johntash Now • 100%
OpenHAB was OK the last time I used it. I'm not sure what other big options there are.
johntash Now • 100%
You can use docker exec with garage docker image.
I'm on mobile but I think you just need something like: docker exec containerid ./garage stats
johntash Now • 100%
Garage is the simplest of the three imo.
I've only used it in a cluster, but it should be even simpler for one instance
johntash Now • 100%
What mobile issues do you have? I use it both on desktop and mobile with sync mode turned on in the PWA.
johntash Now • 100%
I like it, it seems pretty stable to me. I didn't use it much before the query/template stuff was changed. I think both are fine right now, but don't really know what it looked like before.
There's also "space-script" now which is basically like mini javascript plugins you can write inside your notes. It's what drew me away from trilium in the end.
I don't blame you for taking a break if you ran into breaking changes though. That's one benefit to keeping your notes in regular markdown files too.
johntash Now • 0%
Any comparisons to SilverBullet.md? It's my favorite so far
johntash Now • 100%
What you read online may have been referring to how cloudflare itself can always see the unencrypted traffic?
Cloudflare tunnels are encrypted, but inside of that encrypted tunnel could be a regular http stream.
I've been in the process of migrating a lot things back to kubernetes, and I'm debating whether I should have separate private and public clusters. Some stuff I'll keep out of kubernetes and leave in separate vms, like nextcloud/immich/etc. Basically anything I think would be more likely to have sensitive data in it. I also have a few public-facing things like public websites, a matrix server, etc. Right now I'm solving this by having two separate ingress controllers in one cluster - one for private stuff only available over a vpn, and one only available over public ips. The main concern I'd have is reducing the blast radius if something gets compromised. But I also don't know if I really want to maintain multiple personal clusters. I am using Omni+Talos for kubernetes, so it's not _too_ difficult to maintain two clusters. It would be more inefficient as far as resources go since some of the nodes are baremetal servers and others are only vms. I wouldn't be able to share a large baremetal server anymore, unless I split it into vms. What are y'all's opinions on whether to keep everything in one cluster or not?
johntash Now • 100%
Restic with rest-server is great.
Kopia is a little newer and has an actual web ui, so may be a good choice too.
I still use restic on all of my severs, but have started using Kopia for my non server machines.
Both support compression, encryption, and deduplication.
johntash Now • 100%
Thanks for the recommendation, I'll take a look at some of his videos. I managed to get the un/pw on one page, but haven't done much with webauthn/passwordless stuff yet so that might be useful too.
johntash Now • 100%
Thanks! I managed to get user/pass on the same page and it works great with the compatibility mode
johntash Now • 100%
That's essentially what I am doing. Everything is on the LAN by default. I have two instances of Traefik. One that runs only on internal VPN ips, and another on remote servers using public ips. So I can choose which services are accessible over lan/vpn or public (routed through a vpn to lan).
That doesn't solve the authentication problem if I want to expose something to the internet though, or even sso inside the lan.
johntash Now • 100%
You can change the logon flow to make the username and password on the same page There is a comparability button as well on the login flow that allows bitwarden and other to auto fill correctly.
Thanks for the tips, I found the compatibility button and will try it out. I'm not sure I see how to change the username/password to be on the same page though. Do you have to create a whole new login flow?
johntash Now • 100%
Do you have a link for padlock by any chance?
I'm not sure if this is it, but I found a password manager named padloc: https://github.com/padloc/padloc
johntash Now • 100%
Did you move to Keycloak, or something else?
johntash Now • 100%
Thanks for confirming, I just saw that as well.
I'm going to try some of the other solutions in this thread, but I might still come back to authelia and just ignore my requirement for having social login. I like the idea of sending someone a link and saying "Hey just log in with your google account" instead of having to create an actual user for them, but maybe I can use something else specifically for those cases.
johntash Now • 100%
cloudflare access + cloudflare tunnels is a cool solution, and was easy to set up in the past, but I'd rather stick to something completely self-hosted. I'd probably use it for something completely public, but not things that route into my homelab.
johntash Now • 100%
Once I'm authenticated, it's actually pretty okay. It goes through the redirections fast enough that I wouldn't notice usually. But the login pages would take several seconds to load for me, and navigating around the admin ui also seemed to take several seconds for each page change. So not extremely slow, but slow enough to notice and get annoyed by it. Admittedly I probably could increase the session duration or something to help with that too.
johntash Now • 100%
Canaille looks pretty interesting and simple too, thanks for the link!
