You really only need Storage. Backblaze B2/Wasabi/Cloudflare R2 if you can afford it, or just get a Hetzner storage box, attach it to the VM, run Minio and off you go.
Does feddit.org work without JS? Does this depend on the front-end that the instance uses?
The funny part is I did mean Mozilla
I didn't say they were. For the most part, if a third option really comes up, I'm OK with Mozilla not existing at all.
Configure the TOR Duckduckgo and Brave search engines and only search over TOR. Switch circuits every x hours.
You should do it on a VPS so that even if it gets infected your home network is not compromised
Which is why I'd like to see a third player. I don't use Chrome except for ungoogled chromium when the other browsers are tied up
This one is completely on Mozilla. TBH I'm not very happy with their governance either. Stop spending money on bullshit and start working on the damn browser. Stop hassling devs like him who have had an immense contribution to not only open source, but your fucking browser's usage metrics.
I wish another browser standard comes up and we can say goodbye to this google-infested shit-bucket that is mozilla.
Thanks, if most of them already have the 5.10 kernel I think KernelSU should work.
I'm afraid I do not follow. TrueNAS scale has support for kubernetes: install containers on top, maybe different containers for different fileshares/uses (one container for VM images, one for media etc).
Mount said network volumes on the compute boxes.
What kernel version do Moto phones from 2023/2024 have?
I'm looking at the G play/G Power editions which I'd like to root with KernelSU. Which kernel versions do these devices have?
Thanks
I don't care as long as they keep it technically sound.
Yes of course, transacting amounts close to the payments you want to make is a bad idea.
I should probably study a bit more about MW, it's been a while
I do not know the specifics of how MimbleWimble works, but like XMR, transaction history and metadata is no longer public. Your trace of coins are effectively evaporated when you move coins over MW to another wallet from your "compromised" wallet, and from there you convert to XMR/move to another LTC wallet and pay merchants who accept LTC without MW. Obviously, basic OPSEC is expected but other than that the technology is supposed to work fairly well.
You could also do a swap like LTC->XMR->LTC and spend it that way, losing some money in the process but soothing paranoia in return
I just never looked into BCH, I'll take a look thanks
You can just create two different accounts, both with MW on LTC and pass coins between them to break the chain. But yes you're right, I wish it was opt-out instead of opt-in
I found this but it's from a while back: https://h-mdm.com/advanced-web-panel-installation/
Not too many out there TBH. If I had a daughter she'd be getting a Pixel with Grapehene and a DNS server on it (different user) if she really didn't have any self control
Is StormyCloud the only I2P outproxy?
A lot many individuals run TOR exit nodes, but I never hear about people running their own I2P outproxies. Is it really hard to host, or is there some other reason? I thought that if you could run a TOR exit node I'd think you'd be just fine running an I2P outproxy.
Running more outproxies will help in bridging torrents from the clearnet to I2P, which would be a very good move considering the crackdowns on torrents right now. Companies even want to involve civilians into their lawsuits in Sweden now, making the need for privacy/anonymity even more important when torrenting, which I2P provides.
Does Wikipedia really need my donations?
Every now and then I'll get an email from someone higher up in Wikipedia asking for a donation. I don't really mind a tenner but I don't know if it pads the pockets of corporate management or actual contributors. Also, are they really short of money or is this tugging at emotional strings a play at something else? I wish Wikipedia survives but there's a lot of projects I need to donate to and I have a budget.
I find no motivation in working for myself
The title is really vague, so I'll try to clarify my intentions here:
I am an ardent supporter of FOSS. It will be greatly beneficial for my life and especially my privacy to self-host such software. Yet, I cannot find much motivation to do so.
However, when it comes to hosting software for public use, I can usually give my utmost concentration and dedication.
This is not how I want my life to be. I want to be motivated for myself as well as for the community. And if that's not possible, I need to trick my brain into bringing me into that kind of zone for myself.
What do I do? What would you do in this situation?
Why do so many people use NGINX?
I see so many posts and people who run NGINX as their reverse proxy. Why though? There's HAProxy and Apache, with Caddy being a simpler option.
If you're starting from scratch, why did you pick/are you picking NGINX over the others?
Unable to figure out directory permissions
cross-posted from: https://infosec.pub/post/15386345
> Hi everyone,
>
> This is my CONTAINERFILE for Bind9:
>
> > FROM debian > > ENV LC_ALL C.UTF-8 > > # Update and upgrade system > RUN apt-get update -y && apt-get upgrade -y && apt-get dist-upgrade -y > > # Install BIND 9 and sudo (for debugging if needed) > RUN apt-get install -y bind9 bind9-dnsutils bind9-libs bind9-utils sudo > > # Configure permissions for BIND directories > RUN mkdir -p /var/cache/bind /var/lib/bind /var/log/bind > RUN chown -R bind:bind /var/cache/bind /var/lib/bind /var/log/bind > RUN chmod 664 /var/cache/bind /var/lib/bind /var/log/bind > RUN chmod -R 664 /var/cache/bind /var/lib/bind /var/log/bind > > # Create and configure log files > RUN touch /var/log/bind/default.log /var/log/bind/update_debug.log /var/log/bind/security_info.log /var/log/bind/bind.log > RUN chown -R bind:bind /var/log/bind > RUN chmod 644 /var/log/bind/*.log > > # Define volumes > VOLUME ["/etc/bind", "/var/cache/bind", "/var/lib/bind", "/var/log/bind"] > > # Set the entrypoint to the named executable > ENTRYPOINT ["/usr/sbin/named"] > > # Set the default command arguments for the named executable > CMD ["-g"] >
>
> I keep getting this error when I run it with podman:
>
> > 26-Jul-2024 03:18:21.328 loading configuration from '/etc/bind/named.conf' > 26-Jul-2024 03:18:21.328 directory '/var/cache/bind' is not writable > 26-Jul-2024 03:18:21.332 /etc/bind/named.conf.options:2: parsing failed: permission denied >
>
> As you can see from the CONTAINERFILE, the bind user should be able to read and write to /var/cache/bind but for some reason it doesn't.
