A software developer and Linux nerd, living in Germany. I’m usually a chill dude but my online persona doesn’t always reflect my true personality. Take what I say with a grain of salt, I usually try to be nice and give good advice, though.

I’m into Free Software, selfhosting, microcontrollers and electronics, freedom, privacy and the usual stuff. And a few select other random things as well.

  • 1 Post
  • 491 Comments
Joined 5 years ago
cake
Cake day: August 21st, 2021

help-circle




  • This reads like it’s written by OpenClaw?!

    All open-source. […] You built this. Not a vendor. Not a consultant. Not a managed service provider who will send you an invoice next month for the privilege of using what was always supposed to be yours. You opened a terminal, followed a guide, made decisions, fixed the things that broke, and kept going.

    Aha?

    • Cloudflare not open-source
    • OpenAI not open-source and they DO send you a bill
    • Anthropic not open-source and they do send you a bill
    • Google not open-source and they do send you a bill
    • Perplexity not open-source and they do send you a bill
    • supabase.com not open-source and the free service is limited
    • QuickBooks Online is proprietary, so are Xero, FreshBooks and Wave?

    4 Part Series

    Ah a 4 part series in 5 parts with one part missing?

    zero-trust through eight independent layers

    I don’t think the layers build on top of each other. That’s just random things all shoehorned in. One firewall is enough to block 100% of packets, you don’t really need 3 to do the very same thing. And then delegate it to Cloudflare anyway.

    OpenClaw

    And now you got zero security layers. And I bet your API bill will be way more than 3-5 inference runs per day with that.

    Step 1: Apache Guacamole

    What do you need RDP for?

    Step 9: AES-256 Encrypted Backup

    Please(!) don’t do “backups” like that. Learn how to do Docker and what makes sense in that environment, how to backup your databases. And the need to keep backups somewhere that’s not just the same harddisk. And do test them. And you should really consider following the 3-2-1 rule if this is your company’s data or you rely on it as a freelancer.



  • hendrik@palaver.p3x.detoFediverse@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    10 days ago

    To be fair, you accumulated most of the downvotes (I see) in a single post and the attached comments. You got two things at the same time: the unpopularopinions community tends to be harsh. From my experience I’d say you get way more downvotes there, than in other communities. And secondly, you picked one of the two super controversial topics. Brace for downvotes if you post about AI. Or Israel. Dunno if the latter toned down a bit, or if I’ve unsubscribed from enough communities since.

    It’ll be better with almost all other topics.

    Not sure if I’d go straight for “silencing”. I mean the post and most comments are still there. So it’s just that you got a lot of backlash. But I can still read what you wrote. And you got quite some engagement. But I get what you mean.

    And down-votes are a bit weird. We never agree if they mean bury the content somewhere at the bottom. Or if it means " I disagree with what you wrote". That just gets lumped together. And some people use them sparingly, some hand out a lot of downvotes. Which I guess could be fine if they’re used to for the frontpage ranking to sort the posts. But the way we use them doesn’t really give them the right weight.

    And by the way, I’m not sure if I like up-votes either. You’ll get 300 of them for re-posting a meme. And 3 upvotes for coming up with really good advice to someone’s question.


  • hendrik@palaver.p3x.detoSelfhosted@lemmy.worldPower efficiency
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    11 days ago

    Yeah, I think the correct sticker on a PSU would be something like 80 Plus Ruby?! Everything else comes with 80+% efficiency at 20% rated load. Which is 200W for a 1000W PSU. And there’s no guarantee on what happens below that, so it might very well be utter garbage at a home server power draw of 20-30W.

    You never know without looking up the datasheets. Though, back when I built my home server/NAS, I failed to find a good one. I got a PicoPSU and a 12V power brick instead. Not sure if that’s still a thing. But I remember it was a lot of work to find proper and efficient components. And it doesn’t make any sense to put in all the effort (and money) and then burn all the saved energy, and then some more, in an average PSU.

    Some MiniPCs, NUCs and even computers also come with fairly efficient power supplies.


  • hendrik@palaver.p3x.detoSelfhosted@lemmy.worldPower efficiency
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    12 days ago

    I got a power-efficient mainboard and PSU. I think that’ll be the lion’s share. And I don’t have any unnecessary stuff like a GPU or extra stuff connected.

