lemmy.net.au

52 readers
1 users here now

This instance is hosted in Sydney, Australia and Maintained by Australian administrators.

Feel free to create and/or Join communities for any topics that interest you!

Rules are very simple

Mobile apps

https://join-lemmy.org/apps

What is Lemmy?

Lemmy is a selfhosted social link aggregation and discussion platform. It is completely free and open, and not controlled by any company. This means that there is no advertising, tracking, or secret algorithms. Content is organized into communities, so it is easy to subscribe to topics that you are interested in, and ignore others. Voting is used to bring the most interesting items to the top.

Think of it as an opensource alternative to reddit!

founded 1 year ago
ADMINS
11926
 
 

My time's gotten way more limited than i'd like to the point of stepping away from a lot so I'm looking to transfer some communities. If anyone's interested then lemme know and I can get that going. I know dataisbeautiful's more active and could use it but I'm offloading any that could be used.

A bunch don't even have posts so I'm half tempted to just wipe those but I want some input to see if thats a good idea first.

11927
11928
11929
 
 

Hello!

I've been playing around with self-hosting for a while now and I've started moving over to a VPS. At home I have a PC that's on more or less 24/7 with an *arr stack, jellyfin and some other services. They can only be accessed through Netbird. The services aren't that important, the data doesn't really need to be backed up since it's not very important. On the VPS, however, I would like to host some more critical services, such as:

  • Vaultwarden
  • Immich
  • Gitea
  • Overleaf

I want them available 24/7, even if I decide to distrohop and wipe my PC at home. The problem is how to structure all this. My current idea is to run Gitea and Overleaf out in the open behind some reverse proxy without authentication (Nginx or Nginx Proxy Manager). I'd like Vaultwarden and Immich to be on the same VPS, but, I don't want those services to be accessible to anyone but me, so I'd need some form of ACL or authentication system. I'm thinking of using Netbird for this, since I already use it on all of my devices.

So I would set up DNS records from within Netbird that would point immich.domain.tld and vaultwarden.domain.tld to the internal Netbird IP of the VPS. In the reverse proxy, I'd set up access control such that it only redirects the Netbird IP range to those services. On Cloudflare, I'd point git.domain.tld to the external IP of the VPS with proxy enabled.

Everything would receive HTTPS certificates, and I'd block incoming traffic on every port except for 80 and 443.

Is this a good setup? Any tips or recommendations? Any pitfalls?

Thanks!

11930
 
 
11931
11932
 
 

Last thread here

Welcome to this week’s casual kōrero thread!

This post will be pinned in this community so you can always find it, and will stay for about a week until replaced by the next one.

It’s for talking about anything that might not justify a full post. For example:

  • Something interesting that happened to you
  • Something humourous that happened to you
  • Something frustrating that happened to you
  • A quick question
  • A request for recommendations
  • Pictures of your pet
  • A picture of a cloud that kind of looks like an elephant
  • Anything else, there are no rules (except the rule)

So how’s it going?

11933
11934
11935
 
 

The negotiations were cynical bullshit in an attempt to make anyone in Iran who believed peace was possible or that the US would act in good faith look like a fool. This ensures only those who wanted war from the beginning in Iran look wise coming out of this catastrophe, which is mission accomplished right?

11936
 
 

Dropped one of my wife's favorite mugs. Anyone up for a paid commission/challenge to print a new handle? Have you ever seen this work? Thanks!

11937
53
submitted 1 month ago* (last edited 1 month ago) by Beep@lemmus.org to c/technology@lemmy.world
 
 

This post provides arguments, asks questions, and documents some examples of Anthropic's leadership being misleading and deceptive, holding contradictory positions that consistently shift in OpenAI's direction, lobbying to kill and water down regulation so helpful that employees of all major AI companies speak out to support it, and violating the fundamental promise the company was founded on. It also shares a few previously unreported details on Anthropic leadership's promises and efforts.

Anthropic has a strong internal culture that has broadly EA views and values, and the company has strong pressures to appear to follow these views and values as it wants to retain talent and the loyalty of staff, but it's very unclear what they would do when it matters most. Their staff should demand answers.

11938
 
 
11939
11940
 
 

To be fair it was the Fox News AI which did that, which we must note according to the AI Law is not legally liable for incorrectly representing reality and does not necessarily represent the views of any of the owners or staff at Fox News unless in cases it aligns with their objectives in which case it does. The Fox News AI can also serve jail time as it is sentient and thus legal action against illegal misrepresentation and journalistic malpractice by Fox News management can be focused on the Fox News AI leaving all other personnel free to continue to contribute to the job market while justice is being served.

11941
11942
11943
 
 

Hey guys, so I've been self hosting for 2 years, making small upgrades until I reached this point where I replaced my router with one of those Chinese fanless firewalls running Intel n150 and running a proxmox homelab.

I am self hosting headscale with many of my buddies connected, including ny own services. Everything was working great until I setup OPNsense.

The firewall was not easy to setup, but after I set it up, I discovered odd behaviors from tailscale.

The firewall was blocking all connections from the ip 100.60.0.0/24, I had to explicitly allow it and change the forewall state to hybrid

What happens is that my LXC containers running tailscale would receive requests from tailscale0 interface but respond via LAN.

Apparently as I understood, consumer routers have assymetric NAT so that works fine, but not with opnsense.

Every guide I read online talks about installing tailscale on the opnsense router directly but I do not want to expose it to the tailscale network.

For now temporarily I set an ip route to tailscale0 and resolved it that way temporarily, but I still cannot get a solution that can help without compromising the firewall.

It's also very cumbersome to do this for 50+ LXC containers over and over, even with running systemd scripts a problem might happen in the future

If you guys have any experience with this it would help a lot.

11944
11945
 
 

Are they able to make their own decisions or are they a slave to your conjuration magic?

11946
11947
 
 

Microsoft has integrated OpenAI's new Sora 2 model into Bing Video Creator, offering all users free access to high-quality AI video generation with audio.

11948
 
 

BUDAPEST, March 5 (Reuters) - Hungary will force neighbouring Ukraine with "political and financial tools" to reopen the key Druzhba pipeline carrying Russian oil ​to Hungarian refineries, Prime Minister Viktor Orban said on ‌Thursday.

11949
 
 

A new organization launched to fight public corruption is suing President Trump and his attorney general, accusing them of flouting the law when they blessed the sale of TikTok's U.S. assets to White House allies.

The case, filed in a federal court in Washington, D.C., accuses the Trump administration of ignoring legislation designed to stop the spread of Chinese propaganda — and instead helping to broker a partial sale to businessmen close to Trump.

11950
 
 

We install Debian, Docker, Immich, and even Nextcloud and run a tiny self-hosted virtual Homelab.

0:00 Intro
0:30 Virtual Machine Setup
5:11 First Boot
5:45 SSH Login
6:35 Docker without Sudo
8:06 Docker Compose
9:40 Load Immich
11:28 Nextcloud

https://arthur.pizza/

view more: ‹ prev next ›