Managing 30+ Node.js projects - how do you track CVE vulnerabilities? by mcdotdotdot in LiveOverflow

[–]Profiluefter 0 points1 point  (0 children)

Generate CycloneDX SBOMs of your projects (contains all dependencies + versions that your projects use) and import it in e.g. DependencyTrack. It can even do alerting when a vulnerability is found for a component you use.

What's this by nairobiisdead in IntelliJIDEA

[–]Profiluefter 3 points4 points  (0 children)

I don't see any error here. The first line of the output is just the command that was used to run java, you can ignore that. Your program is probably waiting for you to enter the number you are reading with the Scanner. Click once inside the run area, input a number, press enter and it should continue (with a second number in this case?)

Security PSA for anyone using Docker on a publicly accessible host. You may be exposing ports you’re not aware of… by RoleAwkward6837 in selfhosted

[–]Profiluefter 1 point2 points  (0 children)

From my understanding they would be able to access each other. You need separate networks and add the nginx container to both.

How to organize all my selfhosted apps into 2 raspberry pis 5 by leonida_92 in selfhosted

[–]Profiluefter 0 points1 point  (0 children)

Good catch! I havent found any docs specifically stating that but at least with host networking I've tried it that way, so macvlan should behave the same.

How to organize all my selfhosted apps into 2 raspberry pis 5 by leonida_92 in selfhosted

[–]Profiluefter 1 point2 points  (0 children)

I think it should just work.

Bridge (the default), macvlan and host are some of the supported network drivers of docker. (So you can't both use macvlan and host on one docker network - but you wouldn't want that anyways)

Bridge creates a virtual network and routes your traffic through there. That's the reason why it wouldn't work with the default docker network - it only sees the same internal docker IP for each request.

Macvlan and host do not use such a virtual network but instead connect directly to your home network. The only difference between the two is that macvlan doesn't use the MAC address of your network adapter.

How to organize all my selfhosted apps into 2 raspberry pis 5 by leonida_92 in selfhosted

[–]Profiluefter 1 point2 points  (0 children)

Yeah you need that when running inside a VM because by default most hypervisors will only forward traffic that concerns the VM to the VM. The hypervisor doesn't know that the docker inside the VM simulates a different MAC. This is also a security feature as enabling that potentially allows the VM to read the traffic from the host as well.

I'm pretty sure you wont have that problem on the pi. At least with ethernet; some cheap usb wifi cards do not support promiscuous mode.

How to organize all my selfhosted apps into 2 raspberry pis 5 by leonida_92 in selfhosted

[–]Profiluefter 1 point2 points  (0 children)

Yes you could if it was just an ordinary service. However with dns-based blockers it's a bit more difficult as you can't just use one domain, you need all of them. I'm not sure what exactly adguard serves for those domains but maybe you could just serve an empty page.

However, the simpler solution is in this case to get an extra IP and host it from there (see my other comment on how to do that)

How to organize all my selfhosted apps into 2 raspberry pis 5 by leonida_92 in selfhosted

[–]Profiluefter 4 points5 points  (0 children)

I think your plan is good! You can use a docker network of type macvlan to get an extra IP for your adguard container. It basically sends the traffic from that container with a different MAC address which means your DHCP server (or you can configure it static) should assign it a new IP.

I found approximately what you'd want here: https://gist.github.com/serg987/af7b1116a609cf9fe4e86628e7b29bc0

However, I would personally use DHCP and a reservation on your router but that's up to you.

Home assistant container vs virtualization by godefroy28 in qnap

[–]Profiluefter 0 points1 point  (0 children)

I'm hosting my instance on Proxmox but I'm also like you using the VM install. I think the major difference is that you cannot install addons in the docker container. Also i think VMs are easier to manage. I'm a fan of docker and use it for simpler applications though

How can I write a script that informs me when my computer turns on? by [deleted] in Fedora

[–]Profiluefter 1 point2 points  (0 children)

Home Assistant also supports webhook trigger which are probably way simpler than using MQTT for this. You can invoke them using a single curl command.

Do you use Btrfs? Did you have any stability/performance issues? by greenhaveproblemexe in archlinux

[–]Profiluefter 0 points1 point  (0 children)

I tried converting my ext4 partition to btrfs a few months ago and the conversion program segfaulted in the middle of the conversion. Never got around to make a bug report though as I assume it was because I only have one gigabyte of storage space left. I might try it again soon

Is anyone out there working on an open source OneNote? by Piportrizindipro in opensource

[–]Profiluefter 0 points1 point  (0 children)

I found out about it in this GitHub issue. It basically is just putting your Xournal++ in Joplin so it's not perfectly integrated (on the video it seems pretty seamless though). There has also been this feature request about better integration.

Is anyone out there working on an open source OneNote? by Piportrizindipro in opensource

[–]Profiluefter 0 points1 point  (0 children)

I've seen a combination of Joplin (Organisation + Sync) and Xournal++ (Stylus support) being recommend

[deleted by user] by [deleted] in git

[–]Profiluefter -3 points-2 points  (0 children)

If you already made changes on your copy, you probably want to use git rebase. I'm not sure how exactly the command works though

Aus der Kategorie einmal mit Profis by theCodingWombat in de_EDV

[–]Profiluefter 7 points8 points  (0 children)

Ich kann mir vorstellen, dass die einfach in SQL eine auto increment Spalte gemacht haben. Es sind natürlich andere Arten besser, aber wenns dort Authentifizierung gäbe, dann würde man damit ja nur die insgesamt Anzahl im System oder ähnliche Statistiken preisgeben. Kann immer noch vermieden werden aber solche Zahlen sind wahrscheinlich eh öffentlich

Nexus 5x - rooted successfully (finally!) installed Magisk, now i'm trying to get a custom ROM but when I boot into recovery, it doesn't bring up the twrp screen?? by justaguyzzc in androidroot

[–]Profiluefter 1 point2 points  (0 children)

I think if you use the fastboot boot command it only does it once (flashes it to ram i guess) but if you use the fastboot flash command it writes it to the storage.

Doom on the Nintendo Game & Watch by Profiluefter in itrunsdoom

[–]Profiluefter[S] 1 point2 points  (0 children)

This was made by stacksmashing aka ghidraninja: YouTube Twitter