyfin, are accessed only from home IPs which are static (for music through Jellyfin I use offline mode to prevent too much mobile traffic), so I can add those specific IPs in the whitelist. Otger services I need to access from elsewhere, and I can add entire subnets (i.e. for my phone carrier network or VPN servers). Those change once in a while and that is annoying. Other services I want publically available.

    Jellyfin especially still has some unsecured endpoints where it would be wise to take some.extra precautions. I think the risk some people seem to think this poses is a little overblown (i.e. rights holders finding your instance and reverse mapping your entire library and suing you to oblivion), but better not risk it.



  • I put encrypted backups (borg or restic) on a storage box from Hetzner. One local copy on a different drive and one remote. Keep your encryption passwords safe though, otherwise they aren’t worth much.

    Oh, and I plan to report status of the cron jobs that run these backup scripts via MQTT and display backup status in Home Assistant. But haven’t started that yet. So far I dump the logs and view them occasionally.





  • Ok - I tried Yabridge once with Ardour, but had a difficult time getting anything to work. I think it is because I used a Flatpak-build of Ardour. I think I’ll fork over the cash to get the pre-built binary (with upgrades) at some point soon to support their development, even though I could use the practice in building from source myself.

    Good to know that it is not as hairy as I had the impression of.




  • Invoicing I just used inkscape but it’s not great. Be prepared to make some sacrifices, but it’s all worthy to get rid of microsoft.

    How is Inkscape used for invoicing? You cretate the invoice as vector graphic template and just replace the text?

    I don’t ever do any invoicing myself, so I am not clear on the requirements here. But a template in LibreOffice Draw could perhaps work for this purpose? There might be some way to programtically replace the fields, and if you store client and project details in a database it should eventually be a matter of choosing which client to bill for which project and click “Go!”. I would aim for such a self-made setup to be independent on any license-ridden software. But again, I don’t do this, so I might have missed some important part of the puzzle.






  • I use Nginx Proxy Manager and whitelist my remote users. They all have static IPs though, so its a workable solution for me.

    Before I used a whitelist I would go through the access logs, and could never find any attempts to exploit the endpoints - only some random bots trying to find some admin page assuming it was another service. Not saying you shouldn’t take it seriously, but you are likely not subject to these attacks the moment you expose it.

    That said, there is a discussion about these endpoints on their repo. At some point they will be fixed (my impression is that they are hampered by legacy Emby code). When they do, you could do this more securely.