

Outside of VPS firewalls settings and fail2ban, is there anything else you’d recommend to harden the VPS?


Outside of VPS firewalls settings and fail2ban, is there anything else you’d recommend to harden the VPS?


Idk about audio but they rate limit video pretty quickly. Audio might be low enough bandwidth for them to not care, but be cautious


Is there a reason not to use pangolin for the public stuff too?
I’m just about to make the switch from CloudFlare to pangolin on VPS, and I wanna make sure I’m not missing anything


I was going to switch to trillium next, but in the end I decided not because it relies on a database even more than Joplin does.
I’m in the process of giving Silver Bullet a try. It seems to be pretty well designed. I don’t really like that folders are just cosmetic and not useful for navigation, but I like that it is open source, that the documents are saved in the file system, and that it’s self-hosted instead of synced.


Because with federated services people don’t have to host an activitypub server, you can join a federated instance that someone else maintains.
The typical Twitter user balked at just selecting a mastodon instance when they signed up in the app… similar issues for reddit users looking to come to lemmy. If you think that they’re going to be willing to go and set up and manage their own server, even on a free hosting site, you’re wildly mistaken.
If you don’t think you need the normies on your social network anyways, I have no polite way to tell you that most people want to join social networks with their friends.


Maybe? But I wouldn’t hold my breath.
I mean, it’s the best option you have, but that doesn’t make it a good option.


It’s ephemeral because now you’re demanding that everyone stand up their own web-addressable servers that the rss readers can search, if they want their own content to be searchable. Which isn’t going to happen. So in practice, it’s going to be either federated, or ephemeral.


Why do we advocate for, and pour hours of development into, ActivityPub rather than
Because that’s what the devs are interested in doing. If you’re going to ask anyone, ask them.
a big thing you’re missing is discovery of old content and searching. You’re describing a purely ephemeral social network. Activitypub itself can’t solve that, but this is why federated networks exist instead of purely P2P.
Maybe some people want that, after all Snapchat became popular. But it wouldn’t work for something like Lemmy.


I think you’re going to have a problem keeping your power supply floating in the air like that


Considering that Linus himself only makes binaries for windows and mac, and doesn’t bother packaging for Linux because it’s so painful, I’m not surprised that the immich folks didn’t make one.
Ah, ok then, never mind my answer. I greatly misjudged what you were really looking for
What are you using for your main backup? It probably has a feature for doing remote backup / duplication. You’re best off using that.
If you don’t, then I think that’s probably your first order of business. There are a bunch of good COTS NAS devices that support remote backup to a similar device or to the cloud. Synology generally seems to be the easiest to use based on reviews, but recently they’ve been getting picky about hard drive support.
If you’d rather DIY then there are some FOSS software options to let you build your own NAS and then back it up to the cloud or to a remote device running the same software. These can get pretty complicated from what I can tell (I’m in the process of doing something similar, been researching). Options include OpenMediaVault, and TrueNAS. TrueNAS seems to be “better” but more complicated and easy to fuck up.
Unraid is also very popular, but it costs money to get a software license. Users swear by it, though.
And on the outside HexOS - a fork (or maybe alternative front end?) of TrueNAS, by some former Unraid devs, with the goal of making TrueNAS as easy to use as Unraid. But it’s both paid and beta, so probably not a good choice yet.
These will all allow remote backup to cloud or to a remote device running the same software. They also typically support some kind of virtualization with an app store, so you can use your NAS to host other servers like a media server or immich or home assistant, etc (although app ecosystem abundance will vary).
Wrt hardware, you’ll have to look up system requirements for the software you want to use. For example, TrueNAS uses ZFS filesystem, which wants a lot of ram if you need it to perform well.
If your r-pi can run the software you want, then you can get a SATA hat for your pi, to run a couple hard drives. You can also get NAS cases for your pi.
I probably wouldn’t recommend leaving a mess of cables and parts at your friend’s house across the country, it’s better for both of you if the system is fairly well contained - enough for them to move it without risk of parts getting disconnected.


Thanks!
That helps when I eventually get around to standing up my own AI server.
Right now I can’t really justify the cost for my low volume of use, when I can get CloudFlare free tier access to mid-sized models. But it’s something want to bring into my homelab instead for better control and privacy.


It depends on your motivations and security requirements.
If you’re already hosting Home Assistant, there is an add-on for CloudFlared which will take care of most of everything for you, using CloudFlare secure tunnels.
It even does simple subdomain reverse proxy, to serve your other services.
It requires that you use CloudFlare for your DNS entries, and it won’t secure your host for you (they do offer some free services to help a little), and you still end up depending on a cloud service provider so it’s not pure self hosting.
But it’s free, you’re still mostly in control, and it’s less likely to catastrophically mess up your netsec if you’re a beginner.


Is Nvidia still a defacto requirement? I’ve heard of AMD support being added to OLlama and etc, but I haven’t found robust comparisons on value.


Depends on your priorities.
But if your priority is to get the info out there, then you want both, so that it can’t be stopped just by your ISP cutting your service or losing power, nor by the service you’re using shutting down or deleting your message


In a world of left-pad, I’m sure someone has made an app for it


I don’t want to nuke them from my phone though. I want them on my phone, and I want them on my NAS 1 time.


I’m frustrated that Immich doesn’t have a “back up new photos only” option.
All the photos on my phone are already in a huge external library with my backups from previous phones. I don’t want to delete them from my phone just so immich doesn’t freak out, and I don’t wanna have them on my NAS twice
Immich seems great, but this seems like the bread and butter migration path that nearly everyone would take.
Using an AI is a great way to get learning materials tailored specifically to you.
But after you’ve learned from it, before you move on to another topic, you HAVE to verify your understanding against more trustworthy sources that you previously couldn’t understand. Ideally with an online course that actually gives you a test.