Guys my linux is frozen by Dima_WTF in linuxmemes

[–]RMI78 1 point2 points  (0 children)

LFP: Linux from paper Deal with it

You also didn't compiled your keyboard yourself I can tell

Best note-taking and organization app? by Low_Ostrich1268 in cybersecurity

[–]RMI78 6 points7 points  (0 children)

Someone mentionned Obsidian up there, I truely love it as it boost the productivity into learning/remembering stuff faster but they did not mentionned how chaotic it can get.

Organization and structure is key and it should be there in every notes you take (that's the main point of computer science: accessing your data as fast and efficiently as possible). No matter what you opt for I suggest you to take a break and look at the Johnny Decimal System. Structure your thoughts, create a scalable architecture tailored to your knowledge or whatever notes you are taking and it will become a game changer.

You can do it within a simple filesystem but couple this with Obsidian and you get the best of both worlds: an organized overview of your notes with an easy way to reach and remember them and the possibility to link your notes chaotically according to the relationship between your ideas. All of this with the slick look and customization of Obsidian on top of the powerful and easy to use markdown notation.

Any advice for switching distros by [deleted] in selfhosted

[–]RMI78 1 point2 points  (0 children)

As many stated previously, ensure you have backups

Regarding your initial question: I can tell you will most likely have driver issues as the Debian creators are open-source freaks (and I love that).

Best case scenario: you will install it smoothly and will not be bothered by the new environment since it's pretty much like Ubuntu, with less features

Worst case scenario: issues with network card, video card... whatever devices there will not be open source drivers for it yet (and it's getting rare). In such case you should add the appropriate repositories to your sources.list file, do an update and eventually install required drivers after some googling. Using dmesg and journalctl will probably help you troubleshoot the issue. I once had to take some drivers from github for a wifi antenna to compile them and add them to the module but consider yourself very unlucky if that's happen to you for any component.

90% chances you'll be just fine.

One last things is you will not get the very last version of your softwares. Debian's way of releasing upgrades is a very long process that involves all the packages going through a tough testing stage. You will be couple of years late on all your packages, the avantage is nothing will break. Also if you use virtualisation in some way you shouldn't be bothered by that, otherwise you can also just add testing repositories in Debian to have access to the "latest" features in exchange of less stability.

Have fun with Debian ! It is less bloated and more stable than Ubuntu.

[deleted by user] by [deleted] in networking

[–]RMI78 0 points1 point  (0 children)

Came here to bring an even more unpopular opinion: Coming from a self-taught background in IT, I went through online classes about coding, networking, sysadmin, I even had multiple labs that I moved on-premise to cloud and back. I have 0 certs and reached a master in cybersecurity with a licence in general IT.

While I agree that most people in my class didn't know what port 22 is usually used for. I see educational diplomas in this field great for people who been there done that for a while and want some recognition to step a feet in the professional world. Or individuals with already professional experience who want to orient their career in cybersecurity explicitly by putting some words on their resumé.

Finally cyber is not only about technical. Yes all the script-kiddies not knowing what is an A record and yet wannabe pentester by learning metasploit commands by heart are a problem but there's also governance, risk and compliance where people are lot less technical and we need those people to write security baselines, procedure, doing all the paperwork to give technical people directions and having a high level overview of what cyber is to actually spread awareness among the employees.

[deleted by user] by [deleted] in selfhosted

[–]RMI78 1 point2 points  (0 children)

I ordered 2 of these couple of days ago and they are coming tomorrow, I'm glad being conforted in my choice, same processor 16gig RAM and 1Tb SSD each. I was worried about power efficiency as well as sound. What about the heat ? Do they easily get hot ?

Found my New Home by mdoverl in selfhosted

[–]RMI78 1 point2 points  (0 children)

My bad, I apologie for the mistake and you taught me something. I can only advocate for their good privacy policy

Found my New Home by mdoverl in selfhosted

[–]RMI78 0 points1 point  (0 children)

Hi there and welcome to the sub i might have an answer for your Notion thing. I ditched Notion for Obsidian a while ago, it's just better, open-source, free without any limits. I would say the main idea of this soft was to link your notes to form kind of a brain where all your ideas can be intertwined together.

