[-] AnApexBread@alien.top 3 points 10 months ago

disabling password login and use pubkey authentication will be safe enough?

Just make sure you actually disable password login. Simply enabling key doesn't disable password. So as long as the password is disabled then you're fine.

[-] AnApexBread@alien.top 2 points 10 months ago

There’s more than a decade worth of banking, spending, and investment information in there.

That's the real reason I would self host something like a budget app. I don't want a company like Mint to have (and sell) my purchasing and financial history.

[-] AnApexBread@alien.top 3 points 10 months ago

"self hosted budget management app". Can't you just install this type of app to your phone or pc? What's the purpose here, will you host it and access it from a browser? Or do you only want to backup its data to your server?

I don't want some third party having access to all of my transaction history and knowing what I spend and where.

I hope I don't sound stupid please enlighten me.

Your question isn't stupid. There is an important decision you need to make on "is the juice worth the squeeze." While you can selfhost a lot of stuff sometimes there's better reasons not to. Email is primary example that gets brought up a lot. Sure you CAN self host it, but for a lot of people on this sub it's not worth the effort required to do so.

Each person has to make that decision for each of the things they choose to self host. Budget apps are no different.

1
submitted 10 months ago by AnApexBread@alien.top to c/main@selfhosted.forum

I'm trying to figure out how to configure Immich in the optimal way.

I have a Synology RS812 with 512MB of RAM so not enough to run Docker and Immich, but it has 10.7TBs of storage in SHR1.

I also have a VM farm with 256GBs of RAM and 3TB of usable storage with no RAID.

My initial thought was to host Immich on my VM farm (obviously) and store all the photos on the Synology. Then load the photos as an external library from the Synology. This works, but it means I need to set up an automatic upload to the Synology directory.

The second idea is to give Immich the 3TB on VM Farm, have it store photos locally, and then using Rsync to copy photos over to the Synology automatically. The concern here is if Rsync fails I might not notice for a while which runs the risk of data loss.

How would you configure this?

[-] AnApexBread@alien.top 1 points 10 months ago

Have you tried using a USB drive bay station with proxmox before?

I'm debating getting a 5 bay station, plugging it into my proxmox and passing the USB through to an OMV VM but I'm not sure if that will work.

[-] AnApexBread@alien.top 1 points 11 months ago

It all comes down to "what are you trying to do."

Not everyone runs applications, so docker is not the answer to everything.

But if you only have 8Gb of RAM and are trying to run VMs then I'd advise you to go buy more RAM.

[-] AnApexBread@alien.top 1 points 11 months ago

My wife and I each take a lot of random photos and screenshots and things we don't want to share with each other (and we probably don't want to be bothered with each other's random stuff), so we don't want to just do something like turn on Partner Sharing on Google Photos.

You can specify what gets shared with partner sharing. My wife and I have partner sharing set up so that it automatically shares photos of our kids with each other but not anything else.

[-] AnApexBread@alien.top 1 points 11 months ago

AdGuardHome

[-] AnApexBread@alien.top 1 points 11 months ago

Cloudflare tunnels being unsafe for exposing your locally hosted services to the web

That's the pout of Cloudflare Tunnels. It's a reverse proxy.

Cloudflare Auth (zero trust) can lock down the tunnel so only certain people can access it.

I want to clarify something though. Cloudflare Tunnels IS SAFE. But if you choose to use it in a not safe way that's not the fault of the tunnel.

It's like putting on a bicycle helmet and then running on the freeway and wondering why your leg gets broken after getting hit by a car.

"but I was wearing my helmet" great, but that wasn't the point of the helmet.

[-] AnApexBread@alien.top 1 points 11 months ago

RAM doesn't need to be divisible by 4. You can mix and match sizes of RAM it's just not advisable.

[-] AnApexBread@alien.top 1 points 11 months ago

Jdownloader

[-] AnApexBread@alien.top 1 points 11 months ago

Why not just use the Cloudflare Tunnels command line binary?

It can automatically create the CNAMEs

[-] AnApexBread@alien.top 1 points 11 months ago

Oh yeah, got rid of the damn thing within 30 minutes of registering but it was too late. I assume bots grab that info as soon as it's posted.

Probably got pushed to the larger system.

There's more than one entity that controls WHOIS information. Typically as soon as WHOIS information gets published it gets copied into a bunch of different registries so you have to contact them all and have them remove the information

view more: next ›

AnApexBread

joined 11 months ago