    I ran powertop and adopted the recommendations to set the various buses, peripherals and devices into powersave mode. That does a few Watts here and there. CPU of course is also allowed to save power when idle.

    And then I made the harddisks spin down after 40min of not being used. Or something like that. So they’ll automatically spin down at night and when I’m not using them. As spinning hdds consume quite a lot of power if you have multiple of them and compare it to the 15-20W or so the rest of the computer uses. The operating system is on a SSD.



  • I’ll just open them up to the internet via an nginx reverse proxy. Make sure sign up is disabled in the applications, and something blocks people from brute-forcing passwords. Pretty sure Nextcloud comes like that per default. And I’ll do updates. And see if I can run stuff in containers or seperate users so in the unlikely case something happens, access to one of my services doesn’t compromise the entire server.

    Lots of other people use VPNs though. Like Wireguard, Netbird, Tailscale…


  • If it’s just you, and you’re fine with the regular login… Just disable signup and don’t add more authentication mechanisms like oauth/openID.

    I’m using nginx as a reverse proxy as well. For now, I added a lot of “deny” directives to ban all the address ranges from Tencent, Alibaba, OpenAI. It’s not a 100% solution, but works well enough for me. I’m mostly worried about AI crawlers causing too much load on my server. And it stopped since, so I don’t think I’m gonna need Anubis and all these extra things in front if my applications. If you like you can look into solutions like a web application firewall like Crowdsec.



  • Well, previously we had LemmyNSFW. That one died, pretty much out of the blue. Now the second admin(?) of it launched FediNSFW as a successor. We have that - for now - I guess? They said they’re gonna try to make sure the same thing doesn’t happen again.

    But I guess it’s still a single point of failure. If they don’t properly ensure there’s several people who own the domain and hosting infrastructure, can administer the contracts, server etc, it might still be down to one person and their ability to keep it up. And if there’s legal troubles, uncertainty, not enough donations, law changes or the hoster or Cloudflare pulls the trigger, that might be the end of all of it as well. A severe technical issue/mistake could also take down a singular instance. And due to the delicate nature of NSFW content, they probably can’t afford to be 100% transparent with us, so I wouldn’t know whether they’re in a healthy place or not.

    I mean there’s nothing wrong with FediNSFW’s existence. I just think it’s massively questionable to all bet on the same horse, and then call us the “Fediverse”, a decentral platform…


  • I think so as well. Porn is available in abundance. We don’t really need it here. What I think could be nice is people who like to write erotic fiction as a hobby and post their original content. Or people discuss erotic computer games. Or like relationship advice and NSFW questions in case some country abolishes sex ed. Maybe talking about piracy, mental issues, loss… all the things that are deemed “not advertiser friendly” on commercial platforms. That’d be something positive. But it’s not easy. And it often all gets lumped together under some big NSFW umbrella and 95% of people want to share pron clips anyway. Mostly with zero care for copyright or the creators’ consent.


  • Hehe. Yeah, I don’t think we need more content. There’s already some out there. And everyone can add more, all they need is 20sec of time and a redgifs link. What we really need is more admins run servers to host that stuff. And a bigger admin team for the already existing instance so it doesn’t just randomly go away along with all the content, as well. Maybe one or two lawyers, or someone with expertise in bullet-proof hosting, to set it up properly. (And we likely need moderators as well. Half of the communities on the old server used to be a desert. Claimed en masse by some nominal members who left a long time ago.) But original content is certainly welcome 😆




  • Start simple, then work your way up. Construct a static website with HTML. Learn how to navigate folders on a (remote) server, so the Linux commandline. Learn how to install software and where to find the configuration and logfiles. Then install some webserver and make it serve your first website. You can do all of this on your own computer. And after that you can learn how to install other web applications, how to reconfigure your webserver to act as a reverse proxy.

    So start with basic webdevelopment first, then do Linux, webservers, and then once you got the basics you can do more advanced apps, containers and all the stuff.

    Not sure which book to recommend. But I often recommend https://yunohost.org/ to people who just want to run webservices. It does most of the complicated stuff for you and you just need to click install for software in YunoHost’s catalog. You just need to learn a few basic things about the internet, because it’s fairly easy to use.