Skip Navigation
mhzawadi Matt The Horwood @lemmy.horwood.cloud

I run this server

Posts 73
Comments 207
Is it safe to automatically pull and update docker containers?
  • only if your happy that you could get a duff build and kill the service, I now watch with https://newreleases.io/ and update as needed

  • Trigger when ChromeCast change from ON to OFF only
  • That is true, there migh be a state change from on to off that you can pick

  • Trigger when ChromeCast change from ON to OFF only
  • Hello I would use a state change as the trigger, then in the action use an if to look for an off. That way you could use it to turn on the speakers with the chromecast

  • Suggestions for file sync / android backup / sharing software (nextcloud alternative)
  • I use nextcloud to sync our photos, with the memory's add-on and mobile app you can even have collections.

  • Should I stick with Docker Swarm for self-hosting?
  • I use swarm in my home lab, I don't have any docker things at work so Kubernetes is way more then I want to manage.

    All my stacks are in a git repo, I have an ansible playbook to update them if needed. I also have most things tracked on new releases (https://newreleases.io/) so I know when something needs an update, then I can either update the git repo by hand or use ansible.

    Also have a look at docker contexts, you can manage your swarm from a remote location.

  • What is your set up? How do you use Jellyfin?
  • OMG, thats a lot of things to connect to. installing Symfonium now to have a look

  • Cloudflare is bad. Youre right.
  • So I need to make a VPS setup script to install bind for DNS and wireguard or openvpn and push it to gitlab/GitHub?

  • NAS vulnerabilities
  • It is very simple, I run it from docker and it can plug into all sorts of places, I have nginx config that I could share if it helps.

    This is the tool https://oauth2-proxy.github.io/oauth2-proxy/

  • NAS vulnerabilities
  • Depending on the login flow, I have a lot of stuff behind an oauth proxy. So that you have to have a working 2fa account to see the non 2fa system behind.

  • Windows 11 is now automatically enabling OneDrive folder backup without asking permission
  • That would fail our current process of approving where we can store documents, just as well I have a Mac for work

  • Electricians of fediverse, should I have my selfhosting box grounded?
  • Electric shock to you? Get an electrician to check it and sign it off?

  • What are your thoughts on exposing a tool like dockge to outside of your man?
  • I have my portainer behind an oath proxy, using keycloak as the Auth provider

  • IP Block Lists & Docker Networking
  • I would have a cron that runs a script to pull the list and update IPset, this might not work.

    make a file on your docker server with the below in it, set the file to execute chmod +x file.sh

    #!/bin/sh
    ipset -q flush ipsum
    ipset -q create ipsum hash:ip
    for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
    iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
    iptables -I INPUT -m set --match-set ipsum src -j DROP
    

    Then add a cron file in /etc/cron.d that runs the script every 24 hours

    10 3 * * * root /root/file.sh
    
  • Matrix chat room

    matrix.to You're invited to talk on Matrix

    You're invited to talk on Matrix

    You can now find me in a matrix room, or search for horwood-chat

    0
    IP Block Lists & Docker Networking
  • Some thing like this

    iptables -I DOCKER-USER -m set --match-set ipsum src -j DROP

    Should do what you need

  • domains on internal network
  • I use pihole as my home DNS to do that

  • DNS issues
  • not sure your example domain is the best, can you lookup hrowood.biz?

  • Bitwarden releases phased beta for native mobile apps | Bitwarden Blog
  • thanks, have found the Andriod beta and installed it. Not blocked as I run vaultwarden

  • DNS issues
  • this might be what your looking for -> https://docs.pi-hole.net/guides/dns/unbound/

  • Lemmy v0.19.5

    We are now running the latest version, please let me know if you spot anything odd

    0

    Do you run tableau

    We run a bit of software called tabelau, I have had to restart it over night and the server hit 113 on the load average. on a 16 core box.

    please tell me thats mad for any software

    1
    nextcloud.com Maintenance updates ready for Hub 4, 6 and 7 - Nextcloud

    We updated Nextcloud server, focusing on several key performance improvements, bug fixes, and security enhancements. We strongly recommend you to update, as it is always a quick and safe process.

    Maintenance updates ready for Hub 4, 6 and 7 - Nextcloud
    1
    nextcloud.com Open source email pioneer Roundcube joins the Nextcloud family - Nextcloud

    Becoming a new steward for Roundcube, Nextcloud sets sail to foster the growth and improvement of the project.

    Open source email pioneer Roundcube joins the Nextcloud family - Nextcloud
    2
    canary.tools Thinkst Canary: Know. When it Matters!

    Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Check out why our Hardware, VM and Cloud-based Canaries are deployed and loved on all 7...

    Thinkst Canary: Know. When it Matters!
    0
    thehftguy.com The Linux kernel has been accidentally hardcoded to a maximum of 8 cores for the past 15 years and nobody noticed

    A bit of history I’ve been diving into the Linux kernel scheduler recently. To give a short brief introduction to scheduling, imagine a single CPU single core system. The operating system all…

    The Linux kernel has been accidentally hardcoded to a maximum of 8 cores for the past 15 years and nobody noticed
    2

    October firepit in shorts

    Sat with our firepit in shorts and t-shirt, what's that that all about

    0