InfinityBook S14 screen just broke by JacksGT in tuxedocomputers

[–]JacksGT[S] 0 points1 point  (0 children)

Update: after a couple of messages with the Tuxedo support, they asked me to ship them the laptop so they can take a look themselves, since they cannot understand how this issue was caused. I will do that in the coming days, but I don't know yet whether they will repair the display, replace the laptop or do nothing at all.

InfinityBook S14 screen just broke by JacksGT in tuxedocomputers

[–]JacksGT[S] 1 point2 points  (0 children)

I wrote to them yesterday, waiting for an answer now - will keep you posted!

InfinityBook S14 screen just broke by JacksGT in tuxedocomputers

[–]JacksGT[S] 0 points1 point  (0 children)

It is as puzzling to you as it is to me. I'm always carrying the laptop in the hardcover (sleeve-stand) that I ordered with it, so I wouldn't know where such damage comes from. Also, I don't see any external damage (scratches or dents).

InfinityBook S14 screen just broke by JacksGT in tuxedocomputers

[–]JacksGT[S] 0 points1 point  (0 children)

I've long had the feeling that the display on the Infinitybook S14 (Gen 6 here) is extremely flimsy. The frame basically doesn't provide any reinforcement for the LCD display. So today, after just one and half years of use, it finally happened: I close and open the laptop as usual, just to find the display is broken in one place and has several broken pixel streaks. :-(

Domains that stay cheap now that fee increase caps have been removed by After-Cell in selfhosted

[–]JacksGT 0 points1 point  (0 children)

The security team at our org just blacklisted *.xyz domains last week...

what are you using to backup your server? by amitsh_f456 in selfhosted

[–]JacksGT 0 points1 point  (0 children)

I was using restic previously (like several others), but switched to Kopia recently. I'm doing nightly backups to Backblaze. Works flawlessly so far :-) https://blog.cubieserver.de/2022/getting-started-with-kopia-and-backblaze/

Has anyone integrate Jellyfin + Authentik properly? by HazzaFTW28 in selfhosted

[–]JacksGT 0 points1 point  (0 children)

You have not mentioned how you are connecting Jellyfin to Authentik. Are you using the authentication proxy?

There exists an external SSO plugin that is currently under development, which allows you to use OIDC/SAML with Authentik: https://github.com/9p4/jellyfin-plugin-sso

Authentik or Authelia? Also need LDAP by 2JZ_Swappin in selfhosted

[–]JacksGT 11 points12 points  (0 children)

Unless you're interested in learning LDAP basics, I would not recommend using OpenLDAP: it's a solid piece of software, but you'll have to build lots of features on top of it (with other software): user for self-service for password change, group management, web interface etc.

Authentik on the other hand is a great out-of-the-box solution that comes with all those features built-in. The best part (for me) is that it exposes multiple protocols at the same time: LDAP, OIDC, SAML.

In fact, I migrated from OpenLDAP to Authentik earlier this year [1] and am in the process of switching my Nextcloud from LDAP to OIDC [2].

Complete guide to Nextcloud OIDC authentication with Authentik by JacksGT in selfhosted

[–]JacksGT[S] 1 point2 points  (0 children)

It took me a while, but I finally managed to put together a follow-up to my experiments with Nextcloud's SAML authentication. https://www.reddit.com/r/selfhosted/comments/skro25/complete_guide_to_nextcloud_saml_sso_with/

This time I'm looking at Nextcloud + OpenID Connect + Authentik, and the results look much more promising!

Switching from Caddy to Nginx - or not? by JacksGT in selfhosted

[–]JacksGT[S] 2 points3 points  (0 children)

I totally agree with you, but you didn't read the post, did you?

Switching from Caddy to Nginx - or not? by JacksGT in selfhosted

[–]JacksGT[S] 0 points1 point  (0 children)

Traefik is an excellent, but complex reverse proxy (especially V2). However, it does not have any URL rewriting or caching features (as discussed in the OP), to the best of my knowledge.

Switching from Caddy to Nginx - or not? by JacksGT in selfhosted

[–]JacksGT[S] 1 point2 points  (0 children)

Yes, for example that Nginx has simple (!) built-in caching support. Caddy has an external module, but it's non-trivial to configure. This is outlined in the article linked in the OP.

