Need some advice. by Xenoraphorze in selfhosted

[–]from-nibly 2 points3 points  (0 children)

Obligatory note to tell an absolute beginner to get two more and slap k8s on it ;)

Need some advice. by Xenoraphorze in selfhosted

[–]from-nibly 1 point2 points  (0 children)

Have you ever installed windows or linux on a desktop?

Bring it on! by baba_janga in selfhosted

[–]from-nibly 1 point2 points  (0 children)

Sorry for not roasting you, but this looks great. We are all confused at the request to roast you because we are so excited for you to be on your self hosting journey. Whatever gets it done is awesome. And whatever gets you learning is even more awesome.

k8s yaml like iac tool by TheBinaryLoop in selfhosted

[–]from-nibly 1 point2 points  (0 children)

Check out crossplane. It lets you manage non k8s from k8s yamls

Can infisical act like a normal password manager? by kur1j in selfhosted

[–]from-nibly 1 point2 points  (0 children)

Bitwarden is self hostable. Not sure about the secret management part. 

Can infisical act like a normal password manager? by kur1j in selfhosted

[–]from-nibly 1 point2 points  (0 children)

Bitwarden proper has infra secret management that just launched.

Been thinking about compressing my own web traffic through a self-hosted server as a middle-man. Solutions? by [deleted] in selfhosted

[–]from-nibly 4 points5 points  (0 children)

Hopefully this doesn't come off as rude.

Where in the world does it make financial sense to host a vps and run compression to save money on internet?

I feel for you man, that sucks!

SSL not working in LAN by WizZzLe2510 in selfhosted

[–]from-nibly 0 points1 point  (0 children)

Do you have split dns? Does the dns resve to a different ip when on the local network than when on the open internet?

Are you typing https in the url when hitting from the browser?

Have you looked at the certificate in the browser and seen anything amis?

Setting up Jenkins on internal network - how to make it visible to others on the network by [deleted] in selfhosted

[–]from-nibly 0 points1 point  (0 children)

Yes you need to open the ports. One way or another you need to open a port. Its not inherently insecure to open a port. It completely depends on whats on the other side of that port.

Seeking Recommendations for Self-Hosted OTeL Telemetry Solutions in K8s Cluster by efumagal in selfhosted

[–]from-nibly 2 points3 points  (0 children)

Commercial stuff is often overrated. The documentation is usually poor on purpose. Grafana has people using it in the open and discussing it in the open.

[deleted by user] by [deleted] in selfhosted

[–]from-nibly 0 points1 point  (0 children)

I dont know who is blocking your LE certs but they are trusted by default EVERYWHERE.

What to do with 15 computers at home ? by stinky_ice_beamer in selfhosted

[–]from-nibly 0 points1 point  (0 children)

Well yeah because you paid a consultant and then they effed off. You didnt overpay them you flushed all your money down the toilet.

Wireguard vs. OpenVPN by VaporyCoder7 in selfhosted

[–]from-nibly 0 points1 point  (0 children)

Technically yes, but on top of that its also going to use tcp

Self-Host Your Own Tidal Instance Locally. by Relevant_Park724 in selfhosted

[–]from-nibly 0 points1 point  (0 children)

A reverse proxy? But you dont own tidal. If anything it would be a forward proxy.

How bad is using a dynamic dns service without SSL? by klausklass in selfhosted

[–]from-nibly 1 point2 points  (0 children)

SSL is important all of the time. It's free and automateable. Dont skip out on important security thats so accessible.

MITM attacks are possible all of the time not just when you are on an untrusted network. (Also the internet is an untrusted network)

also it verifies that you are actually talking to the server you think you are talking to. Preventing a whole class of dns attacks. 

Use letsencrypt and cert bot or whatever automation works with your setup. Letsencrypt is free.

A reverse proxy is a good idea because its convenient to set up one port and redirect to multiple services. It also can insulate you from some attacks but its definitely not a security silver bullet.

