Skip Navigation
ZeroTrust Your Home
  • this is a very bad article. It talks about "zero trust" but then suggests you to use corporate software, the cloud, sketchy russian apps to monitor your traffic at home. Also, I am not spending 2 hours a day going through my logs, nor I want a VM/container with 8GB of ram wasting 40% of my GPU on grafana.

  • Suggestions for Improving Linux Server Security: Beyond User Permissions and Groups?
  • Great that you included your threat model, but you should have specified the type of services that you host/provide.

    One thing i would look into is disabling any port that is not necessary (like 80 and 443) and disable ssh on the wider network.

    Host a wireguard endpoint in the internal network that acts like a bastion and allows you to ssh-jump to any other host and VM on the network.

    Wireguard is more secure than ssh, assuming sound crypto and hygiene for both, because you can't probe a host from the outside and know if wireguard is running or not

  • Any reliable group making AV1 releases consistently?
  • For most stuff i release, x265 objectively (vmaf and other metrics) and subjectively looks better than av1, especially for grainy stuff and older anime. I have had success only with some action movies.

    Opus on the other hand... it's great

  • How do you handle backup?
  • I mean... do the math and you can figure out by yourself that it's a fair price but in no way some sort of very convebient situation for the users. A 20tb hard drive goes for about 450€ and then you can consider the advantages that they have buying hdd at scale.

  • Self hosting is hard. How do you overcome?
  • First of all ignore the trends. Fuck docker, fuck nixos, fuck terraform or whatever tech stack gets shilled constantly.

    Find a tech stack that is easy FOR YOU and settle on that. I haven't changed technologies for 4 years now and feel like everything can fit in my head.

    Second of all, look at the other people using commercial services and see how stressed they are. Google banned my account, youtube has ads all the time, the app for service X changed and it's unusable and so on.

    Nothing comes for free in terms of time and mental baggage

  • Music - Self-Host - how to start / what's your stack?
  • In the past I used airsonic. It has the best support for different music files and good support for albums ripped as single track, like most classical releases.

    The problem with airsonic and its protocol is the lack of good android clients.

    If you need to listen through the phone for most of the time, go with jellyfin + finamp. Otherwise try airsonic + its web ui.

    For music acquisition:

    • torrent for the mainstream stuff
    • niche trackers for niche stuff
    • nicotine+/soulseek for everything
    • bandcamp to support the artists
  • [Request] Any Guides to FFMPEG, Transcoding, Codecs, and Metadata?
  • Are those your own blurays? Then share them before compressing.

    Transcoding is hard. There is no way that your transcoding settings are going to be a one size fits all. I am currently encoding the famous iKaos Dragonball release and I did 48 samples before deciding what configuration to use.

    You are better off downloading stuff from torrent, especially for newer media. You'll find a community that put 100x your time collectively on transcoding. That will also save from your tremendous electricity costs.

    Also look into vmaf for quality metrics. Consider that switching to uncompressed 1080 might bring you close to your goal with very very low effort.

    Btw, can you share the title list?

  • How should I do backups?
  • Going unmaintained is a non issue, since you can still restore from your backup. It is not like a subscription or proprietary software which is no longer usable when you stop to pay for it or the company owning goes down.

    Until they hit a hard bug or don't support newer transport formats or scenarios. Also the community dries up eventually

  • How should I do backups?
  • As long as you understand that simply syncing files does not protect against accidental or malicious data loss like incremental backups do.

    Can you show me a scenario? I don't understand how incremental backups cover malicious data loss cases

  • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)AN
    ancoraunamoka @lemmy.dbzer0.com
    Posts 4
    Comments 81