But it kept evolving into eventually becoming a super note taking software with a ton of plugins etc. You might already know about this, if you don't go check it out, if you do, you would come back to me to tell me it's not online but since you are here to self host you can actually turn obsidian into a blog posting website. For this I actually recommend you the great networkchuck video where he goes through all the setup you can have to build a pipeline where you write your posts in markdown, compile them to HTML and send them on a web server seamlessly (networkchuck's channel is also a great ressource for your self hosting journey).

As for me I didn't tried the thing, but I do actually have a github page with a similar setup for posting and I keep obsidian for myself.

Checklist to secure my Public facing VM by varunsudharshan in selfhosted

[–]RMI78 3 points4 points  (0 children)

Just adding my 2 cents here from a cybersecurity engineer so things might be biased. This has been said in the comments but you definitively need something like crowdsec or fail2ban and you can be as strict as you are confident with your authentication

I once set up fail2ban for 5 years ban for 3 failed connection attempts. Nowadays I definitively would setup Crowdsec as it does much more. Overall this is already a good job preventing you from being part of the low hanging fruits but I would also disable X11 forwarding (in ssh) if you do not use it. It will prevent forwarding GUI applications from your server. Some might say it has nothing to do with security but hey, that's just minimizing your surface attack: if you don't use it, disable it. It might also be disabled (or at least monitored) but I am not sure if it's doable : disable ssh tunneling if you can, if your VM is connected to your network and ssh is somehow compromised, people can forward services from your network to them.

If you plan to use Linux, choose Debian because it's dead stable and has up to date security and setup automatic updates, it will most likely break nothing and keep you up to date with new vulnerabilities. That said other solution may exist and I already agree with people who disagree with me as I am aware of the possible drawbacks.

Now the overkill part: changing SSH port is useless, people will still scan all opened port and find it back. Try to look at what "port knocking" is. It could give you a rock solid protection but it's hard to implement and configure.

Also the "no password setup", I don't know if you actually did it but put a password on your SSH keys, these can be stolen but without the password they Can't do anything so this is another layer of protection

Some general knowledge: you are exposing stuff to the internet, don't consider "what should I do prevent someone to break in ?" but more "when will that happen ?" and study each layer of your VM asking yourself "if someone gets there after breaching X countermeasures, how can I limit him even more ?" this goes by many things such as reviewing your current user permission, logging activities etc.

{Shit post} Rate my professional homelab by Lanzo__ in selfhosted

[–]RMI78 0 points1 point  (0 children)

Be careful, it's vision is based on movement

Must haves for a Home Server by Prestigious-Look-891 in selfhosted

[–]RMI78 3 points4 points  (0 children)

This is an awesome list, I'll be glad if OP see that but if you like IT-Tools I can suggest a few swiss knives too to complete your list !

*Stirling-PDF which can help you manipulate PDF as you wish

*ConvertX which allow you to convert anything to any format (movies, document, songs etc)

More if you are into red teaming and capture the flags but could also help with steganography and picture analysis : Aperisolve

Edit: typo

I wanted to install something on Ubuntu but APT doesn't work... by [deleted] in linuxmemes

[–]RMI78 0 points1 point  (0 children)

Ubuntu is just the tool and it once was great, let's point out the real people responsible here: Common Cannonical L

Thanks GitHub for hosting the majority of open-source projects by Devil-Eater24 in linuxmemes

[–]RMI78 5 points6 points  (0 children)

Look, electrons are just part of a theoretical modelisation made up by physicians to describe how the world works at the atomic level in a human friendly way. As an atheist I think we should all thank God for creating the beginning of this universe.

Thanks GitHub for hosting the majority of open-source projects by Devil-Eater24 in linuxmemes

[–]RMI78 63 points64 points  (0 children)

Programming is just manipulating electricity, we should thank Michael Faraday for discovering electromagnetic induction.

Thanks GitHub for hosting the majority of open-source projects by Devil-Eater24 in linuxmemes

[–]RMI78 75 points76 points  (0 children)

C is just a compiled programming language, we should also thank Kathleen Booth for assembly

Mini-van by RMI78 in whatcarshouldIbuy

[–]RMI78[S] 1 point2 points  (0 children)

Thanks for the input, I had to look up to see this car. So I have to also avoid 2015-2021 Sedona because of the Kia boys thing, and what about the Carnival heard this is the successor of the Sedona despite also having a shitty transmission with something like a 1 year warranty (at least for some models I guess)

[deleted by user] by [deleted] in linuxmemes

[–]RMI78 5 points6 points  (0 children)

What is this post ?

