Salta al contenuto principale




VoidAuth Release v1.5.0 - Multi-Factor Authentication 🔒


VoidAuth is Single Sign-On for Your Self-Hosted Universe! 🐈‍⬛🔒

This release includes Multi-Factor Authentication (MFA) Support through TOTP Authenticators! There are other features in this release, like a migration from pug to ejs for email notification templates and quality of life improvements like a built-in container healthcheck, navigation between some admin pages, and reducing the character minimum for usernames to just three letters (sorry ted); but MFA is the big one! Users can enable MFA on their accounts to require an Authenticator or Passkey during sign in, and admins can add MFA requirements to groups, OIDC Clients, and ProxyAuth Domains to require users to setup and use MFA in specific scenarios.

Since the last major release functionality has also been added to migrate your database between SQLite and Postgres, check out the docs! Here is the release notes:

Features 🚀


  • MFA Support Through TOTP Authenticators and Passkeys
  • MFA_REQUIRED Environment Variable and MFA Requirement Option for Groups, Clients, and ProxyAuth Domains
  • Email Templates Migrated to EJS, Defaults Templates Are Now Re-Written on Start
  • Navigation Between Admin Pages for User and Group


Fixes 🔧


  • Change Username and Name Character Requirements (3 Character Minimum)


Chores 🧹


  • Added Dockerfile Healthcheck
  • Update Dependencies


Docs 📖



Screenshots


MFA Adding Authenticator

MFA Page

This release includes the first outside contribution to the project as well as the first sponsor! The VoidAuth repository also blew up a bit over the week, going from ~200 to ~600 stars on GitHub. I have no idea why, but seems pretty cool! Thank you to everyone who engages with VoidAuth in any fashion, you are all greatly appreciated 😊

in reply to notquitenothing

Is there any feature comparison between this and pocket-id? I think they fill a very similar gap, but I'm tempted to try VoidAuth, mainly cause the aesthetic is way cuter imo
in reply to priapus

There is no direct feature comparison between VoidAuth and pocket-id ('comparison is the thief of joy' after all). At least one major difference is that pocket-id does not allow users to sign in with a password since passkey-only accounts are one of their design decisions, and VoidAuth does not support LDAP integration while pocket-id does. My main motivation in creating VoidAuth was to fill gaps in my own user experience while using SSO, previously I ran Authelia+LLDAP (which is still an excellent combo) but found the setup lacking in some common use-cases and devoid of an Admin Interface.

I am glad you like the interface and logo, it is inspired by my own black cat who right at this very moment is yelling for pets 😹



Exclusive: ICC shuns US demands to drop Israel war crimes probe and amend treaty


The oversight body of the International Criminal Court (ICC) has shunned US demands for the court to drop its investigation into Israeli war crimes and to amend its founding treaty to prevent the prosecution of nationals from countries that do not recognise the court’s jurisdiction, Middle East Eye can reveal.

In a statement issued on Wednesday after its annual meeting in The Hague earlier this week, the Assembly of States Parties (ASP) vowed to uphold the integrity of the Rome Statute and said it was “gravely concerned” by threats and coercive measures targeting the court.

Diplomats speaking on the sidelines of the event told MEE that the Trump administration had tried to exert further pressure on the ICC in the leadup to the ASP meeting by calling on the court to drop its investigations into war crimes in Palestine and Afghanistan as a condition for lifting sanctions.

The US also called on member states to amend the Rome Statute to prohibit prosecutions of citizens of non-signatory states, a move that would have effectively granted immunity to American and Israeli nationals. An amendment of that nature would also end the Ukraine investigation into alleged war crimes by Russia, a non-member of the ICC.



U.S. military detains civilian, raising Okinawa police concerns


in reply to Sahwa

My father told me, back when there was a US base two villages over, that whenever MPs showed up in local bars to drag misbehaving soldiers home, it was best to throw yourself to the ground. They weren't coming to mess around.


NATO Is Preparing to Confront Russia With Limited US Support


The worst-case scenario is now a possible one: European troops fighting off an invasion largely alone.

It’s by no means clear the Europeans would succeed. Romanian and other European officials at the exercise in Cincu, about 260 kilometers (162 miles) north of Bucharest by road, voiced concerns about how long it would take for NATO allies to make it to the front.

French four-star General Philippe de Montenon said he’s confident Europe could prevail, even without the US on side. “The direction of history is a progressive disengagement of the United States from the European continent,” he said.

archive

Questa voce è stata modificata (2 settimane fa)
in reply to Riddick3001

USA has never been happy about coming to Europe's defence. But they eventually have plenty of times.

I mean, before Pearl Harbor, 88% of americans were opposed to joining the war. After Pearl Harbor, 97% supported joining the war. If Japan had kept it in their pants, so to speak, a lot of things might've been very different.

If Russia decides to go from Temu Nazis into actual Nazis and attack the rest of Europe, USA is going to be part of it at some point. I'm hoping on our side.

Questa voce è stata modificata (1 settimana fa)

in reply to FranklyIGiveADarn

illegal drinking establishments, where mass shootings are common?

police shut down 12,000 such premises outlets between April and September this year


Why is licensing bars so difficult, and why is there such "anger" over them? Sounds almost like 1930s US prohibition, where organized crime (police???) are intimidating for protection?

in reply to humanspiral

One of the very few businesses excluded from the municipal licence exemption.

Cannot start a watering hole without the municipality's blessings (some money needs to grease the wheels).

But basically led to a lot of underground drinking spots. They were a godsend during COVID lockdowns, any sale of alcohol was prohibited, there was some guy that was killed by the military when they found him drinking a beer in his own yard (which technically was legal).

