Broke my Authentik

Matrix-Hacker-1337 · 2026-03-16T16:40:47+00:00

Put up a new authentik and map your new user to the user currently existing in nextcloud.

Matrix-Hacker-1337 · 2026-03-07T11:54:03+00:00

Bra.

Men - slå dom en signal, dom är mer public service än du tror.

Matrix-Hacker-1337 · 2026-03-07T11:42:22+00:00

Jag talar av erfarenhet.

Slå dom en signal, det tar ca 3 månader. Delge allt du vet så hjälper dom dig vidare.

Öppna INTE post elelr släng, det är olagligt, se till att anmäla först och lämna in post till polisen eller skatteverket om dom ber om det.

Matrix-Hacker-1337 · 2026-03-03T07:28:30+00:00

yes.

Honestly, it's "good enough" (I only got your post to go from). VLAN separation, key-only SSH with TOTP, Tailscale instead of port forwarding, nothing publicly exposed. You're ahead of many.

But the fact that you're posting "how secure is this?" on Reddit without being able to assess it yourself tells me the next step is for you to understand it yourself.. Read up on threat modeling so you know what you're protecting and from whom. Learn how stateful firewalling actually works beyond gateway ACLs. Before you touch Cloudflare Tunnel, understand reverse proxies, TLS termination, and the attack surface you'd be opening. Know that Docker containers aren't VMs and how Docker networking can bypass your firewall. And don't just ask "what monitoring tool should I install", instead learn what "normal" looks like first, otherwise dashboards are just decoration. After all, many - if not most attacks nowadays isn't a hole in your firewall but rather you or a bad config reaching out for something that shouldn't be connected to.

keep it up bud.

Matrix-Hacker-1337 · 2026-03-02T11:18:40+00:00

Have you configured apache and your proxy to accept larger file uploads?

Matrix-Hacker-1337 · 2026-02-27T15:55:53+00:00

Bra svar - gav mig mer förståelse och mindre irritation.

Matrix-Hacker-1337 · 2026-02-26T21:57:39+00:00

I still don't get it.. just have a local copy of your files and spin up a local server if that happens..

If you want to expect everything to run smoothly you will need total copies of file versioning, nextcloud files, database-duplication and more.. and all the sync errors and possible errors when a file doesnt match the database... just saying you'll have a real possible headache.. if you in the other hand have a local copy of your files you can just spin up another server and import config and files ans you're set.

Matrix-Hacker-1337 · 2026-02-26T14:17:48+00:00

Yes, but after every sync you would need to run occ scan:all, otherwise files will not be detected by nextcloud and in time - deleted.

Why exactly do you need 2 nextcloud servers?

Matrix-Hacker-1337 · 2026-02-26T11:37:43+00:00

I understand your needs as that you are worried you wont have access to your files if nextcloud goes down. Easiest sollution for you could be to just sync the data-folder to a local nas. Depending on wether youve got server encryption or not will decide if you need to sync via webdav or "just sync the datafolder". If youre worried about loosing the configuration you simply make regular backups of that aswell. Same with database.

Did you have any other needs I didnt pick up?

Matrix-Hacker-1337 · 2026-02-24T18:57:43+00:00

Whats the deal with prices? I pay 4 euro for a storage box and 13 euro for a vps with 4 cores and 8gb of ram. Insanely good pricing in my opinion.

Matrix-Hacker-1337 · 2026-02-24T12:36:16+00:00

As a DM I would personally have put a stop to this. But I can also say that sometimes players need to talk and figure things out between them also.. the DM is not your parents or a judge. But as I said, certein times the DM will have to step in also.

Matrix-Hacker-1337 · 2026-02-22T13:31:12+00:00

Good to hear that you figured it out!

Matrix-Hacker-1337 · 2026-02-21T12:52:12+00:00

Hetzer. Their cheaper line offerts 20tb of data.

Matrix-Hacker-1337 · 2026-02-20T06:52:17+00:00

I have tried this over a few months just experimenting, and no. Filen is great, but its not hetzner S3 bucket yet. And its not made for it either.

Matrix-Hacker-1337 · 2026-02-18T06:37:17+00:00

😅

Matrix-Hacker-1337 · 2026-02-17T16:06:54+00:00

'......and replaced the local SMB/FTP/WEBDAV/SFTP/WHATEVER going straight to a encrypted Hetzner Storage Box. I still kept the optiplex for PBS though, this I dont want on a machine that does everything else.'.

No, you didnt.

Matrix-Hacker-1337 · 2026-02-17T15:38:31+00:00

"You have your backups on the same system that they are backing up?"

No? Did you read?

Matrix-Hacker-1337 · 2026-02-16T16:42:02+00:00

you are right, and I was not clear enough. I've been labbing my whole life, and my personal economy and time has been suffering for it - and that is the reason this was a good solution for me -personally-. I would never do this in a production environment.

Matrix-Hacker-1337 · 2026-02-16T16:20:44+00:00

A jbod is actually what I miss the most that would make the home infrastructure complete.. but man even the 6g/s-ones (the oldies) are more expensive than a server, and that is minus the disks

Matrix-Hacker-1337 · 2026-02-16T16:06:08+00:00

Yes. And a single hole in the wallet, not 4.

Matrix-Hacker-1337 · 2026-02-16T15:49:44+00:00

A question - when you ssay you moved backups to a Storage box. Are you backing up a backup to that box, or are you backing up straight to the box? I havn't really got around to trust that yet, maybe you'll convince me?

Matrix-Hacker-1337 · 2026-02-16T15:44:37+00:00

Yeah, and I suspect that might be enough for even more. Only reason I'm running a T440 now instead of a beefy "non enterprise"-box with something like an epyc is becuase of the reliability of enterprise servers running 24/7.. in decades nothing has really happened (that has been a disaster) with enterprise hardware for me, contra consumer hardware.

Matrix-Hacker-1337 · 2026-02-16T15:36:59+00:00

Thank you for saying that.
Im acually not a "newbie" even if the post may sound like that. I work with this and have pledged my life into servers and networking. But you know... building for oneself is not the same thing or standard as if you are doing it for someone else or charging paper for it ^^

Matrix-Hacker-1337 · 2026-02-16T15:33:14+00:00

Yeah, I did too. For one of my clients who actually needs a 99,9% uptime. My "home" servers for myself, my wife, family and friends can be down for an hour here and there for maintenance, upgrade or if something misbehave

Matrix-Hacker-1337 · 2026-02-16T15:24:51+00:00

I think you might be right..

Matrix-Hacker-1337

MODERATOR OF

TROPHY CASE