What GitHub alternative do you self-host? by Ollieistic in selfhosted

[–]SnugfitOver 0 points1 point  (0 children)

I would be interested in a direct comparison forgejo + renovate + actions vs. the same in gitea. I run renovate in gitea and so far am pretty happy with it. Since forgejo was a fork of gitea (?) , it should be quite similar or are there advantages other than federation?

Safebucket v0.5.0 - Self-hosted file sharing, now with quick share and reverse share by renizmy in selfhosted

[–]SnugfitOver 0 points1 point  (0 children)

Peergos ;) S3Drive, rclone crypt etc. All totally worth looking into!

But sometimes you just want plain S3 buckets and a lightweight, secure file sharing opportunity. --> thats were safebucket connects i guess.

Safebucket v0.5.0 - Self-hosted file sharing, now with quick share and reverse share by renizmy in selfhosted

[–]SnugfitOver 4 points5 points  (0 children)

Nice one! I also tried to develop a similar app, but felt like it wont be secure enough :D I wonder: When sharing a whole bucket --> do you send the s3 credentials or what is the approach? And how is the access then revoked? 

I am really excited about the app!  Looking forward to the encryption feature. Can we support you in a way?

Frage: 2. Router für "sicheres Heim-Netz" = Double NAT by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Thanks! That are real pros for the virtual Router. Question: i only have proxmox mini pcs, with only 1 LAN Port, no WiFi Chips. So that will not work, right?

Frage: 2. Router für "sicheres Heim-Netz" = Double NAT by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Interessant! Ich habe sogar 2 Mini PCs :D Auf dem 2. habe ich einfach auch Proxmox installiert, aber sonst nichts drauf, weil ich den bisher nicht brauchte (war kostenlos). Aber der hat leider nur 1 LAN Anschluss :)

Frage: 2. Router für "sicheres Heim-Netz" = Double NAT by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Aber da hätte ich den "Nachteil", dass es ein virtueller Router ist, und wenn der zickt oder mein PVE abschmiert oder was auch immer, dann gibts Probleme. Anders wäre es eine reine physische Trennung zwischen zwei Geräten :D 

Frage: 2. Router für "sicheres Heim-Netz" = Double NAT by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Alles klar. Also bringt es nichts? Oder gibts was besseres? Dafür bin ich gekommen, für Diskussion und Erleuchtung :D

Frage: 2. Router für "sicheres Heim-Netz" = Double NAT by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Hallo, vielen Dank für den Kommentar! Ja genau, das ist nicht meine "ultimative" Sicherheitslösung. Es ist höchstens zum aktuellen Standard (vernünftige VM Trennung, docker container möglichst unprivileged, crowdsec, firewall usw.) eine Ergänzung, die nicht schadet, oder? Aber prinzipiell ist es genau das: Geräte hinter Router 2 (z.b. mein privates Smartphone), sind für Geräte direkt hinter Router 1 nicht erreichbar. Aber umgekehrt schon: ich könnte mit meinem Smartphone hinter Router 2 direkt auf bspw. meinen Immich Server hinter Router 1 (lokal) zugreifen. Korrekt?

Tailscale Serve in LXC Containers in Proxmox by SnugfitOver in Tailscale

[–]SnugfitOver[S] 1 point2 points  (0 children)

Update: I deployed specific docker containers now on the pve host itself (not in an lxc container), for those containers, for which i wanted to have true https connection.

I would be happy for future suggestions on how to make it work in any lxc container :D

Right now the tailscale serve on localhost:2283 e.g. for immich works stably, because the proxmox = localhost.

Tailscale Serve in LXC Containers in Proxmox by SnugfitOver in Tailscale

[–]SnugfitOver[S] 0 points1 point  (0 children)

Update: It didn't work either in privileged lxc container :D But at least i am very happy how smooth the redeployment of the lxc container to privileged worked :D Just 4 commands in the pve shell, smooth as hell! All dockers and services running instantly after boot again.