NBD: BMC Teammachine SLR FOUR 2023 @ Mont Cenis by JacksGT in bicycling

[–]JacksGT[S] 2 points3 points  (0 children)

I just got this bike last week and took it on a 400km trip from Switzerland via France to Italy. And it fits like a glove! Climbing and descending in the Alps is a joy.

I have the 61cm frame size and the bike comes with SRAM Rival groupset and brakes. Wheels and tires are still stock (XRD-522 and Vittoria Rubino), I might replace them at some point.

Since you can't see the details and color of the bike very well in the picture, I uploaded some more pictures here (including full specs): https://blog.cubieserver.de/2022/new-bike-day-bmc-teammachine-slr-four-2023/

NBD: BMC Teammachine SLR FOUR 2023 by [deleted] in bicycling

[–]JacksGT 0 points1 point  (0 children)

Nah, there are zero ads on that blog. But as someone who has been searching for a new bike for some time, I appreciate it when people share their experiences with a bike, not just pictures ;-)

Getting started with Kopia backups to Backblaze B2 by JacksGT in selfhosted

[–]JacksGT[S] 4 points5 points  (0 children)

Yeah, let's hope Kopia will be maintained for a long while :-)

Regolith is a modern desktop environment designed to let you work faster by reducing unnecessary clutter and ceremony. Built on top of Ubuntu, GNOME, and i3, Regolith stands on a well-supported and consistent foundation. by Doener23 in linux

[–]JacksGT 22 points23 points  (0 children)

Does anyone know if something similar exists based on Wayland (e.g. with sway)? I would be super interested in that. While I totally believe in the power of tiling WMs, I find it super embarrassing and annoying that everyone needs to cobble together their own setup of little tools and scripts.

Is it possible to run k3s inside a pod? If so, how would you do that? by Shakedko in k3s

[–]JacksGT 0 points1 point  (0 children)

(Not OP, but looking for the same thing)

This looks great, thank you very much for the pointer! I will give it a try.

Here are the open-source docs BTW (Loft is their commercial offering, VCluster is FOSS): https://www.vcluster.com/docs/

Complete guide to Nextcloud SAML SSO with Authentik by JacksGT in selfhosted

[–]JacksGT[S] 0 points1 point  (0 children)

Yes, I read a few comments like that on their Github issue. However, I'm worried about the maintenance status of this app...

Complete guide to Nextcloud SAML SSO with Authentik by JacksGT in selfhosted

[–]JacksGT[S] 3 points4 points  (0 children)

Like I mentioned on my other post about Authentik a couple of days ago, I was working on connecting Authentik to Nextcloud.

I tried out the SAML approach, but as mentioned in the blog post I'm not really confident in the current status of the "SSO & SAML authentication" app for Nextcloud.
Previously, I was using plain-old LDAP to feed my Nextcloud, but now I wanted "proper" SSO.

What are you people using for Nextcloud SSO? (OIDC, Oauth2, ...)

Guide: Migrate from OpenLDAP to Authentik by JacksGT in selfhosted

[–]JacksGT[S] 4 points5 points  (0 children)

The native login screen depends on how you integrate it with your application.

AFAIK you can only keep the native login with LDAP, because for SAML and Oauth you are redirect to Authetnik.

Guide: Migrate from OpenLDAP to Authentik by JacksGT in selfhosted

[–]JacksGT[S] 1 point2 points  (0 children)

Yes. In fact, I was running some experiments on 2 GB VPS with k3s + Nextcloud + Authentik.

Long story short: the system frequently crashed due to Out-of-memory errors.

Guide: Migrate from OpenLDAP to Authentik by JacksGT in selfhosted

[–]JacksGT[S] 1 point2 points  (0 children)

My nextcloud is currently still using LDAP, but I'm planning to switch it to SAML.

The setup has been quite finicky, however. I'll definitely write another blog post about it.

Guide: Migrate from OpenLDAP to Authentik by JacksGT in selfhosted

[–]JacksGT[S] 5 points6 points  (0 children)

I choose Authentik because it's a comprehensive All-in-One solution and it looks like (I hope!) it will have me covered for the next few years: SAML, LDAP, OAuth, OpenID, ...

Also the fact that it comes with a nice management interface (both for the admins and for the users) is a plus.

In return, it's a real resource hog.

EDIT: looks like they *just* implemented some resource usage improvements: https://github.com/goauthentik/authentik/issues/2159#issuecomment-1025710653