But yeah some stupid alcohol rules here in SA, not all for example drinking and driving, but most



Fucked up with no one to blame but myself.


I spun up nextcloud to replace onedrive about a year ago. Everything was going well so I chose not to renew my onedrive subscription, this was exactly 6 months ago, I'd assume.

I got an email a few days ago reminding me that they would delete my data. I ignored it because obviously I had moved my data to nextcloud. not gonna trick me Mi¢ro$oft.

But yesterday I decided to have a quick look though and it turns out I didn't copy over everything, and certanly not my 5 years of camera roll backups.

I started a sync of everything last night and woke up in the morning to find that it had stopped at about 10gb out of 80gb. And now onedrive won't connect and if I try to log in to onedrive with that account via the web it just kicks me back to the microsoft portal.

I'm 99.5% sure there is nothing to be done and I'm not an overly sentimental person so if they are lost it won't break me. I have many important photos backed up in immich but just not everything.

But I just needed to ask in case someone knows where to find the M spot I can touch for magic file recovery.

Edit: turns out you can just pay them more money and they still had my stuff. thank you for joining me on the shortest support ticket of all time

Questa voce è stata modificata (2 settimane fa)
in reply to tuff_wizard

I cancelled my Dropbox subscription like over 5 years ago, with about 1TB of data in there. They're still sending me emails saying they're going to delete my data but they haven't yet lol. I'm not using it but it's funny to see they still have it all.
Questa voce è stata modificata (2 settimane fa)
in reply to Die4Ever

Yeah, your data is taken hostage. When cancelling the subscription it’s a good idea to delete everything manually before the account expires. Even if you can’t guarantee Dropbox haven’t just flagged the files as deleted, it signals intention. I did this when migrating to pCloud and haven’t received any reminders from Dropbox.


No backup plan for Milan Olympic ice hockey arena as construction goes down to the wire


MILAN (AP) — There is no backup stadium if the main ice hockey arena for the Milan Cortina Winter Games is not ready on time.

Construction on the arena that is set to welcome NHL players back to the Olympics for the first time in more than a decade is behind schedule and its completion is going right down to the wire.

A test event at the Santagiulia Ice Hockey Arena — the new, 16,000-seat venue on the outskirts of Milan — had to be moved, and new test events aren’t scheduled until Jan. 9-11.

https://apnews.com/article/milan-cortina-olympics-hockey-arena-bb158ccdaadf24daea1c3ae73250264f

in reply to FlashMobOfOne

I saw this headline and my thinking is: "Good".

It's always felt really, really stupid that part of landing the Olympics is the promise of building new arenas and stadiums, and those arenas and stadiums seem to sit unused afterward. Just a huge waste when so many countries and cities already have facilities for professional sports.

Questa voce è stata modificata (2 settimane fa)
in reply to FlashMobOfOne

Most cites have accounted for that now and use the facilities for decades to come. Not always true but a hockey arena will be easy to keep relevant.
in reply to runner_g

Yeah, the smaller arenas for basketball/hockey tend to be better for repurposing, but I wish the people who run the Olympics would just ditch the new stadium/arena bullshit entirely. In most cities it's just unnecessary.
in reply to FlashMobOfOne

I thought for a long time that there should be 4 sites for the Olympics, two for summer and two for winter. The Olympic committee maintains them with help from the host county and donations or dues from the participants counties.

Pick 4 suitable sites in as stable countries as you can find, and build world class facilities there. This whole building all new facilities every time is fucking stupid and wasteful. Besides it's been shown that the "revenue generated" doesn't make up for the costs to build, run, and clean up after all of it.






Sudo Clean Up My Workbench




Swiss voters reject mandatory national service for women and new inheritance tax


Swiss voters on Sunday decisively rejected a call to require women to do national service in the military, civil protection teams or other forms, as all men must do already.

Official results. with counting still ongoing in some areas after a referendum, showed that more than half of Switzerland’s cantons, or states, had rejected the “citizen service initiative” by wide margins. That meant it was defeated, because proposals need a majority of both voters and cantons to pass.

Voters also heavily rejected a separate proposal to impose a new national tax on individual donations or inheritances of more than 50 million francs ($62 million), with the revenues to be used to fight the impact of climate change and help Switzerland meet its ambitions to have net-zero greenhouse gas emissions by 2050.

https://apnews.com/article/switzerland-national-service-44e23e7d0579058f2bc69dd9ce7e655d

in reply to MicroWave

ITT: people judging the vote and the voters by the magnanimous title alone.

The initiatives were worded and implemented so poorly, that it wouldn't surprise me if the initiants wanted to lose both these votes.

  1. The inheritance tax would have caused mass nationalisations and it had pegged the tax proceeds to go towards climate goals instead of let's say the federal pension fund deficit (AHV-Loch). It would be incorrect to state that the voters don't support an inheritance tax or climate goals based on this vote.
  2. The "service citoyen" proposal would have made some kind of civil or military service mandatory for all, but would have essentially reduced the military to a volunteer force, which would be socially unacceptable. The Swiss have a historically repeatedly confirmed will to keep a citizen's militia as the country's only security force.
in reply to aldhissla

There is no "AHV-Loch", we're doing well in that respect.
I'm against the second initiative too, but your rationalization is wild.


Sumatra residents loot for food and water after deadly floods


Some residents of the flood-hit island of Sumatra resorted to looting, seeking food and water to survive, authorities said Sunday.

