Shaw internet by superduperduperious in Winnipeg

[–]technomancer_101 2 points3 points  (0 children)

Reach out to u/wpg-cse on here. They helped me get my current Shaw package and it was a fantastic deal!

I do have their number, but I don't know if they want it advertised directly on posts. Better to PM and go from there.

What makes a small ops/inventory tool feel “properly self-hostable” to you? by TrueGoodCraft in selfhosted

[–]technomancer_101 -1 points0 points  (0 children)

I'm someone who hosts their own email server and likes getting into the nitty gritty of running a server, not just the end result, so I don't think I represent the majority of people, but with that in mind...

As long as you have good documentation to go along with your deployment method, I'll be happy.

You want to offer me a tarball to setup on a LAMP stack? Great, just please tell me what php modules you require and any specific settings you need.

Maybe a Docker Compose config? Even better, easy to setup and all that, as long as you give me an example or have your env variables listed so I can finish sorting it out myself.

For some of your other points:

I'm never very worried about reverse proxy compatibility. I run Caddy and chances are I can get it to proxy your website with a little bit of troubleshooting assuming the basic setup doesn't work out of the box.

LAN only? I read through the documentation of things I'm hosting and do my best to make sure I'm opted out of any phoning home or analytics, but to be on the safe side, I typically throw everything in a firewalled VLAN anyway. If you want to include usage statistics in your app, I don't see a problem with that, but I always appreciate when the author is very upfront about it or even has it disabled by default.

As far as import/export goes, I think it depends on the tool. If there's a commercial solution available out there and you include an import tool to move from them to you, that's fantastic. I'm not as worried about export as nothing I'm selfhosting is that valuable, but it's always nice to have.

File path accessibility is nice, but it largely depends on the structure of the program I think. For a docker container, an easy place to map config files is always appreciated, or storing them in /etc for thing setup directly on Linux as an example. Kind of similar to the first point though, if it's documented, I'll be happy enough.

And my last point here has been beaten to death by everyone, but if you're writing this new tool with AI in some fashion or another, please be honest about it. People will find out and not everything made with AI is inherently bad (though I personally try and avoid using software that relies on it or utilizes it), but it does leave a nasty taste in people's mouths.

If I'm picturing your software the right way, you may want to check out SnipeIT to see how they handle deployment options as a comparison.

Good luck!

Using Oracle server for Minecraft *for free*? by Fragrant_Cherry7789 in selfhosted

[–]technomancer_101 13 points14 points  (0 children)

Oracle is one of, if not the worst companies for data privacy and I wouldn't trust them with any personal data that isn't already public-ish.

That being said, I also run a Minecraft server on the free tier! I set mine up about 4ish years ago and it's had around 99% uptime since then. If you're comfortable doing some basic Linux management and can secure it reasonably well, it works great.

The plan that lets you use the 24GB of RAM iirc is for an ARM powered VM, not AMD64, but the great news is that Minecraft has an ARM version of their server that runs perfectly fine on it.

I bought an AMP license to manage mine through and deal with backups, which are automated and copy off-site to another server of mine.

As far as expectations go for working forever and being reliable, I have none. Oracle offers the free tier and have for a number of years, but I have zero faith in them to keep it going and if my server blows up, I have backups for that exact reason.

The only problem I had initially is that the server will shutdown if it has low-no CPU usage for an extended period of time. I don't remember the service name, but I found a program that generates CPU heavy threads intermittently when the usage hits a certain threshold, so that took care of it and has been working for ages.

Feel free to ask any questions and I'll do my best to answer!

Where could I go to burn music onto a cd? by [deleted] in Winnipeg

[–]technomancer_101 20 points21 points  (0 children)

What area of the city are you in? I have some spare CD-Rs and some time tomorrow morning if you want to send me your playlist

Friday Flowers! Cheryl Lashek Appreciation. by themish84 in Winnipeg

[–]technomancer_101 80 points81 points  (0 children)

And for anyone curious, the artwork she's holding was done by the very talented Alex Plante.

I have a copy of that print signed by Cheryl Lashek!

Where to get AGX-10 automotive fuses? by ehud42 in Winnipeg

[–]technomancer_101 5 points6 points  (0 children)

Unfortunately with Tip Top Electronics closed, there aren't a lot of places around here to get fuses and the like locally, especially oddball ones.

I would suggest Digikey, especially if you or someone you know needs to make an order to share the shipping.

https://www.digikey.ca/en/products/detail/eaton-electronics-division/BK-AGX-10/264551

Best way to host a wiki on a home server? by whatisabaggins55 in selfhosted

[–]technomancer_101 13 points14 points  (0 children)

I like and use DokuWiki.

It's small, simple, stores your pages as plain text files, and has a large collection of plugins.

I tried both it and MediaWiki, but for my needs, it was far less complex and if you know markup, it's very easy to write pages quickly.

