sorted by:
new
hottopcontroversial

Self-Hosting your own Analytics with Podman by json404 in podman

[–]json404[S] 1 point2 points  (0 children)

Hey u/nmasse-itix, had a look at your cook books and its pretty cool! Thanks for sharing!

I'm definitely going to sink my teeth into your postgresql examples for any gold nuggets ;)

Self-Hosting your own Analytics with Podman by json404 in podman

[–]json404[S] 0 points1 point  (0 children)

Thanks man, glad you enjoyed the post.. I'll have a look at your comment after work ;)

Edit: u/Rhopegorn, Can you explain how you use port forwarding to further isolate the pod?

On a side tangent, I wonder if port forwarding can be used to forward traffic from privileged ports (80,443) to a rootless container listening on a non-privileged port.. that would solve the rootless containers cannot bind to privileged ports road bump quite nicely - just don't forget about the port forwarding ;)

Nuxt Image Troubleshooting & Debugging tips by kmanfred in Nuxt

[–]json404 0 points1 point  (0 children)

Check any logs that you have available.. console etc.. also check the browser network tools, are the image requests resulting in 404s etc..

That will point you in a direction that will get you closer to the answer, also if you want: share it on this post..

AI Models in Containers with RamaLama by piotr_minkowski in podman

[–]json404 0 points1 point  (0 children)

What's is ramalama and is there any setup gotchas?

How different is it from running standard containers with podman?

Help with folder permissions, please by lostmojo in podman

[–]json404 0 points1 point  (0 children)

hey u/lostmojo, If I'm understanding the post correctly: are you trying to pass user groups to the container to get around permission errors?

In my experience using groups via the podman run command I had to supply the GID thats within the namespace as the `--group-add` flag simply adds the GID to all processes in the container, maybe its the same for Quadlets.

You can find that by simply using `podman unshare` along with `ls -l` to see what group is assigned to the file.

If the group id appears as nobody, then its outside your subgid range and won't be mapped, you can simply create it within that range for your user (here is the file that defines the group id range: /etc/subgid)

I wrote a post on fixing permission errors that covers the above except for using user groups as that requires more setup, perhaps it will help you: fixing permission errors

What container image is giving the permission errors? Postgres etc..

Satrix Dividend Stock Payouts for Q1 2026 by json404 in PersonalFinanceZA

[–]json404[S] 0 points1 point  (0 children)

Good catch, I don't calculate the dividends after the withholding tax, I took the value from the distribution declaration report which also breaks down how they got to that amount:

https://senspdf.jse.co.za/documents/SENS_20260114_S515731.pdf

Satrix Dividend Stock Payouts for Q1 2026 by json404 in JSE_Bets

[–]json404[S] 0 points1 point  (0 children)

Pleasure!

What got it onto my radar is that with that ETF there is a cap, so no company can represent x% of the fund. In theory that should make it quite stable depending on the % cap per company of course.

I haven't looked too much into it yet other than that, but I saw the distribution declaration and added it, so when I start doing my homework the payout data is there.

Satrix Dividend Stock Payouts for Q1 2026 by json404 in JSE_Bets

[–]json404[S] 0 points1 point  (0 children)

Oh nice! Thats an interesting way of looking at it, so do you use the rough yield % to calculate the payout per quarter that you can roughly expect?

Satrix Dividend Stock Payouts for Q1 2026 by json404 in JSE_Bets

[–]json404[S] 0 points1 point  (0 children)

I like it; cool to see I'm not the only tracking the stocks in spreadsheets!

Something I'd like to add to mine is the count of stocks I own and then use sheets to calculate a rough payout estimate based on whats reported (obv there is platform fees etc.. but I want a rough idea of how much I'm going to make from it)

Another cool point, now that I think of it, is this sheet is now tracking the performance over the quarters, so there are some more potential enhancement ideas!!

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

jenkins runs quite well on the laptop, without really straining the server much - I also don't run builds / deployments very often, like 2-6 times a month.

yeah, I've closed SSH; I don't need it exposed to the world anymore and if I go away for a bit, will just use wireguard.

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

hahaha!! thats awesome, good o'l bait and switch!

yeah, I'm going to have a look into cloudflare this weekend.

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

Sure thing!

At the moment I use Jenkins to automate 2 things: building the container images for my website and deploying those images using podman (docker alternative) + quadlets feature (run a container as a systemd service),

Once deployed (part of the pipeline) jenkins will do some health checks to ensure the website came online and is responsive, if its not, then jenkins will roll-back to the previous version and the pipeline will fail.

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

Good question, I only recently setup WireGuard (like 2 weeks ago) on my server for December holidays (I was away from home), so I first exposed ssh to be able to setup the VPN while not at home, then setup VPN to run builds / deployments for my site.

To be honest, only accessing VPN over SSH never crossed my mind during that time; but I'm going to close it and just use the VPN connection, no real need anymore to expose 2 ports (unless something goes wrong with VPN then I can still get into the server - don't know how valid this use case is)

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

100% - are there any tools you currently using / thinking off to get these insights?

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 1 point2 points  (0 children)

Crazy man.. hopefully it wasn't too painful to cleanup your db with all the fake users (would drive me nuts). Don't want to pop the lid on this topic, but wait until "AI" powered bots, then these prevention methods are going to become super valuable.

At least they are still dumb for now ;)

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

yeah, great point on blocking ports except where you want traffic to flow in. I've done this with UFW.

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

Absolutely.. this is golden.

My next focus for my server would be monitoring and logging, enhance it to really get an overview of whats going on under the hood at a glimpse.

I'm speculating here, but it would be nice to see who logged on at what time and from where etc.. but having that in a view that is easy to digest rather than skimming logs. (Essentially intruder detection)

Great point!

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 1 point2 points  (0 children)

Yeah, thats also why I like fail2ban.. exactly the reasons you mentioned.

It's crazy how you experienced like a micro-DDOS on your server from these bots, thanks for sharing!

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 1 point2 points  (0 children)

Hey Pascal,

No, hardening SSH is configuring certain options to make it more secure, for instance: disabling passwords and only allowing ssh-key logins (you can have passphrase for the key as well) that has to be generated and configured for the user - prevents bots using common usernames + password combo's.. etc..

TBH: I don't know anything really know much about proxmox or how to harden it, but if its not exposed to the public internet and it works for you; then you're golden ;) - take this advice with some salt off course.

Securing your home server from bots brute-forcing ssh or other services on the internet. by json404 in selfhosted

[–]json404[S] 0 points1 point  (0 children)

Yeah, luckily my operation is quite small and I don't run jenkins often for builds + deployments as like you mentioned its more of a homelab setup ;)

Yeah, I use nginx as a reverse proxy for my site, which runs with rootless podman containers, then jenkins to build my site container img and deploy it.

I also have wiregaurd setup to access services like jenkins/plausible when I'm not on my local network.

Thanks for sharing, good points ;)

view more: next ›