The floods, which hit nearly a week ago, have killed 303 people — with the number expected to rise as more bodies are recovered — and displaced thousands. The deluges triggered landslides, damaged roads, cut off parts of the island, and downed communication lines.

The challenging weather conditons and the lack of heavy equipment also hampered rescue efforts. Aid has been slow to reach the hardest-hit city of Sibolga and the district of Central Tapanuli district in North Sumatra.


in reply to Dr. Moose

But now that we have "peace" in Gaza, we can continue shipping weapons with a good conscience


It's all so fucked up. It took 80 years to get that way. How long to unfuck? In theory, we (several countries) just need to stop actively supporting Israel. But there's so much political fuckery in the way, and the more one side of the political spectrum demands this, the more certain others will ride the opposite.

Questa voce è stata modificata (2 settimane fa)


Alaskan tribes sue B.C. gov't over mines in far northwest


A group of tribal nations in Alaska has gone to B.C. Supreme Court demanding their voice be heard on major mining projects in the province’s northwest.

They claim the British Columbia government has failed to consult them on major mining projects proposed for the region — some of which have been identified for fast-tracking by the provincial and federal governments against the backdrop of the trade war with the United States.

"Our main goal is protect the rivers, protect the salmon, protect the culture,” said Guy Archibald, executive director of the Southeast Alaska Indigenous Transboundary Commission (SEITC).

The commission represents 14 tribes, which include members of the Tlingit, Haida and Tsimshian, whose territory extends across both B.C. and Alaska.

in reply to HellsBelle

Isn't Alaska part of the US? Why are they fighting this in a Canadian court?

US citizens in Alaska don't get a say in the affairs of another, sovereign nation like Canada.

in reply to mtpender

The commission represents 14 tribes, which include members of the Tlingit, Haida and Tsimshian, whose territory extends across both B.C. and Alaska.
in reply to Ember James

Seriously, dude didn't even have to click the link before commenting. It was right there in the summary.
in reply to Randomgal

Are they marked on a map? Are they recognized by any other nation (not including by their own)?

If not, then they aren't a nation.

Edit: Just to be clear, Canadian citizens DO have the right to challenge their government. American citizens, however, Don't get a say in the matter. This is between Canada and IT'S citizens, not the citizens of another, entirely separate country.

Questa voce è stata modificata (2 settimane fa)
in reply to mtpender

There are treaties giving certain rights to First Nations/Native American groups that you don’t get from being a US citizen. One of those is the right to freely travel between the US and Canada for hunting and fishing on traditional lands. These are rights Canada recognized when they signed the Jay Treaty in 1794. I don’t know if that’s the exact treaty that would be used in this case, but the relationships between and the legal rights of Native Americans and First Nations aren’t always cut off at the border.


Sanctions haven’t sidelined Russia’s shadow fleet. So Ukraine has turned to drones


Ukraine says it used sea drones to strike two oil tankers that are part of Russia’s sanctioned shadow fleet and were a few dozen kilometres off the coast of Turkey.

The Gambian-flagged ships Kairos and Virat sustained explosions Friday evening after crews told Turkish officials the boats had been struck.

Kairos, which was headed to the Russian port of Novorossiysk, was partially engulfed in flames, and all 25 crew members were evacuated to safety. The crew on board Virat reported it had been hit twice and sustained what appeared to be minor damage. Neither vessel was carrying a shipment of crude at the time.

In a statement, an official with the Security Service of Ukraine (SBU) said the attacks on the two ships were carried out by the SBU and the Ukrainian navy using “sea baby” drones, which can travel long distances and are equipped with reinforced warheads.

in reply to HellsBelle

As long as they are not full of oil, which would cause ecological damage, Ukraine is doing us all a service in 'retiring' these boats. These shadow vessels are catastrophies waiting to happen, as they are below standard, non insured, poorly maintained, and falling apart while transporting crude oil and chemicals. They also turn off their transponders, increasing likelyhood of collisions.

When they spill their oil in your countrys waterways, you will have to pay to clean it up. It's not cheap. To Putin that is an externalized cost for his invasions of neighboring countries.

The only way they stop is if it's not economically sound. That happens when the ships start sinking. It's cheaper to sink all the ships than it is to clean up an oil spill.

Help nature, help your wallet, help Ukraine, sink a shadow tanker.

Questa voce è stata modificata (2 settimane fa)
in reply to RedGreenBlue

Yes, but even an "empty" tanker will still have some level of oil in the tanks, plus the fuel in their tanks, plus whatever else is on board.
in reply to frongt

I was thinking this as well, but it seems to me that the risk of a full tanker ship sinking because of poor maintenance is extreme enough to justify taking them out when they're mostly empty.

It's another tough decision that Ukraine is being forced to make. They have my respect.



Server and infrastructure building for me, a dummy


Apologies for the poor grammar, English IS my first language and so I'm rather flagrant with runons.

I'm really not half as tech literate as half the people on the fediverse, but my noia about the state of online cloud hosting and lack of control over my data has led me far out of my depth.
I'm wanting to set up a LibreCMC router and connect it to some type of home server (made of local office E-Waste) for media storage, email hosting, and fucking Minecraft servers or something.
I promise I've tried my best in searching for the problem but often find myself floundering in 3-letter acronyms, and relations between systems I don't understand (like dockers, or the Jellyfin vs Plex argument.)
I don't need an explanation but maybe some orientation on where I am to look for resources on these topics that assume I'm the 6 celled neurobase I am.

Thank you for your help, or your chastising.