What's everyones recommendations for a self-hosted authentication system? My requirements are basically something lightweight that can handle logins for both regular users and google. I only have 4-5 total users. So far, I've looked at and tested: - Authentik - Seems okay, but also really slow for some reason. I'm also not a fan of the username on one page, password on the next screen flow - Keycloak - Looks like it might be lighter in resources these days, but definitely complicated to use - LLDAP - I'd be happy to use it for the ldap backend, but it doesn't solve the whole problem - Authelia - No web ui, which is fine, but also doesn't support social logins as far as I can tell. I think it would be my choice if it did support oidc - Zitadel - Sounds promising, but I spent a couple hours troubleshooting it just to get it working. I might go back to it, but I've had the most trouble with it so far and can't even compare the actual config yet
cross-posted from: https://lemmy.world/post/37906 > (I'm creating a starting guide post here. Have patience, it will take some time...) > > **Disclaimer**: I am new to Lemmy like most of you. Still finding my way. If you see something that isn't right, let me know. Also additions, please comment! > > # Welcome! > Welcome to Lemmy (on whichever server you're reading this) > > # About Lemmy > Lemmy is a federated platform for news aggregagtion / discussion. It's being developed by the Lemmy devs: https://github.com/LemmyNet > > ## About Federation > What does this federation mean? > > It means Lemmy is using a protocol (Activitypub) which makes it possible for all Lemmy servers to interact. > > - You can search and view communities on remote servers from here > - You can create posts in remote communities > - You can respond to remote posts > - You will be notified (if you wish) of comments on your remote posts > - You can follow Lemmy users/communities on other platforms that also use Activitypub (like Mastodon, Calckey etc) (There's currently a known issue with that, see [here](https://lemmy.world/post/15786) > > Please note that a server only starts indexing a server/community once it has been interacted with by a user of this server. > > A great image describing this, made by [@ulu_mulu@lemmy.world](https://lemmy.world/u/ulu_mulu) : https://imgur.com/a/uyoYySY > >  > > # About Lemmy.world > Lemmy.world is one of the many servers hosting the Lemmy software. It was started on June 1st, 2023 by [@ruud@lemmy.world](https://lemmy.world/u/ruud) , who is also running https://mastodon.world, https://calckey.world and others. > > A list of Lemmy servers and their statistics can be found at [FediDB > ](https://fedidb.org/software/lemmy) > > # Quick start guide > > ## Account > > You can use your account you created to log in to the server on which you created it. Not on other servers. Content is federated to other servers, users/accounts are **not**. > > ## Searching > In the top menu, you'll see the search icon. There, you can search for posts, communities etc. > >  > > You can just enter a search-word and it will find the Post-titles, post-content, communities etc containing that word **that the server knows of**. So any content any user of this server ever interacted with. > > You can also search for a community by it's link, e.g. `!Netherlands@lemmy.nl`. Even if the server hasn't ever seen that community, it will look it up remotely. Sometimes it takes some time for it to fetch the info (and displays 'No results' meanwhile..) so just be patient and search a second time after a few seconds. > > ## Creating communities > First, make sure the community doesn't already exist. Use search (see above). Also try [https://browse.feddit.de/](https://browse.feddit.de/) to see if there are remote communities on other Lemmy instances that aren't known to Lemmy.world yet. > > If you're sure it doesn't exist yet, go to the homepage and click 'Create a Community'. > >  > > It will open up the following page: > >  > > Here you can fill out: > > - Name: should be all lowercase letters. This will be the /c/ > - Display name: As to be expected, this will be the displayed name. > - You can upload an icon and banner image. Looks pretty. > - The sidebar should contain things like description, rules, links etc. You can use Markdown (yey!) > - If the community will contain mainly NSFW content, check the NSFW mark. NSFW is allowed as long as it doesn't break [the rules](https://mastodon.world/about) > - If you only want moderators to be able to post, check that checkbox. > - Select any language you want people to be able to post in. Apparently you shouldn't de-select 'Undetermined'. I was told some apps use 'Undetermined' as default language so don't work if you don't have it selected > > ## Reading > > I think the reading is obvious. Just click the post and you can read it. SOmetimes when there are many comments, they will partly be collapsed. > > ## Posting > > When viewing a community, you can create a new post in it. First of all make sure to check the community's rules, probably stated in the sidebar. > >  > > In the Create Post page these are the fields: > > - URL: Here you can paste a link which will be shown at the top of the post. Also the thumbnail of the post will link there. **Alternatively** you can upload an image using the image icon to the right of the field. That image will also be displayed as thumbnail for the post. > - Title: The title of the post. > - Body: Here you can type your post. You can use Markdown if you want. > - Community: select the community where you want this post created, defaults to the community you were in when you clicked 'create post' > - NSFW: Select this if you post any NSFW material, this blurs the thumbnail and displays 'NSFW' behind the post title. > - Language: Specify in which language your post is. > > Also see the [Lemmy documentation](https://join-lemmy.org/docs/en/users/02-media.html) on formatting etc. > > ## Commenting > > ## Moderating / Reporting > > ## Client apps > > There are some apps available or in testing. See [this post](https://lemmy.world/post/465785) for a list! > > # Issues > When you find any issue, please report so here: https://lemmy.world/post/15786 if you think it's server related (or not sure). > > Report any issues or improvement requests for the Lemmy software itself here: https://github.com/LemmyNet > ## Known issues > Known issues can be found in the beforementioned post, one of the most annoying ones is the fact that post/reply in a somewhat larger community can take up to 10 seconds. It seems like that's related to the number of subscribers of the community. > > I'll be looking into that one, and hope the devs are too.
Does anyone have recommendations for centralized backup servers that use the server/client model? My backups are relatively simple in that I use rsync to pull everything from remote machines to a single server and then run restic on that server to back them up and also copy that backup to cloud storage. I've been looking at some other software again like Bacula/Bareos/UrBackup and wondering if anyone's currently using one of them or something like it that they like? Ideally I'm looking for a more user-friendly polished interface for managing backups across multiple servers and desktops/laptops. I'm testing Bareos now, but it'll probably not work out since the web ui doesn't allow adding new jobs/volumes/etc.
One of the things I don't really want to self host is a mail server, especially for outbound mail. Currently I'm using a Gmail account, but I want to change that. What do you all use for things like notifications sent through smtp? I'm leaning towards AWS SES since it's cheap, but I know there are some other options like mailgun and sendgrid.
I've been looking for something to replace Trello, mostly for personal use between me and my partner. We both have our own boards as well as a couple shared ones we use for planning trips/etc. Does anyone have any recommendations for a kanban/trello-like software? I've been using Obsidian w/ the obsidian-kanban plugin lately and it is _alright_, but obviously not as easy to share between two people and more limited compared to some of the features trello has. Two options I'm trying out now: - Planka - seems like it might be alright, but haven't used it enough yet. Trello import option is one-board-at-a-time. - Vikunja - extremely slow for some reason and the auto-save feature kept causing me to lose what I typed