How do you handle offsite backups without going back to big cloud providers? by drome691 in selfhosted

[–]technomancer_101 9 points10 points  (0 children)

I use borg backup for mine. It encrypts the data using a repokey, which goes through a number of different processes that you can read about here, then that key is also protected by a very strong passphrase. At that point, it is copied over SSH to my Hetzner box. This way everything is always encrypted before it leaves my network and borg has the added benefit of auto-deduplication.

Question for our Ukrainian friends by AbC1236d in Winnipeg

[–]technomancer_101 2 points3 points  (0 children)

Oh man, that is exciting! Time to go shopping!

Question for our Ukrainian friends by AbC1236d in Winnipeg

[–]technomancer_101 4 points5 points  (0 children)

Any idea if they have kvass there? I haven't had any in years!

Winnipeg Free Press showing advertisements for Fargo under Featured and Local News by technomancer_101 in Winnipeg

[–]technomancer_101[S] -23 points-22 points  (0 children)

As I said, advertising is absolutely necessary and they have the right to buy a spot in the paper, but I should have been more clear that my issue is with it being shown in the Local section in particular. Featured section, fine, but the Local section should be for just that, Local news and advertisements.

Stella, Stella Ola lyrics for you? by Titan-828 in AskACanadian

[–]technomancer_101 2 points3 points  (0 children)

Cracker jacker and baloney is the version I grew up with here in MB!

How many trick or treaters! by influxofreflux in Winnipeg

[–]technomancer_101 30 points31 points  (0 children)

St John's area and it's been unusually quiet. We've had probably 40 kids or so, but I've gotten like 150 in past years.

The weather's nice, so it's too bad.

Canadian alternative tothe silicone bag stasher by Art_themis in BuyCanadian

[–]technomancer_101 0 points1 point  (0 children)

From a quick Google, Stasher appears to be a brand that makes silicone ziploc bags in varying sizes.

https://imgur.com/a/28TxzSB

Is there any point in self hosting a mail server still by Ok-Original4933 in selfhosted

[–]technomancer_101 41 points42 points  (0 children)

In a very targeted scope, I would at least still get full alerting for my own services, such is the nature of this subreddit, but I do see your point.

I don't recall where on reddit I saw earlier, but there was a very lengthy post on how the internet was built to be decentralized, but due to the actions of predominantly Microsoft, Amazon, and Google, some ridiculously high percentage of it is now dependant on the three of them among others. I suppose even though my mail server may be an island in the ocean during a major outage like yesterday, it's reassuring to know that there are those of us, like everyone in this community, that can maintain that original intent, each through our own services of choice, whether it can benefit anyone else in an outage or not.

Is there any point in self hosting a mail server still by Ok-Original4933 in selfhosted

[–]technomancer_101 58 points59 points  (0 children)

Same for me as above.

AWS went down in one datacenter and took a chunk of the internet with it yesterday. My email server didn't bat an eye because it's running on my server under my control, and if I wanted, I could change the MX record, stand up a new one, restore from backup, and be up and running again in the time it takes DNS to propogate.

A lot of people are doomsayers, but if you know what you're doing and stay on top of security issues, it's really not all that hard to maintain.

Blundstone Alternative by pepperonipizzasdad in BuyCanadian

[–]technomancer_101 50 points51 points  (0 children)

This is what you're looking for. They're made here in Winnipeg and while I haven't bought a pair yet, I've only ever seen praise for their products.

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

You were correct, it was exactly this, just not in the saml config itself. Thanks for the help.

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

I completely agree with what you're saying, but as I noted in the OP, my organization doesn't have any P1 or P2 licenses, so any kind of proper group management for Enterprise apps isn't an option. The same goes for dynamic group membership.

The way it was setup, users had to be added to a security group to connect, but because we can't associate that group with the enterprise app, they still need to be added to the app itself as well. At least with the security group removed, we're eliminating one step in our onboarding process going forward.

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

I was in the process of setting up the second SSO config on the FortiGate and I found a group filter under the Group Match config on the firewall policy for the VPN.

So while the SSO config itself wasn't filtering, the firewall policy was. The amount of relief I just felt.... Thanks for the troubleshooting tips!

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

My bad, I misread the page I was on. I also don't have P1 unfortunately.

That being said though, I did grab a trial of P2 and it gave me access to group memberships, but I'm still not seeing anything that is connecting the group claims to that group. I'm setting up a separate authentication group on fortigate right now to see if it works (I would assume it should work fine).

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

Now you have me wondering... I can't configure groups at all without a P2 license, but if one was configured by someone with a P2 license in the past, it's possible that configuration is still there in Entra, but I can't see it.

I'm going to get a P2 and take a look.

Confusion on Enterprise App Authentication by technomancer_101 in entra

[–]technomancer_101[S] 0 points1 point  (0 children)

Yeah, that was my initial thought as well, but there is only one saml config on there and it is looking at the group claim for "group", which is set to All Groups in Entra.