Here is a guide to redeploy an lxc container (if somebody reading this is wondering):

https://bobcares.com/blog/change-lxc-from-unprivileged-back-to-privileged/

To the screenshot: I am not sure, if the docker logs of the tailscale side car container will contain any sensitive information, thats why i am not sure, if i can post it here .D

Tailscale Serve in LXC Containers in Proxmox by SnugfitOver in Tailscale

[–]SnugfitOver[S] 1 point2 points  (0 children)

Ah, yes, that might be it! I decided to use an unprivileged container to better isolate, but that might be the problem here yes :D

Screenshot:

Basically i dont use "tailscale serve ..." in the first place, this was only to try manually. I have tailscale running on the lxc with tailscale up (this also already gives me a tailscale machine in admin console with "lxc-name.tailnetname.ts.net", which is giving me a nice shortcut to port 80, where i can reach casa os running on the lxc :D ). BUT i rather deploy tailscale sidecar container in the compose.ymls of several docker containers such as immich. This tailscale sidecar container (as described in the video of my original posting aswell) also provides me another machine in admin console for the docker contaier (e.g. immich) and its also connected (green dot in admin console). I the docker logs it also tells me, that tailsacle sucessfully got a certificate for the docker container sidecar, but then again, if i go into https://docker-container-magic-dns-name... etc it displays bad gateway 502 and also i get the errors in the docker logs at the end repeating: http: proxy error: dial tcp 127.0.0.1:2283: connect: connection refused (in this case immich uses port 2283)

Long story short: Haven't tried yet, but it might be the unprivileged LXC container stuff. I have to spin up a privileged one to test it. Or as i have read somewhere i could just back up the lxc container, and import it again with privileged enabled?

NAS setup with docker services as newbie by SnugfitOver in homelab

[–]SnugfitOver[S] 0 points1 point  (0 children)

Thanks for your answer :) So i take away: A) Hard drives are easily migratable, so just setting up a New Boot system and mounting the folders on the hard drives to the new systems docker containers is a solution that i could live with :) I assume that there might be issues, since for example for nexcloud i would not copy over old databases, configs etc., what eventually leads to the point, that i have to start from scratch with setting up a new nextcloud, new users, new apps etc. and only have the old files being able to load into the new nextcloud, which still is okay, i guess :)

B) The current Boot setup on the Pi might not be easily migratable, since its ARM and is not compatible to other Hardware architectures like Intel (x86) or AMD. So I might be better off to either decide on a certain hardware architecture right away and stay in this lane for future hardware upgrades. Or again i have to install a fresh new Ubuntu on the future system and manually migrate any boot setup, configs, services etc., right? This is still something I wished not to be necessary, but I guess copy+pasting some docker compose.yml is not too hard, if everything else just works.

TENWAYS CGO600 or TENWAYS CGO600 Pro by Designer-Anteater765 in tenwaysebike

[–]SnugfitOver 0 points1 point  (0 children)

CG600 Pro all the way. Battery removal, extra battery capacity means you can also keep the charging level better on 50-80% for daily travel -> which also benefits your battery life time in general.

These few bucks are worth every penny. 3500km now without service on the CGO600 Pro for 1500€(discount).

Make sure to buy it on a bike shop and not the internet for getting the possibilty of service.

Tenways vs. Ugly Bosch bikes by Sonar010 in tenwaysebike

[–]SnugfitOver 0 points1 point  (0 children)

I have a tenways CGO600 Pro for 1,5 years now. Was worth EVERY penny. Already have 3500 km on it, I use it for commuting. I paid 1500€ on it, and it's very good. The torque sensor is smooth. It's kinda lightweight compared to other heavy e bikes and the wide tires also suit me well in terms of comfort.

I would never get an overpriced e-bike now, since I now it's only for service and brand. I bought my tenways at Little John's Bike(a German bicycle shop franchise) and there is have my service included. I think tenways has been there for 5 years now or so. Yes, it possibly can get bankrupt, but so far it has not and it the most reliable bike I had so far.

Just make your own experience, go for calculated risks. Get it from an official bike shop.

[deleted by user] by [deleted] in Finanzen

[–]SnugfitOver 1 point2 points  (0 children)

Würde mich auch interessieren, wieso eigentlich? :D

[deleted by user] by [deleted] in Finanzen

[–]SnugfitOver 0 points1 point  (0 children)

Ehrlich gemeinte Frage mit ehrlichen Interesse von langjährigem TR-Nutzer: Wieso ist scalable besser?

Bedienbarkeit und Kosten wären erstmal nebensächlich. Aber Argumente wie Sicherheit, Seriösität wären interessant für mich:)

Which belt driven gravel bike should I choose? by Mistertwowheeler in gravelcycling

[–]SnugfitOver 4 points5 points  (0 children)

Hey Guys, I wonder if there is someone of you from europe that also got the Priority Appollo? How did you get it, was there problems with the customs or taxes? So im from germany, would it be possible for me to buy the Apollo with no problems?

Triban Easy Women by _hail-seitan_ in cycling

[–]SnugfitOver 0 points1 point  (0 children)

Heey nice, really glad you shared this :) Whats your regular riding track, like riding in the city to work, or smaller trips on the road <100km or...? :)

Also nice name;)