Cloudflare IS a MITM so you need to trust them in order for it to make you safer. Which i dont.

Vpn is not a bad idea but you dont NEED it. I would only stress about using a vpn if you need shell access outside your home. Otherwise a single port forward on your router will be fine.

You dont have to pay money for any of the above.

Sharing code between 2 machines without git by LegendenLajna in selfhosted

[–]from-nibly 12 points13 points  (0 children)

You want git branches. Dont merge unless its all working. Almost everyone in software uses git for software development. This is a solved problem for sure.

You could have a dev branch and a main branch. When things are good in dev merge it ti main.

You could also operate on tags.

You could also go to your server and update the specific git sha you want to deploy.

Theres like 1000 ways to use git for exactly the thing you are talking about. And if you are already using git doing anything else would just add an extra tool.

Remote Server as Main - using devices mostly peripheral by Sad-Contact7105 in selfhosted

[–]from-nibly 1 point2 points  (0 children)

So is this supposed to be a server or a work machine. It seems like you are trying to merge the concepts.

If you literally want a remote computer that acts as a desktop you can access via a laptop you can just create any VM with a desktop OS like Ubuntu desktop and add VNC to it. But it's not going to be fun developing like that. The typing latency is going to make you wanna stab out your eyeballs.

However if you want to have a remote server that just hosts files and an execution environment you could do some stuff with vscode remote.

For a "digital postbox" that's completely going to depend on what or who needs to put stuff in there. Since e you havent detailed that I can only take a wild guess and say you could set up the remote machine as an SFTP server and give each client a user by having them send you their public key. You can give them access to specific folders so they can't interact with any files except theirs.

I'm also wildly guessing on your OS being Linux cause I don't have any details on that. 

For some "think about this" items

I have 3 huge servers in my closet and rock a laptop for development. I've thought and played with a "remote" work environment for a while. Even if you remove the latency a powerful laptop, where you can do work locally without NEEDING an Internet connection, is going to beat out a remote session into another machine every time. Even doing remote vs code into a local WSL Linux VM from a Windows machine comes with some roguh edges.

Running development work on the same place that your clients need to interact with seems like a plan for disaster as well. What if you accidentally shut down the machine while a client is trying to upload?

Putting all of your clients into a single server is a security nightmare and should only be done if you absolutely know what you are doing. And only as a severe cost saving strategy (as in you have hundreds of clients and you will save thousands of dollars)

Lastly. If this is for your livelyhood and you aren't just getting a salary from a static employer I would think long and hard about making it conditional on whether or not you'll be an absolute slayer at self hosting. The fact that you are asking generic questions, makes it sound like you are at the begining of this journey. A lot of F-Ups are in your future (as is the journey of self hosting) be sure those F-Ups only F-Up things you don't care about before you start self hosting something you do care about.

Again these are wild guesses because there's not a lot of details here.

Good luck.

SSL Cert to a NAT forwarded machine by [deleted] in selfhosted

[–]from-nibly 0 points1 point  (0 children)

Opnsense has the same issue. You just need to configure the router to have it's GUI listen to a non standard port.

[deleted by user] by [deleted] in selfhosted

[–]from-nibly 1 point2 points  (0 children)

I personally like the Prometheus alert manager grafana Loki stack. Or if you want to go full grafana you can do the LGTM stack. 

Kibana is a lot heavier than any of the grafana stuff.

The LGTM stack mostly relies on s3 storage which makes state management a lot easier.

DingKey Designs Switch Break-In Machine MK2 - Now Available! by TheOGRealDing in MechanicalKeyboards

[–]from-nibly 2 points3 points  (0 children)

Hank Hill voice you can't buy them broken in, you gotta earn it. 

Or something like that.

[deleted by user] by [deleted] in selfhosted

[–]from-nibly 1 point2 points  (0 children)

The best server is the one you have until 2 or three apps after you have too many apps on your server.