Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

johntash

@johntash@eviltoast.org

This profile is from a federated server and may be incomplete. Browse more on the original instance.

johntash ,

Uptime Kuma is great for simple up/down and web checks.
Librenms is worth looking at too for other metrics.

johntash ,

Self cleaning? Is it something you made or what's the name is it? I'd be interested in details either way

I really want a fancier water fountain for my cats but never found a self cleaning one :(

johntash ,

The only time rsync is really slow is when your dealing with millions of small files since it only transfers a single file at a time.

rclone is better in that respect since it transfers multiple files in parallel. I don't think the speed of a single transfer is going to differ much.

johntash ,

If you're wanting something that keeps historical data, vnstat is another good one for network usage

johntash ,

One problem is the lack of alternative transport options.
In most of the US, public transport just isn't a thing. And things are too far apart for cycling to be efficient for commutes, grocery shopping, etc.

I hope that changes some day though.

johntash ,

Dumb question but what do you mean you cycled them a few times?

johntash ,

Nothing wrong with that, Caddy is great!

johntash ,

Thanks for linking it, that's a pretty cool idea.

johntash ,

OpenBao is the open source fork of Vault

johntash ,

Any idea if there's a fork of Nomad and Consul?

Thinking of building a database of "stuff" that I have at home + some other family households. Multiple accounts with private and shared inventories.

The use case is basically so that all my family members we can check that "John has an old laptop collecting dust" or "Mary has this specific tool that I'd love to use for my current project"....

johntash ,

Any idea how Homebox compares to Grocy? I want to try both, but gave up on trying to use snipe-it a while back because of the effort needed to input everything. Both of these look simpler though

johntash ,

From your list, I'd go with hetzner. Racknerd is another good cheap option.

Also check out lowendtalk or lowendbox. Various providers post deals there petty often and the community is active.

what will be my next server operating system (Fedora Server, Fedora CoreOS, NixOS), your experience and opinion

I want to reset my server soon and I'm toying with the idea of using a different operating system. I am currently using Ubuntu Server LTS. However, I have been toying with the idea of using Fedora Server (I use Fedora on my laptop and made good experiences with it) or even Fedora CoreOS. I also recently installed NixOS on my...

johntash ,

Do you have any reasons for wanting to switch your server OS, or is it more to learn something new? Either way is fine, but it might change what is more interesting to you.

I used centos forever, but only recently started slowly migrating everything to NixOS. I use NixOS for the OS and a few common things like VPN, monitoring, etc. For all of my actual services, I deploy them using Hashicorp Nomad with docker.

I'm not sure i would recommend defining docker containers using NixOS. It'd be fine for a couple servers, but not great for a cluster where services can move around.

Is rsync.net a good service for backups?

I've been playing around with the self hosted apps for quite a while and I got to the point where I'm happy about my local setup. Next step is to setup reliable offsite backup. I'm using borgbackup as a tool to manage my backups (so far only local backups). I've been looking for an affordable yet reliable service to store my...

johntash ,

I like rsync.net. They offer reduced pricing for using restic/borg too.

I'm not sure how many years I've used them, but I never had any issues. The speeds also seem better than at least b2.

johntash ,

Restic and rsync.net. look around and there should be a discount usually.

Kopia is also pretty good and has a web interface if that's helpful for you.

johntash ,

Not built in, but maybe a tool like windmill, nodered, or n8n? I think they all support imap and can run on a timer

johntash OP ,

Thanks, kanidm looks promising. I'll try it out this weekend

johntash OP ,

Hmm I thought authelia could only act as an oidc provider, I didn't think it could allow logging in through a Google account for example?

I'll take a look at the docs again, thanks!

johntash OP ,

That doesn't sound too bad, thanks for the instructions. I'll probably give keycloak another try too.

Do you know what kind of cpu memory usage it has? I saw the newer versions are supposed to be lighter, but haven't tested it yet.

johntash OP ,

As long as it's a web app, it's usually fine and can provide an extra layer of security. The app does need to have some support for sso if you want it to be seamless though, without logging in twice.

Most of my services are internal only, but sometimes I want to give access to someone on the internet without also giving them VPN access. If the app doesn't support any kind of login, having an Auth proxy in front of it really helps for that use case.

Remembering lots of passwords isn't a big deal if you have a password manager, but not having to log in to each app separately is nice. It's also nice to be able to put Auth in front of things that don't support it natively.

johntash OP ,

Do you have any issues with Authentik being slow? It might be my environment since I haven't done much troubleshooting yet.

johntash OP ,

Thanks, I'll take a look! It might be helpful even if I use a different idp

johntash OP ,

Canaille looks pretty interesting and simple too, thanks for the link!

johntash OP ,

Once I'm authenticated, it's actually pretty okay. It goes through the redirections fast enough that I wouldn't notice usually. But the login pages would take several seconds to load for me, and navigating around the admin ui also seemed to take several seconds for each page change.
So not extremely slow, but slow enough to notice and get annoyed by it. Admittedly I probably could increase the session duration or something to help with that too.

johntash OP ,

cloudflare access + cloudflare tunnels is a cool solution, and was easy to set up in the past, but I'd rather stick to something completely self-hosted. I'd probably use it for something completely public, but not things that route into my homelab.

johntash OP ,

Thanks for confirming, I just saw that as well.

