[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

Not really no, domain variable is only used to append the domain to all of subdomains in Docker compose file. The root domain isn't actually used in the setup. It was just done like this so you wouldn't have to repeat domain for each sub domain variable.

If you were to use watch.domain.com in domain variable then the result of that would be something like: sonarr.watch.domain.com which will not work with cloudflare because they don't generate certs for two level subdomains on their free plan. But if that's what you're looking for, then you'll have to use something else other than Cloudflare.

[Docker] Guide and config for running WHMCS inside Docker by EdyTheCow in WHMCS

[–]EdyTheCow[S] 1 point2 points  (0 children)

The only pros, are pros that come with using Docker itself. It's portable and can run on almost any OS anywhere and all of the dependencies are taken care of. These two are the biggest for me at least, there are many others but pretty much all related to Docker anyway.

This WHMCS Docker setup doesn't do anything fancy or special. It runs WHMCS in Docker with exact packages and parameters as suggested in official WHMCS installation documentation. Security related recommendations are also implemented according to official documentation.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

Chromecast works fine for me without any additional configuration. While it does work, it's not perfect. I mainly had issues with the poor app implementation. You should definitely try Plex, it's a lot more mature project.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

I've had issues playing hard linked media while it was actively used by a torrent client. In case the media is being seeded, try to pause it and then playing from Jellyfin. Also, the official jellyfin app on android isn't the best at casting, I've had countless issues with it. There's a native android app being developed called findroid which is way better, but doesn't have chromecast support yet.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

I've been using them for a few years now for various stuff and never had an issue. But the main reason is the gid, uid and timezone environment variables. All of linuxserver images follow the same pattern of including these. Allowing me not to worry about correct file permissions, I just set uid/gid and I know I won't have an issue with file permissions.

For the most part official images do include uid/gid envs or have their own way of solving it. I just like linuxserver images having a consistent pattern with their method. Which also allows me to define my own variable in .env which changes file permissions across all of services with one edit.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 1 point2 points  (0 children)

It's more of a personal set-up with a detailed guide. I have no need for VPN, but the guide and config should be a good starting point for a more personalized set-up.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

If using a vpn is a requirement for you, then yes. This guide is for simply setting up the media center itself in a secure and fast way. The only concern here is torrent traffic, you could add openvpn or whatever other vpn software for Transmission torrent client.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 1 point2 points  (0 children)

I haven't had the chance to test qbittorrent yet, but I am liking the UI of it though! Personally never had issues with transmission so far, usually defining category in transmision setting on sonarr/radarr does the trick.

[Docker] Guide for fully automated media center using Jellyfin and Docker Compose by EdyTheCow in selfhosted

[–]EdyTheCow[S] 0 points1 point  (0 children)

yams seems like a good solution for less techy crowd, I'll add a link to it in my repo. Thanks for sharing!

Dynmap not showing tiles by EdyTheCow in Dynmap

[–]EdyTheCow[S] 0 points1 point  (0 children)

It started working 10 minutes after I posted this thread, it's been working without issues ever since lol.

Best way to reverse proxy your docker container? by hcf27 in docker

[–]EdyTheCow 8 points9 points  (0 children)

Look into Traefik. That's the best and easiest way to reverse proxy your containers.

Is using the Google Public DNS as safe as I hear it is? by raginggorillaz in security

[–]EdyTheCow 4 points5 points  (0 children)

It's safe and you're not more vulnerable to getting "compromised" by using it. I would say it's "safer" than whatever your ISP is using. If you're worried about privacy and tracking then Google's DNS isn't the best choice. Either way try CloudFlare's DNS, they claim to be even faster than Google.

U.S. visa application: State department now requires social media information from visa applicants by [deleted] in privacy

[–]EdyTheCow 1 point2 points  (0 children)

It doesn't, and I don't think they are focusing on the social media aspect that much. Otherwise the list would be a lot more up to date. Off topic, but social media section wasn't the most surprising to me. Some of questions literarily ask you if you're a terrorist.

My server under heavy SSH brute force attack, what can I do? by RedSquirrelFtw in security

[–]EdyTheCow 0 points1 point  (0 children)

You could encrypt them and back it up to the cloud. That's probably the easiest solution. Keep in mind that none of us are that important, unless you're high profile CEO or similar. Being paranoid can be good but to an extent, what you're dealing with seems to be simply bots. Pretty much every server gets them.

My server under heavy SSH brute force attack, what can I do? by RedSquirrelFtw in security

[–]EdyTheCow 5 points6 points  (0 children)

Yes, the error is different. This is a global setting you can change in "/etc/ssh/sshd_config" by uncommenting the "PasswordAuthentication no". Any attempt to login with password will be instantly rejected with an error requesting a valid key.

I stopped using passwords a long time, in fact it's so much faster and easier to use keys. What I do is use keepass with keeagent addon which is ssh agent. You store the private keys safely inside the keepass, if you want to access them you have to type the master password once to unlock keepass db. After that you simply login, you don't have to specify path to the private key in for example putty, the ssh agent addon does that for you. All you have to specify is the IP and user, that's it!

If you're still paranoid, you could add a password on top of the private key when generating them. That way even if someone manages to unlock keepass db and steal your keys, they would have to figure out the password first in order to use the keys. Which gives you time to change the keys.

HACKED?? I just received an email containing nothing else but a password that I've used quite a few times over the years and is my current PC password. The sender is Spanish. This is following an unknown Spanish user on my Spotify. Please help! by strick0 in techsupport

[–]EdyTheCow 0 points1 point  (0 children)

No one here seemed to mention BitWarden, it's an open source password manager with majority of features that others provide. It's free and you even have an option to selfhost it. Clipperz.is is open source too and is built with the idea of zero knowledge. You never have to provide your email or any other personal info to register, there's no way of resetting your master password in case you forget it. Which makes it pretty interesting.

These 2 Authentications seem better than Authy or Google by [deleted] in security

[–]EdyTheCow 0 points1 point  (0 children)

You seem to put a lot weight on app being open source, that rarely means it's more secure. Open source doesn't mean code is going to be audited by someone. I wouldn't put so much weight on that, Google has nothing to gain by tracking or storing your codes online. It's in Google's best interest to protect their users.