Edit: thank you everyone for your replies! I'll hopefully keep you all updated as I work through learning Linux terminals, and destroying terabytes of data in horribly predictable mistakes : )

Questa voce è stata modificata (2 settimane fa)
in reply to HomelyBodySallowThigh

I think your best bet is to pick one thing that you can get a good guide for and start from there. If you really want to learn its probably better to start with a Debian or arch setup than proxmox, but that's really going to depend on what you really care about learning.

I know it will be an unpopular opinion but you can use perplexity or Claude to help you find useful sources online if you're striking out on your searching. Most of the time I find they do better with more obscure issues, but those should be rare if you're following a guide

Questa voce è stata modificata (2 settimane fa)
in reply to Seefoo

but you can use perplexity or Claude


For things that are not super complicated, Grok is pretty fair but it has it's limitations when you get into complexities. At the very least it gives you something to go on for further reading of a topic you don't necessarily have a firm grip on. I've also found that if you ask a question, finish up with 'explain it for a noob' or 'EILI5'. That seems to get the more accurate, step by step instructions, broken down into bite sized chunks, and doesn't assume you know what to do in between steps.

in reply to irmadlad

I find LLMs make a lot more.mistakes when they try to distill a guide down to steps. Its not a bad summary, but they to get confused sometimes when there are forks in the guide. That said they are really good at finding guides, especially older ones that SEs tend to not place as high
in reply to Seefoo

Using an AI is a great way to get learning materials tailored specifically to you.

But after you've learned from it, before you move on to another topic, you HAVE to verify your understanding against more trustworthy sources that you previously couldn't understand. Ideally with an online course that actually gives you a test.

in reply to HomelyBodySallowThigh

I got started self-hosting using a small Lenovo Thinkcentre and an HP EliteDesk. Both are available to purchase for around 100 dollars on ebay. I have installed Proxmox on both of them. Proxmox is an operating system built on Debian Linux and is used to host containers and virtual machines. It has a great WebGUI to access the server.

Using Proxmox I have set up a Pelican container for game servers hosting, I run my own personal wiki, I have PiHole, Jellyfin, Audiobookshelf and a lot more.

To access your things out of home you can use a VPN to connect to your own network or open ports in your router. I only had to open port 80 and 443 to expose my reverse proxy to the internet and then I use the reverse proxy to route the traffic internally to the correct port and project. I also purchases a domain name and now I can use jellyfin.mydomain.com or wiki.mydomain.com or whatever.mydomain.com to access each project I self-host. It's very convenient!

Trying new projects is super easy and if you want to remove something then just delete the container. No old leftovers will stay on the host system.
There are also community scripts available to make hosting even easier. It will install and configure the containers for you.

community-scripts.github.io/Pr…


in reply to fne8w2ah

Everyone's seen it coming, since it's not their own space program, but one inherited from the USSR, and they haven't even been really interested in properly maintaining it.


SIM binding in India: What it means for WhatsApp, Telegram users and why the government wants it


The Department of Telecommunications has told these apps that within the next 90 days, they must make sure their services work only when the correct SIM card is in the phone. If you remove that SIM, the app should stop working. This is known as SIM binding.
  • Continuous SIM presence:
    Apps must check regularly whether the original SIM card is still inserted in your phone. If not, the app must automatically stop working until you insert the correct SIM again.
  • Web access restrictions:
    If you use WhatsApp Web or similar web versions, the government wants you to get logged out automatically every six hours. To log in again, you will have to scan a QR code with the app. This is to ensure the device and user are genuine.

People who use these apps on secondary devices without a SIM, or those who keep their SIM in one phone but use the app on another, may face interruptions


I don't even see the point of this:
- Surveillance?
- Some Incoming telecom plan change which will require you to have a special plan for using Messengers because no one uses SMS and don't bother to have an SMS plan? so telecom networks can make some more money?

https://www.moneycontrol.com/technology/sim-binding-in-india-what-it-means-for-whatsapp-telegram-users-and-why-the-government-wants-it-article-13702896.html

in reply to sonofearth

What can you really do when your phone number automatically gets blocked when calling and people will automatically assume you are sketchy when they hear your accent.

And I follow tons of Indian academic content, they tend to explain really difficult concept really easily. I even understand their language so theres that.

in reply to sonofearth

Sheer uselessness. It will do as much to reduce fraud as the UK law has done to reduce porn content for non adults. What it will mean is that people with multiple SIM, will need to have an always active plan on that number, something telecoms will really like.

Also, it essentially means the death knell for WhatsApp Web (in India) because as stated in article, who wants to log in every SIX hours.

Questa voce è stata modificata (2 settimane fa)


Guidance for Noob? (Synching vs Nextcloud, Immich, Tailscale)


TL;DR:
Unsure if I should just run Syncthing, or do a Nextcloud. Tailscale seems at risk of enshittification, so do I find alternatives or just use it for ease? Is Immich easy enough to set up without Tailscale? Stick with docker or podman for ease? Are externsl drives easy to work with? Should my RAID1 be NTFS or Ext4?

Starting My Selfhosting Journey
I recently got my drive bay and Optiplex and have already flashed Proxmox onto it so I could eagerly spin up some local services to see what I wanna stick with. Or at least I tried anyway 😅

Jellyfin in a debian container was quick, painless and seems to work fine. But I was trying to set up Nextcloud and I felt lost, with the many different ways people go about it. When I tried to set up Nextcloud AIO in a Debian VM with docker it forces you to set a domain for your instance, but I only want to do local for now (ease and security until I get the hang of things). Which then runs into the hosting a domain via Tailscale problem. 90% of guides, videos, scripts, etc. seem to only focus/support Tailscale, but they force you to use third-party accounts for logins, and I started this whole thing to distance myself from Big Tech. Is Headscale or NetBird a better idea (when I do decide to remotely access)? Who's more beginner friendly? Similarly, docker or podman?