>
> I have been at this for a while and I'm at my wits end. Your help is appreciated!
Unable to figure out directory permissions
cross-posted from: https://infosec.pub/post/15386345
> Hi everyone,
>
> This is my CONTAINERFILE for Bind9:
>
> > FROM debian > > ENV LC_ALL C.UTF-8 > > # Update and upgrade system > RUN apt-get update -y && apt-get upgrade -y && apt-get dist-upgrade -y > > # Install BIND 9 and sudo (for debugging if needed) > RUN apt-get install -y bind9 bind9-dnsutils bind9-libs bind9-utils sudo > > # Configure permissions for BIND directories > RUN mkdir -p /var/cache/bind /var/lib/bind /var/log/bind > RUN chown -R bind:bind /var/cache/bind /var/lib/bind /var/log/bind > RUN chmod 664 /var/cache/bind /var/lib/bind /var/log/bind > RUN chmod -R 664 /var/cache/bind /var/lib/bind /var/log/bind > > # Create and configure log files > RUN touch /var/log/bind/default.log /var/log/bind/update_debug.log /var/log/bind/security_info.log /var/log/bind/bind.log > RUN chown -R bind:bind /var/log/bind > RUN chmod 644 /var/log/bind/*.log > > # Define volumes > VOLUME ["/etc/bind", "/var/cache/bind", "/var/lib/bind", "/var/log/bind"] > > # Set the entrypoint to the named executable > ENTRYPOINT ["/usr/sbin/named"] > > # Set the default command arguments for the named executable > CMD ["-g"] >
>
> I keep getting this error when I run it with podman:
>
> > 26-Jul-2024 03:18:21.328 loading configuration from '/etc/bind/named.conf' > 26-Jul-2024 03:18:21.328 directory '/var/cache/bind' is not writable > 26-Jul-2024 03:18:21.332 /etc/bind/named.conf.options:2: parsing failed: permission denied >
>
> As you can see from the CONTAINERFILE, the bind user should be able to read and write to /var/cache/bind but for some reason it doesn't.
>
> I have been at this for a while and I'm at my wits end. Your help is appreciated!
Unable to figure out directory permissions
Hi everyone,
This is my CONTAINERFILE for Bind9:
``` FROM debian
ENV LC_ALL C.UTF-8
Update and upgrade system
RUN apt-get update -y && apt-get upgrade -y && apt-get dist-upgrade -y
Install BIND 9 and sudo (for debugging if needed)
RUN apt-get install -y bind9 bind9-dnsutils bind9-libs bind9-utils sudo
Configure permissions for BIND directories
RUN mkdir -p /var/cache/bind /var/lib/bind /var/log/bind RUN chown -R bind:bind /var/cache/bind /var/lib/bind /var/log/bind RUN chmod 664 /var/cache/bind /var/lib/bind /var/log/bind RUN chmod -R 664 /var/cache/bind /var/lib/bind /var/log/bind
Create and configure log files
RUN touch /var/log/bind/default.log /var/log/bind/update_debug.log /var/log/bind/security_info.log /var/log/bind/bind.log RUN chown -R bind:bind /var/log/bind RUN chmod 644 /var/log/bind/*.log
Define volumes
VOLUME ["/etc/bind", "/var/cache/bind", "/var/lib/bind", "/var/log/bind"]
Set the entrypoint to the named executable
ENTRYPOINT ["/usr/sbin/named"]
Set the default command arguments for the named executable
CMD ["-g"] ```
I keep getting this error when I run it with podman:
26-Jul-2024 03:18:21.328 loading configuration from '/etc/bind/named.conf' 26-Jul-2024 03:18:21.328 directory '/var/cache/bind' is not writable 26-Jul-2024 03:18:21.332 /etc/bind/named.conf.options:2: parsing failed: permission denied
As you can see from the CONTAINERFILE, the bind user should be able to read and write to /var/cache/bind but for some reason it doesn't.
I have been at this for a while and I'm at my wits end. Your help is appreciated!
Somebody please explain PROXYv2 to me and the myriad of ways to do DoH?
I've been looking to implement DoH
- The first idea was to simply follow this - I do not understand the configuration fully but it looked fine.
- Then, I decided to use a proxy/Load balancer in front of BIND to deal with HTTPS.
However, I came across PROXYv2 (which is not even mentioned in the docs, just in a blog post) and the likes of DNSdist.
My questions:
- I can't find a detailed explanation of what I need to do about PROXYv2 - does my Reverse-proxy absolutely need to have it to be able to communicate with my DNS server?
- Why can't I just have any reverse-proxy that can handle HTTPS and put it in front of my DNS resolver? Does my proxy need to have a specific protocol to be able to talk DNS queries?
I am still confused, would really appreciate some help :)
Is Backblaze a reliable provider?
Hi everyone,
I've started pushing backups of media important to me (family pictures, video etc) to backblaze with client-side encryption.
However, are they a reliable storage provider? I can't help but compare them to something like Amazon who likely has a better chance of maintaining my files but they are so expensive that I don't even bother.
What do you think? Yes, I've heard of 3-2-1, however for now I only have backblaze and a local backup. I'm trying not to spend too much on this.
Thanks!