Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)IM
iMeddles @infosec.pub
Posts 0
Comments 23
How should I secure my data on Nextcloud against physical attackers?
  • if you go down the luks route, an option to look at is Clevis/Tang for automatic unlocking on a trusted network. I have a tang server running in the cloud, firewalled to my home IP, so if my server reboots in my house, it auto unlocks, but if you steal it and try to turn it on anywhere else, it won't be able to auto unlock, and will require a password.

    I should write that config up somewhere as a guide.

  • MEGATHREAD - Rasmus Hojlund
  • Based on the numbers he's put up so far? Massive overpay.

    Based on what else we could buy for the same money? Its probably fair. Football finances are broken :p

    As ever, if he's what the system needs, and he adapts to the PL, he could yet be a great deal, but its a gamble. Here's hoping by 2024/25 he's a 20-goal-a-season-striker, and I'm eating my words in the first paragraph!

  • What is your machine naming scheme?
  • Yes, if you've built the network from scratch that works. Retrofitting it into an existing network however is a massive piece of work when you don't have that single source of truth to start with however. On networks I've built sensibly, I'll happily give people whatever CNAME they want to refer to their machine, but the machines actual name is descriptive, not the other way round.

  • What got you into selfhosting and what was the first thing that you hosted?
  • My home network is somewhat overkill ;p but so far, about £500 on compute to run VMs, >£1000 on a nas and various other offsite and local stoarage, a couple hundred quid on networking gear, and then the extra premium on smart home devices you pay for non-tracking versions of the hardware (e.g a ring video doorbell would have cost me £40 less than the reolink I ended up buying). I've also so far spent over £75 on smart light switches trying to find one that both works with home assistant and fits inside my really narrow back boxes without yet finding one that works, so the number is continuing to go up!

  • What is your machine naming scheme?
  • Every machine is named after what it does (although I do 1337-ify the names, because I'm still a late 90s IRC teen at heart). If you've ever been onboarded into a sysadmin role where all the machines are named with whatever whimsical naming scheme each department chose, you'll fast develop a visceral hatred for non-descriptive naming schemes. The fifth time you get a ticket saying something like 'Hedwig is down' and you have to go crawling through three layers of linked files on SharePoint to find what and where 'Hedwig' is, you'll be ready to beat the person who named it to death, and that attitude tends to persist to your home naming scheme :p

  • What do folks think about these N5105s?
  • AV1 isn't needed yet, because its only really being used for live streaming like youtube gaming at the moment (Plex itself only started supporting AV1 in December). That might change in the next few years, depending on if the scene picks it up as a technology, its just a case of whether you want to future proof yourself. Of course, given how cheap these mini pcs are, you might be as well sticking with the N5105 now, and then picking up an N100 (or even whatever it's successor is) in a few years time. If you do end up running proxmox, you can always cluster them together, so you can keep using the old one alongside the new one. (Because they're so cheap, I actually have three of them in a little cluster, so I can patch and reboot each proxmox server without downtime to my plex server)

  • What do folks think about these N5105s?
  • Getting proxmox to pass the GPU through to containers is a little fiddly, but it got a lot easier since they moved to the 6.x kernel, and there's plenty of guides around. It could well be worth a look if you want to run multiple servers on one device

    As for the GPU, they're unlikely to make a huge difference either way, but note that the n5105 has no hardware support for the AV1 codec, so any media you have or end up with in that format will need decoding on the CPU. The n100 igpu has hardware decode instead, so if you think you might end up with any av1 content, then that's the way to go.

  • What do folks think about these N5105s?
  • I run Plex on essentially one of these (different case, but n5105/8gb ram, bought from AliExpress) and they're great little machines for it. Most of my library is 1080p, but I have run 2 simultaneous 4k transcodes before and it just keeps chugging along happily. I'm actually running proxmox on it, with Plex being just one container out of several, so it also has the grunt to do several simultainious streams and keep my mastodon server, torrent box, pihole, and a few other things running at the same time. In my experience, you'll run out of ram before ever chocking the CPU on a standard setup, so it might be worth upping to the n100 to get 16gs instead.

    It wouldn't be any cheaper for them to ship without windows, because the windows os youre getting from aliexpress sellers selling budget pcs is almost always counterfeit :p but installing Linux on them is a breeze, they've got a full standard uefi BIOS, so just plug a USB stick with Ubuntu on it in, and install as usual.

  • *Permanently Deleted*
  • We offered him a deal, he accepted, then we withdrew it before it was signed. Frankly, clownshow behaviour from united for the guy who's saved our seasons over and over again, even if his time here was coming to an end.

  • Any other Discworld fans on here?
  • How, with such a breadth of outstanding novels, am I supposed to pick a favourite?

    I also can't remember which is my first, a family friend lent us everything up to The Last Continent in one go, and I read them all in a completely random order.

  • werzg
  • Even better, I found a company that pays me in money while having a free beer fridge in the office :D (at least, up until before I basically started wfh full time during the pandemic)

  • werzg
  • Went to university to study Bioinformatics. There I discovered I don't really like biology, but I did really like getting paid beer to fix other student's computers. Especially when they were desperate around submission deadlines cos they hadn't backed up their work for weeks/months before their computer went kaput.

    I've been a sysadmin now for 13 years since graduating.

  • Why I probably won't defederate from Threads
  • Its interesting that everyone focuses on the privacy and the EEE risk of this, but my reasons for leaving Facebook were that Facebook is actively-allowing-the-promotion-of-genocide-because-not-moderating-is-better-for-their-bottom-line Evil. I left facebook because I'm not willing to provide the (even infinitesimal) boost to their network effects that my account had. For the same reason, Threads is an instant defederate on launch.

  • What’s your white whale?
  • Fun School 6: Futureland. Its a shitty edutainment game from the 90s that I played non-stop for like a year, that I want to get my hands on for nostalgia purposes. As far as I can tell its not available (online or physical media) anywhere. I finally found a copy for sale a few years ago, but it turned out to be a mislabelled copy of fun school 6: fairyland.

    I will keep searching, eventually a copy will show up somewhere!