I do know the difference between Syncthing and Nextcloud, but I wonder which I should stick with. I want to start being better about backing up my phone and laptop, and I know I could use syncthing to share these backups with each other, but I thought it'd be nice to try to replace my minimal Google Drive and Onedrive usage with Nextcloud and just put everything there. I'd still have to backup that data to an external location though if I want to follow the 3-2-1. So should I just do encrypted backups and put them in a cheap provider's cloud, and drop the idea of a selfhosted cloud?

Similarly related to the Nextcloud issue, is Immich another heavily Tailscale dependant service?

Side note: How easy is it to use external drives with these services I've mentioned? I plan to use my drive bay that currently has 2TB (4 drives running in RAID1), so I can only connect to it via cable. Can I have most of my media stored on the drives, or will that not work? Also, I swear I had to keep verifying my login every few mins when accessing my drives on ext4 format? I switched it to NTFS recently but Windows can't read/see the drives at all (does it not like Linux formatting it?)

Future Ideas: Once I get these first few down, any suggestions? I'm feeling the power rush and craze from being free and able to run my own stuff, and I want to prove to my mom how useful it'll be. I want to move away from YT Music, and I've heard Jellyfin + Jellyamp works good, but is there another I should run (Navidrome)? Should I get into the arr services and torrenting (I do have ProtonVPN)?

I tried looking at previous posts but I just wanted a little more personalized advice. I'm extremely greatful for any help and I will make sure to post my beautiful setup later once I get it going after y'alls input. It's really exciting thinking about the possibilities!

in reply to Imaginary_Stand4909

Id recommend setting up a domain even if just for local use. No-ip.com is at least working for me right now (i have free throwaway domain set up there and my router is keeping my dynamic ip dns records up to date so i can wireguard into my router/lan even if the ip changes).

You dont need to expose your services but if you ever do want to, it’s so much easier if youve got a working reverse proxy infront already set up plus you can use https via let’s encrypt certifications inside LAN

Setting up (sub)domains in lan forces you to learn to use a reverse proxy like caddy traefik or nginx. Personally to me NPM(nginx proxy manager) was the easiest to use but i use caddy nowadays. For half a year i didnt expose anything but after wanting to share some albums with the extended family i decided to do so via pangolin hardened with crowdsec running on a virtual private server. Pangolin - while not as easy as tailscale is selfhosted and is very well documented and works well. Then internally, i still have my casdy reverse proxy and certs.

All the services work with the same domain names internally (via the routers dns) and externally. Internally the domain simply points to my severs LAN address. Externally the domain points to my VPS where Pangolin relays my internal domains to the users but adds an extra authentication layer/recerseproxy/access control layer infront. For authentication i use Pocket ID. I can reach nextcloud and access and edit all my documents and other files right there in the browser from any computer which is very convinient.

Questa voce è stata modificata (2 settimane fa)
in reply to Imaginary_Stand4909

I also had a lot of difficulty setting up NextCloud. Based on the various reviews and comments, it seems like I may have actually dodged a bullet.

In general, as I've tried different self-hosting solutions, I've found that using a dedicated solution for each purpose has given me better results. I use Radicale for contacts and Calendar, Immich for photos, Jellyfin for media (Navidrome for music is great, but I ended up keeping my music library in Jellyfin because I liked the client apps better).

I'm using OwnCloud for filesync, although I'm also testing CopyParty, which is pretty phenomenal and stupid simple.

Tailscale is GOAT. Some people have speculated that it could be subject to enshitification some day. It's managed by a for-profit company, but everything they do is open source. There are already well-tested forks like HeadScale if you ever have the need to self-host it in the future.

NextCloud seems great if you can get it working and provides a lot of services in one. Some people have said that causes bloat and slowdown, so there are two sides to the coin.

Syncthing is likely not a good option for a file server. It's great if you want to have a shared file or folder on multiple devices, especially if you just want to transfer files quickly and seamlessly. It's fantastic at what it does, but it's not a file server. There are a lot of opportunities for error when using Syncthing.



France’s far-right leader hit by egg, days after flour attack


Jordan Bardella, leader of France’s far-right National Rally party, was hit on the head with an egg Saturday, just days after another incident in which a protester threw flour at him.

Bardella was at an event in Moissac, southwest France, to promote his latest book when a man broke the egg on his head.

The suspected attacker, a 74-year-old man, was arrested and taken into custody for violence against a public official, prosecutor Montauban Bruno Sauvage told AFP.

in reply to MicroWave

I'm appalled at all these people who condone throwing flour and eggs at politicians.
Everyone knows that the egg goes first, because it helps the flour stick.
Questa voce è stata modificata (2 settimane fa)






Looking for a good Lemmy mobile app


I'm not sure if this is the right place to ask, but i'm new to Lemmy and looking for a good client to use it with. I've been using Sync which is what i used to use with Reddit but i've noticed that it isn't getting updates now. Any other good mobile apps I can usr Lemmy with?
in reply to Az_1

I've mostly been using alexandrite.app/ on both PC and mobile. I have Jerboa installed as well as back-up but only occasionally use it.


I highly recommend journalctl-desktop-notification


Maybe it's well known but I just came across journalctl-desktop-notification and I find it very useful so I thought I'd mention it. It's basically a bash script that monitors systemd's journal and pops up a notification when there are warnings or errors (or anything else you want to make it catch besides the default config).