I'm going to try some of the other solutions in this thread, but I might still come back to authelia and just ignore my requirement for having social login. I like the idea of sending someone a link and saying "Hey just log in with your google account" instead of having to create an actual user for them, but maybe I can use something else specifically for those cases.

johntash OP ,

Did you move to Keycloak, or something else?

johntash OP ,

Do you have a link for padlock by any chance?

I'm not sure if this is it, but I found a password manager named padloc: https://github.com/padloc/padloc

johntash OP ,

You can change the logon flow to make the username and password on the same page
There is a comparability button as well on the login flow that allows bitwarden and other to auto fill correctly.

Thanks for the tips, I found the compatibility button and will try it out. I'm not sure I see how to change the username/password to be on the same page though. Do you have to create a whole new login flow?

johntash OP ,

That's essentially what I am doing. Everything is on the LAN by default. I have two instances of Traefik. One that runs only on internal VPN ips, and another on remote servers using public ips. So I can choose which services are accessible over lan/vpn or public (routed through a vpn to lan).

That doesn't solve the authentication problem if I want to expose something to the internet though, or even sso inside the lan.

johntash OP ,

Thanks! I managed to get user/pass on the same page and it works great with the compatibility mode

johntash OP ,

Thanks for the recommendation, I'll take a look at some of his videos. I managed to get the un/pw on one page, but haven't done much with webauthn/passwordless stuff yet so that might be useful too.

johntash ,

Lots of people do have telemetry disabled. Kinda disappointing to see it being used as a reason for removing functionality without research first

johntash ,

Make sure you read up on latency requirements for k8s too. It's definitely doable but etcd for example needs really low latency between nodes to not cause issues by default.

If you only have one master like you described, it'd probably be fine.

johntash ,

Another +1 for silverbullet from me too. I was skeptical about only having a PWA for mobile access, but it actually works really well.

It's open source, so somewhat more customizable than obsidian since you can see the inner workings of it. There aren't too many active community plugins yet, but there is a relatively new concept of 'Space Scripts' where you can write simple functions/commands directly in a note (markdown file) to extend silverbullet without even needing to write a real plugin. That's been an amazing addition for me.

johntash ,

I already replied to a different thread, but figured I'd comment on some of the other options too. My vote is for Silverbullet, but I've tried way too many note taking tools.

  • Joplin: I ran into multiple syncing issues that caused data loss and large numbers of conflicted files. I'm pretty sure these were all fixed a long time ago, but it was annoying. The dev was always good about fixing issues when they came up. It takes forever to sync on my devices and only syncs while the app is open with the screen on. The format it exports markdown files in isn't standard, so I had to write my own scripts to export from joplin to markdown and preserve metadata.
  • Standard Notes: I was willing to pay for this, but it's extremely slow. Their support said it's because it loads everything into memory, which I'd expect to be terrible on mobile with large databases. It's also pretty limited in what you can do on the free self-hosted version.
  • Obsidian: I really like obsidian's ui/ux, and my only complaint is that it's not OSS. I'd even be happy if they offered a self-hosted sync solution. There are some third party solutions for syncing, but they aren't as smooth as the paid sync.
  • Trillium: I love Trillium. I would vote for it, but it recently entered into maintenance mode. The community is working to start a new fork and I'm sure it will be great, but it's too new to know where things will go yet. Trilium lets you encrypt specific notes and also has a cool plugin system where the plugin scripts are just notes in the database. It does have a mobile interface, but it's a bit limited compared to the desktop interface and also doesn't have an option to sync notes to use offline.
  • Silverbullet: My current choice. I use it between windows, macos, and an android phone. I leave all three clients on sync mode all the time. The interface is minimalistic, but offers everything I need for notes and documentation so far. One of the rare "markdown" tools that actually save your content to markdown files and not to a database with the ability to export to markdown. It also has a cool feature built in where it indexes all of your notes/tasks/paragraphs and lets you build queries around them sort of like the dataview plugin for obsidian.
  • Emacs: I haven't seen emacs mentioned yet, but emacs+org-mode is still great. The mobile apps just don't live up to the desktop experience, and you'd still have to figure out how to sync your notes yourself. Logseq's outliner format is a similar feel afaict
johntash ,

Ollama and localai can both be run on a server with no gpu. You'd need to point a different web ui to them if you want though

johntash ,

Storage is hard to do right :(

If you can get away with it, use a separate NAS that exposes NFS to your other machines. Iscsi with a csi might be an option too.

For databases, it's usually better to not put their data on shared storage and instead use the databases built in replication (and take backups!).

But if you want to go down the rabbit hole, check out ceph, glusterfs, moosefs, seaweedfs, juicefs, and garagehq.

Most shared file systems aren't fully posix compliant so things like file locking may not work. This affects databases and sqlite a lot. Glusterfs and moosefs seen to behave the best imo with sqlite db files. Seaweedfs should as well, but I'm still working on testing it.

johntash ,

+1 for Nomad. Ive used k8s a lot and still use it, but i prefer Nomad for home purposes. You dont even need a consul cluster to run it anymore so it's pretty simple to start.

johntash ,

UptimeKuma is great, I use it for the simple "are my services up?" and is what I pay most attention to.

I still use zabbix for finer grained monitors though like checking raid status, smartctl, disk space, temperatures, etc.

I've been trying out librenms with more custom snmp checks too and am considering going that route instead of zabbix in the future

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • incremental_games
  • meta
  • All magazines
    •