smiletolerantly

joined 1 year ago
[–] smiletolerantly@awful.systems 26 points 1 month ago (2 children)

Never in my life hage I known people (in Germany, but probably everywhere) to he happy with politics. I would also argue that for the vast majority (again, here in Germany) life has improved over the past decades.

IMO the reason for right wing surges aren't actual real-world problems or failings of ruling parties (though flawed they are), but the new forms of propaganda and outreach that right wing parties have mastered, and left wing parties have failed at.

Which shouldn't really be an issue since you should only host on 443, which tells bots basically nothing.

Configure your firewall/proxy to only forward for the correct subdomain, and now the bots are back to 0, since knowing the port is useless, and any even mildly competent DNS provider will protect you from bots walking your zone.

Sorry, saw this only just now. I don't really have any guides to point to, so just the basic steps:

  • host jellyfin locally, e.g. on http://192.168.10.10:8096/
  • configure some reverse proxy (nginx, caddy, in my case it's haproxy managed through OPNSense)
  • that proxy should handle https (i.e. Let's Encrypt) certificates
  • it should only forward https traffic for (for example) jellyfin.yourdomain.com to your Jellyfin server
  • create a DNS entry for jellyfin.yourexample.com pointing either to your static IP, or have some DynDNS mechanism to update the entry

90% of this is applicable to any "how to host x publicly" question, and is mostly a one-time setup. Ideally, have the proxy running on a different VM/hardware, e.g. a firewall, and do think about how well you want/need to secure the network.

In any case, you then just put in https://jellyfin.yourdomain.com/ in the hotel TV.

[–] smiletolerantly@awful.systems 1 points 1 month ago (2 children)

I have never used Tailscale. I have also Jever seen anyone in the wild recommend it and explain what exactly the use-case is beyond plain, old, reliable, open source WireGuard.

So yeah, agreed.

Also I have been hosting Jellyfin publicly accessible for years with zero issues, so idk... I also dint k ow what the "you have to use Tailscale for jellyfin" people are doing with TVs/Firesticks/... in hotels, airbnbs,...

Managing 30+ machines with NixOS in a single unified config, currently sitting at a total of around 17k lines of nix code.

In other words, I have put a lot of time into this. It was a very steep learning curve, but it's paid for itself multiple times over by now.

For "newcomers", my observations can be boiled down to this: if you only manage one machine, it's not worth it. Maaaaaybe give home-manager a try and see if you like it.

Situation is probably different with things like Silverblue (IMO throwing those kinds of distros in with Guix and NixOS is a bit misleading - very different philosophy and user experience), but I can only talk about Nix here.

With Nix, the real benefit comes once you handle multiple machines. Identical or similar configurations get combined or parametrized. Config values set for Host A can be reused and decisions be made automatically based on it in Host B, for example:

  • all hosts know my SSH pub keys from first boot, without ever having to configure anything in any of them
  • my NAS IP is set once, all hosts requiring NAS access just reuse it implicitly
  • creating new proxmox VMs just means adding, on average, 10 lines of nix config (saying: your ID will be this, you will run that service) and a single command, because the heavy lifting and configuring has already been done, once -...

Chat, is this AI-generated ads on Lemmy?

[–] smiletolerantly@awful.systems 1 points 1 month ago (1 children)

This is an ad.

[–] smiletolerantly@awful.systems -2 points 1 month ago

No, AIHorde still uses corporate models. The only open source part is distributing the computation.

[–] smiletolerantly@awful.systems 1 points 1 month ago (3 children)

No, AIHorde still uses corporate models. The only open source part is distributing the computation.

[–] smiletolerantly@awful.systems 53 points 1 month ago (3 children)

Uhhhhhh

No? If they are hard, they are dried out. Chewy, sure, that's the fun; but they should be soft to the touch.

[–] smiletolerantly@awful.systems 8 points 1 month ago (1 children)

Are we talking permanent background tracking? Or sending a message "hey, I'm here"?

Naja OK, sie ist Netzwerktechnikerin. Auf Feuerwänden o.Ä. hat sie sehr viel mehr Erfahrung und Durchhaltevermögen. Aber bei Linux reicht es, dass in keiner Desktopumgebung die Netzwerkinfos beim Maus-Hovern über dem Netzwerksymbol nach ihrem Geschmack formatiert ist...

view more: ‹ prev next ›