What makes it so useful for the selfhoster is that it can monitor the journal on hosts your user has ssh access to with key authentication (set up in 2s with 'ssh-copy-id').

So case in point, this just popped up:

My reverse proxy can't renew certs, that's bad. For some reason netdata didn't catch it, and the service didn't trigger a system email that would have been forwarded to my smtp. Uptime kuma would have caught it when I would have had only a few days to fix it, but this caught it immediately, and I have 52 days to figure it out.

So you install that on your daily driver and you get these notifications on your desktop. They only have packages for Arch and Gentoo but the thing is just a batch script and a systemd unit. So to install anywhere you just download the "source", extract it, cd to it, and run 'sudo cp -r usr etc /' which is exactly what the Arch package does (line 22).

Just a nifty little tool I wanted to share in case others haven't heard of it.

Edit: I made .deb and .rpm packages so it's a lot easier to install now 😀

Questa voce è stata modificata (1 settimana fa)
in reply to northernlights

Holy shit, this is amazing. Thank you so, so much for sharing this. I had not heard of it, and I am often stymied by journal CTL, since I don't really know how it works. So I will most definitely be using this on my desktop and possibly on my self-hosted stuff as well. Thank you again.


Venezuela calls Trump airspace closure warning 'colonialist threat'


Venezuela has accused Donald Trump of making a "colonialist threat" after he said the airspace around the country should be considered closed.

The country's foreign ministry called Trump's comments "another extravagant, illegal and unjustified aggression against the Venezuelan people".

The US does not legally have the authority to close another country's airspace, but Trump's online post could lead to travel uncertainty and deter airlines from operating there.

in reply to MicroWave

I'm hoping that the chain-of-command is so broken because of the bumblefucks in charge at the top that Venezuela actually gets some good licks in ala Ukraine to Russia.

I know its doubtful, but a man can dream.



As Epstein files release looms, questions abound on what happens next: ‘Possibilities are endless’


People implicated in the late sex offender’s crimes might face criminal charges or, at the very least, social ostracism
People implicated in the late sex offender’s crimes might face criminal charges or, at the very least, social ostracism
in reply to LadyButterfly she/her

They won't release anything of consequence. They will throw a few people under the bus as a sacrifice, but rest assured that any page implicating Trump has been vetted and removed in the interest of "national security".


How to propperly Ansible and selfhost without burning out?


First my specific questions, down below more info:
- how do you use ansible? Is there a good source for roles or playbooks to set up services? I feel like ansible is 30% more headache right now during config.
- how do you deal with motivation loss?
- how do you deal with the overwhelming amount of choices and information and disciplines (networking, storage, VMS, Linux..) that comes with selfhosting?
- how do you find the sweetspot between ease of use, ease of set up, security, redundancy? I feel like I am maybe too pranaoid to loose my data again (dropped a hard drive many years back, I lost all of my projects)
- maybe overall, how do you manage your perfectionism?

Thanks a lot! I hope you have some insights for me.


More info

Soo I have a motivational push to work on my server every few months for a few weeks or months. I always make progress and I feel like I landed on a good solution by now. Its the third time I redid my setup, everytime I got closet to what feels like the perfect setup for me.

I have a vps for headscale, a home server with proxmox for the rest.

Last push I switched from manually configuring and documenting to ansible.
I like ansible, but its also a pain and not as fast to set up my server as just installing it and fiddeling around manually until it works.

My problem is:
I want to do it right, so my server is robut with enough redundancy to move all my cloud stuff to it.
But I am still kind of a noob and still learning and figuring things out.

My fear is, that if i don't document well or not use ansible, I will be hating my life once my server dies and I have to restore my data and also set um my services again in a few years.

So ansible seems like the only valid choice here, together with proxmox to be as flexible and future proof.
But I am burnt out again and lost Motivation even though I am close to my first goals and running services.

Thank you for reading 😀

Questa voce è stata modificata (2 settimane fa)
in reply to WbrJr

Oh my god, thank you for asking this question. There is so much great advice in this thread as a result.
in reply to WbrJr

It's great to give your brain daily workouts on the ins and outs of systems, but if you're feeling burnt out, you're doing that too much, probably, and my guess is, it's coming in at moments when you were trying to solve some other, more interesting/relevant problem.

It comes down to whether you're trying to self-host, or trying to learn Linux at a level where you could get a job doing it. Often it's a bit of both, so don't feel like you need to make that decision right now.

But my advice: whatever you're hosting, use their recommended easy way to host it. In most cases, this means running a container. In most cases, Docker. If you can wrap your head around using docker compose files, your practical problems are reduced by an insane amount, and idiocy at the developer level becomes your only concern. For instance, I used to run Tandoor, but the dev pushed changes into their "stable" docker container that failed to properly migrate my data, and the whole thing cacked. But that wasn't a system problem on my end, it was a case of a dev who was more interested in playing around with data than with providing a stable app.

So, if you take this approach, which I absolutely do recommend, the one thing you need to be sure of is that you have a good backup strategy, and that you backup before you do any pulls of new images. Docker allows you to select old versions so if you don't like changes that get pushed on something, likely you can just rebuild the old version, but the changes might mess with your database migrations, so you need those backups. Other than that, you cannot go wrong with Docker, if you just want the damn thing to work, rather than get daily aggravating lessons in esoteric systems problems which are above your paygrade.



ZaneOps is a great self hosted PaaS alternative to Vercel, Netlify, GitHub Pages


I’ve spent a lot of time recently trying to find a self hosted PaaS to replace my usage of Vercel to host a couple of static websites. I use 11ty and Astro as Static Site Generators and I love the functionality of pushing to a git repo to update my site, and being able to create preview versions using pull requests.