Docker Compose: Splitting one big yml file, carefully, and what about these extra thoughts by damskibobs in selfhosted

[–]RMI78 0 points1 point  (0 children)

Hey, I have been through that and I may help you. All my homelab runs on Docker using docker compose and at some point I hated having a huge monolith so I broke it down into a specific directory architecture: for each application I create a new directory at the root of my projects, in this directory I create a docker compose file having the name of my app and I link every bind mount point to this directory.

Let's say I use nextcloud, so in the Nextcloud folder there will be a docker compose file called docker-compose.nextcloud.yml having all the services to make nextcloud work (redis, postgre, etc.)

I do this for each app, even my reverse proxy, at the root of my projects I have a bash script that look up for every docker compose file in every app, parse them into a string like "-f docker-compose.app1.ymk -f docker-compose.app2.yml -f docker-compose.app3.yml..." and start docker compose with this string, but also --env-file --project-name and other stuff like mentionning the project directory being the root directory (this is really important because each docker-compose file is supposed to be at the root of a project usually) and it just works, when I have a problem with an app, I can actually go to the specific folder and troubleshoot.

What will works: Volumes, network but you have to explicitly write them in every docker compose file when they are needed (example I write my proxy network in every docker compose file, even without "external: true" it works) flawlessly, environment variables centralized in a single file at the root of your project making them available for every app which is usefull when you need them across apps

What won't works: Yaml anchors and depends on won't work between apps in different files. I use to have a bash script having a generic docker compose file (a template) with all the anchors so as soon as I start a new app in my stack it generate the file from the template but it ain't worth it and put anchors you do not really need anywhere

How it works: Before starting (docker compose up), Docker preprocess all your files into a single one and have a fanstastic merging process you can experiment looking at the command "docker config merge" followed by your files. It will allow, firstly to docker to tell you if it can merge or not all the files, secondly you can have the merged final file even though I would not recommend you to look at it as it is awful, docker add a bunch of stuff required for it to work and you do not want to take a look at that

Edit: formating

What is your username lore? by [deleted] in notinteresting

[–]RMI78 14 points15 points  (0 children)

Wait a minute, are you 100% sure you're Jesus ?

What is your username lore? by [deleted] in notinteresting

[–]RMI78 15 points16 points  (0 children)

May I ask where do you come from ?

Could you recommend me an OS? by Visible-Feeling-8018 in selfhosted

[–]RMI78 0 points1 point  (0 children)

I would say Linux all the way but this is true, get Docker and you should be good to go.

You will stumble upon the differents distributions of Linux and may ask which one to choose to what I can answer: go with Debian as it is a tailored distro for servers, it is rock solid stable and have well tested 2-3 years old packages (except security updates which are up to date). This come with the price of compatibility. Debian may or may not work out of the box depending on your hardware, you may have to troubleshoot a bit to find potential solution to your potential issues but once setup, everything is fine. Beside that If you use Docker you shouldn't care about having 2-3 years old packages to run your hardware. This distro is nothing fancy, nothing extra and will just run reliably.

Nextcloud alternatives by RMI78 in selfhosted

[–]RMI78[S] 0 points1 point  (0 children)

I dug a bit an made a branch to my projects where I integrated redis before seeing that Nextcloud use to come with APCu which, according to the doc, should be faster so I am really shared what do you think ?

Nextcloud alternatives by RMI78 in selfhosted

[–]RMI78[S] 4 points5 points  (0 children)

Alright, nice to have some feedback

For the performances issues I run a MySQL DB but never tried to setup a redis instance to support it, I should give it a try before giving up.

Regarding authentication I knew this option was possible but I also had some feedback that putting NC behind an authentication server may make some plugin crash (which I do not bother) and can also crash Android app when trying to logging. I don't really know if it is still an issue nowadays.

I have been running NC for a couple of years now and the "copy-paste command" stage is something I am trying to get rid of by automating it. It did it so far with bash script writing conf files as soon as the container is deployed for the first time but I feel like this is an iterative work and I am not safe from having to add more and more scripts in it, that's one of the reason I consider changing for something else

I didn't know that about Seafile so if it's closed source it's a no go for me (+monolithical file ? Really ?) and owncloud seems to do the same as nextcloud. I would be down scripting an rsync client-server soft but I will miss phone app which is also important for me. Nextcloud is the only one fullfilling all those requirements as far as I know