If you haven’t used a PaaS before and are wondering what they’re used for, two of the biggest reasons people use them for are basically as Web GUIs to deploy OCI containers from a marketplace, think similar to the UnRAID App Store, and as hosting environments for code that’s built and deployed directly from the contents of a git repository like static sites or other apps. In my case, I use them to deploy static sites that I either build myself using SSGs, or for example the popular Digital Garden plugin for ObsidianMD.

The defacto leader in this space seems to be Coolify. And while it is fairly robust with a nice feature set, I couldn’t get past the dreadful UI. I’ve never encountered software that goes so far out of its way to hide information from you. It technically has a “dashboard”, but that only consists of a top level list of “Projects” with absolutely zero information about them or their current status Unless you drill down through the options all the way to individual services.

Nixopus appears to have a much more functional UI, but the focus of this one for the time being seems centered around spinning up docker containers of existing services. It has the functionality to deploy your own but that isn’t as fleshed out at this time.

ZaneOps is a little light on extra features, but has the most functional and informational UI of the three. I can see the status of all my deployed services at a glance, and its very lightweight.

Questa voce è stata modificata (2 settimane fa)
in reply to Encrypt-Keeper

I am new to this space, but I think dokploy is another service of this kind: dokploy.com/

Has anyone experience with it?

in reply to julianwgs

You are correct, Dokploy and Coolify are both listed as inspirations for ZaneOps.


‘We had to swim to safety. I didn’t think we would make it out alive’: the people fleeing climate breakdown – in pictures


Photographers Mathias Braschler and Monika Fischer capture the families, farmers and fishers who have been forced to leave their homes by extreme weather – and the landscapes they left behind
Photographers Mathias Braschler and Monika Fischer capture the families, farmers and fishers who have been forced to leave their homes by extreme weather – and the landscapes they left behind


in reply to SaharaMaleikuhm

The only surprise is that the reported estimates of deaths remain so implausibly low. But I guess once you genocide enough people, the survivors can no longer count how much genociding you're doing.
Questa voce è stata modificata (2 settimane fa)



US Progressives Accuse Trump of Interfering in Honduran Elections


The US Congressional Progressive Caucus on Friday accused President Donald Trump of “flagrantly interfering” in Honduras’ upcoming presidential election after Trump announced his endorsement of right-wing candidate Nasry “Tito” Asfura and repeated threats he’s made previously ahead of other electoral contests in which he sought to secure a conservative win.

On the social media platform X, Trump warned that only a victory for former Tegucigalpa Mayor Asfura and the National Party in Sunday’s election will allow Honduras and the US to “fight the Narcocommunists, and bring needed aid to the people” of the Central American country.

in reply to Tony Bark

Why accuse? ... it's a well known fact of Central American history at this point.
in reply to Tony Bark

Thank god he won't be in power for our next elections.

He won't be, right, America? *nervous laughter*

Questa voce è stata modificata (2 settimane fa)
in reply to AngularViscosity

He doesn't matter, per se, it's the entire party and anyone that supports it.

And they aren't going anywhere and 93% of the opposing side has no gusto or passion to truly fight back. They think taking the high road will work. They think voter turnout will work. They think bumper stickers and signs will work.



Announcing Timeship v0.1.0: Self-hosted ZFS snapshot browser for TrueNAS


Hi everyone!

I've recently set up a NAS running TrueNAS Scale and learning about ZFS and associated machinery. ZFS has a pretty cool feature called snapshots, which allow for a kind of version control, but for the whole file system. I set up , which seem to be working great!

To my surprise, there didn't seem to be an easy way to actually browse these snapshots. Yes, you can use "Previous Versions" on Windows, but I'm running Fedora at the moment, so that doesn't help. You can also access .zfs/snapshot/ at the root of the dataset, which is fine if you know exactly which snapshot you want, otherwise it seems a bit clunky. There is also httm, which is a "CLI Time Machine" I've yet to learn more about, but I was looking for something a bit more graphical / browser-based.

Thus, with much hacking and vibing, the proof-of-concept Timeship was born! It has a thousand limitations and compromises for now, so I'm mostly reaching out to see if there is any interest from others on this.

If you use tiered snapshots which happen to be named similar to mine, you can try it out like this:

docker run -p 8080:8080 -v /mnt/tank/your/dataset:/mnt/:ro ghcr.io/smilyorg/timeship

For now, it has a very simple file browser, it detects and shows snapshots via the aforementioned .zfs/snapshot/ directories, allows you to preview the file system and text files at different points in time, and allows you to download a file at any snapshot.

Of course, extending it to support different ways to see the history would be nice, image preview, diffs, downloading archives of multiple files or directories, supporting histories beyond ZFS (e.g. git or borg backups), the list could go on and on. I can't claim I'll have the time to implement any or all of those, but you gotta start somewhere 😀

What do you think? Any ideas & comments very welcome!

Questa voce è stata modificata (2 settimane fa)


Why Hong Kong’s latest fire is so deadly—and not the city’s first


cross-posted from: mander.xyz/post/42719582

Web archive link

At least 128 people have died in one of Hong Kong’s deadliest-ever blazes that broke out Wednesday and devastated a multi-block housing estate.

...

But Hong Kong has been the site of many significant fires in the past, which, like the Wang Fuk Court incident, have had various specific causes, but have also often shared some factors that contributed to their deadliness.
...

Density

Hong Kong ... is one of the most densely populated areas in the world, with 6,900 residents per sq km. Many buildings are built close to each other, especially in Hong Kong Island and neighboring Kowloon, making it easy for fires to spread.

However, the city also owes much of its high population density to the prevalence of subdivided flats—small cut rooms, sometimes resembling animal cages—where residents can cram and reside in for a fraction of the cost of a standard Hong Kong flat.

In April 2024, a fire involving a 60-year-old tenement block in Yau Ma Tei in the Kowloon area left five people dead and dozens injured. In an op-ed at the time about the risks associated with these homes, the South China Morning Post explained that, while a cigarette may have caused the fire, firefighters said subdivided units and “structural alterations” in the building complicated rescue efforts.

Thirteen years earlier, a fire in Mong Kok, also in the Kowloon area, left nine dead, 34 injured, and more than a hundred people homeless. Authorities then pointed out that the danger was exacerbated by the subdivided flats cutting off points of access for the building.

**Economic struggle **

Hong Kong is also among the most expensive places to live globally, and both individuals and businesses in the Chinese enclave often seek cost-cutting shortcuts that, in the case of fires, have proven immensely costly in the end.

Subdivided flats are a response to an expensive housing market, and many residents have foregone safety requirements for the sake of having a place to live.

Fireproofing is also expensive. In the 2024 Yau Ma Tei fire, the building’s owners reportedly encountered difficulties in raising funds to comply with fire safety guidelines, with a district councillor noting that “the increasingly high cost of upgrading fire prevention facilities and equipment, especially in the bidding process, had not helped,” according to SCMP.

Bamboo scaffolding, which has been linked to the latest conflagration’s devastation, is also known as a cheap alternative for construction businesses despite the city’s Development Bureau pushing to “drive a wider adoption of metal scaffolds in public building works progressively,” with a bureau official citing bamboo’s “intrinsic weaknesses such as variation in mechanical properties, deterioration over time and high combustibility, etc, giving rise to safety concerns.”

...

Lax enforcement

Politicians in the city have flagged that many of the city’s buildings are rapidly aging and in need of better fireproofing.

But previous fires have shown that compliance with government orders has been poor. In the 2024 Yau Ma Tei fire, the city’s Buildings Department already issued fire safety orders to the owners of the block in question in 2008—including calling for them to replace fire doors and outfit the building with more fire-resistant material. But SCMP reported that despite the department’s follow-up, the order had not been followed ...

Latest government data show that more than 8,600 fire hazard abatement notices have been issued in Hong Kong as of January, following inspections of old, high-risk buildings. More than 300 of these notices involved prosecutions or convictions.

...

in reply to Sepia

I'm so frustrated that this article, and many other sources - including news programs, are not talking about the lack of alarms in the buildings. I agree that the materials and density were terrible and created a catastrophic situation for the structures, but the lack of alarms to alert residents is absolutely ridiculous and is what made this such a huge tragedy for the people who died.

If the buildings' alarms aren't working, then they should be on "fire watch" with 24/7 personnel ready to alert people on every floor where the alarm isn't working. Does that cost too much? Then fix the fucking alarms as a top priority. This is especially true when there are no automatic sprinklers, which sounds like is often the case in Hong Kong.

There are reports that people were getting calls from their friends and relatives and that's how they learned about the fire. People were waking up to the smell of smoke without an alarm going off. WTF. That's so far beyond acceptable, I don't know what else to say.

I travel a lot and I always bring my own smoke and CO detector with me. This is an example of why.

in reply to JohnnyCanuck

There are reports from the residents saying that the renovation workers intentionally disabled the alarms, to make their work a little easier.
in reply to JohnnyCanuck

Just read a [BBC article]https://www.bbc.com/news/articles/cn8e5j20g27o():

... Several residents have revealed in interviews that the fire alarm did not sound when the fire broke out. Authorities said on Friday that they had checked the fire alarms in all eight blocks and found that they were not working properly ...


Reminder, you can subscribe/comment/like Peertube channels from PieFed


::: spoiler Here are a few choice picks to get you started

Movie Trailers:

!digital_digest_trailers@trailers.ddigest.com

Brodie Robertson (General Linux):

!brodie_robertson@tube.archworks.co

Coffeezilla (scam investigations):

!coffeezilla@peertube.gravitywell.xyz

Voidzilla (same creator as coffeezilla but more, shorter videos:

!voidzilla@peertube.gravitywell.xyz

ctrl-alt-rees (general tech and gaming):

!ctrlaltrees@makertube.net

Fedicon (fediverse convention):

!fedicon_videos@spectra.video

Fireside Fedi (Fediverse Podcast):

!show@video.firesidefedi.live

Dot Social (another Fedi podcast from Flipboard):

!dot_social@flipboard.video

Gardiner Bryant (Linux/Gaming):

!gardiner_bryant@subscribeto.me

Louis Rossmann (how you're getting fucked today):

!rossmanngroup@peertube.gravitywell.xyz

Niccolo Ve (KDE dev):

!niccolo_ve@tube.kockatoo.org

Oh the Urbanity (urban development and transit):

!urbanism@video.canadiancivil.com

Privacy Guides (Discussions and privacy news):

!privacyguides@neat.tube

Shifter (Cycling):

!shifter_cycling@video.canadiancivil.com

Techlore (Privacy Discussion):

!techlore@techlore.tv

Technology Connections (exploring functionality of home appliances):

!technologyconnections_mirror@peertube.gravitywell.xyz

The Linux Experiment (Linux news and discussion):

!thelinuxexperiment_channel@tilvids.com

Transport Evolved (Electric vehicle news and discussion):

!transport_evolved_main@peertube.tv

:::

Leave your favorites in the comments.