[Mostly resolved] Mounting NAS in linux by Nitrousoxide in c/linux@lemmy.ml

[-] Nitrousoxide@beehaw.org 1 points 1 year ago

The requirement of managing an LDAP or AD directory service just to get some auth for NFS is a dealbreaker for like 99% of people. It's such a dumb protocol for the average user and was designed with only huge corporate clients in mind.

Just give people a simple password auth or let them exchange private/public keys between the devices that need to connect!

Remote Community out of Sync with Beehaw federation of it by Nitrousoxide in c/support@beehaw.org

[-] Nitrousoxide@beehaw.org 1 points 1 year ago

Ah, I see, well thank you.

0

Remote Community out of Sync with Beehaw federation of it (beehaw.org)

submitted 1 year ago by Nitrousoxide@beehaw.org to c/support@beehaw.org

3 comments fedilink

There are some communites I'm seeing in which the Beehaw page hasn't been updated for a couple of weeks while the actual community page on their own home has activity recently. Example: https://beehaw.org/c/selfhosted@lemmy.world/data_type/Post/sort/Active/page/1 https://lemmy.world/c/selfhosted

Our page shows the last activity 18 days ago but if you jump over there it shows a new topic only an hour ago. I don't believe they have been defederated or anything since we can still browse it at all. Any idea what's going on here?

[UserScript] Lemmy Universal Link Switcher rewrites all links to Lemmy instances everywhere to your home instance! Now rewrites post/comment links! 1.2.0 Release! by Nitrousoxide in c/technology@beehaw.org

[-] Nitrousoxide@beehaw.org 3 points 1 year ago

Why are you trying to maintain an instance list? Just ask the user to input their instance URL. It will simplify the code and make it extensible to self-hosted instances and you don't have to try to list every lemmy instance in existance.

Brave aims to curb practice of websites that port scan visitors by Nitrousoxide in c/privacyguides@lemmy.one

[-] Nitrousoxide@beehaw.org 7 points 1 year ago

I cannot fathom what a respectable website would need with a port scan. They should normally just be listening to/broadcasting on 80/443. Is it looking to see if the normal html ports are remapped? That's the only reason I could imagine.

Fediverse Bookmarklets by Nitrousoxide in c/technology@beehaw.org

[-] Nitrousoxide@beehaw.org 3 points 1 year ago

It's a script that you put in place of the raw url of a bookmark in your browser. For these ones here you'd make a new bookmark and past in the script there (adjusting the fediverse url for your home community so it can correctly redirect you) and it runs some (usually) javascript that manipulates the page your on in a way to direct you to the asked for location.

Its a much more lightweight way to do a single thing if that's all you're needing and since you can see the code you can also be sure, unlike a chrome plugin, that it's not doing other weird stuff.

14

Fediverse Bookmarklets (beehaw.org)

submitted 1 year ago by Nitrousoxide@beehaw.org to c/technology@beehaw.org

2 comments fedilink

Does anyone have any recommended bookmarklets that make using Fediverse services easier? I don’t really want to install a billion plugins for chrome to make them useable, so bookmarklets in a folder is preferable to me. If anyone has any ones they use that would be helpful.

I do have a few I personally use:

Share to Mastodon

https://github.com/corbindavenport/share-to-mastodon/blob/main/BOOKMARKLET.md

Redirect to Follow Mastodon Account

https://github.com/bramus/mastodon-profile-redirect/tree/main/bookmarklet

Redirect to follow Lemmy Community

https://gist.github.com/Nitrousoxide/0ad922d431749d6e4f7c9a35d40da4dc

Cities: Skylines II Feature Highlight #2: Traffic AI - Paradox Interactive by Nitrousoxide in c/gaming@beehaw.org

[-] Nitrousoxide@beehaw.org 14 points 1 year ago

Finally, I can create a true American city filled with parking garages everywhere and a desolate downtown filled with office towers that sits vacant in the evening and weekends.

I've really liked using onenote, but would like a FOSS alternative if there is one that replicates the experience. I don't need any syncing abilities, since I prefer to store locally. by Nitrousoxide in c/privacyguides@lemmy.one

[-] Nitrousoxide@beehaw.org 3 points 1 year ago

Yeah you can copy and paste images into a note just fine.

NIX OS: the BEST package manager on the MOST SOLID Linux distribution by Nitrousoxide in c/technology@beehaw.org

[-] Nitrousoxide@beehaw.org 5 points 1 year ago

I find Nix to be a really esoteric platform that completely inscrutable to a regular user. The people who do use it are extremely hostile to any tools that simplify the experience for the end user like Fleek. I would not recommend it for ANY regular user in any way, shape, or form.

I've really liked using onenote, but would like a FOSS alternative if there is one that replicates the experience. I don't need any syncing abilities, since I prefer to store locally. by Nitrousoxide in c/privacyguides@lemmy.one

[-] Nitrousoxide@beehaw.org 12 points 1 year ago

Joplin is great. It can't do the handwritten notes like onenote as far as I know, but otherwise I think it's got pretty good feature parity. You can sync it using an existing nextcloud, WebDAV, or even onedrive or dropbox if you don't want to deal with the hassle of self-hosting at all.

7

Ansible, become: yes, and granting access to specific sudo commands without a password (beehaw.org)

submitted 1 year ago by Nitrousoxide@beehaw.org to c/selfhosted@lemmy.world

2 comments fedilink

Is there a good way to use the "become: yes" for the needed escalation to sudo for a handful of commands which need it while limiting the user's access to passwordless root? I've added this line to /etc/sudoers.d/$USER

(username) ALL=(ALL:ALL) NOPASSWD: /usr/sbin/omv-upgrade, /usr/sbin/reboot

Which should allow my user to use the omv-upgrade script (which does some apt stuff) without a password prompt for sudo. This allows it to perform the needed apt commands for an upgrade without actually giving full apt access to install whatever. Likewise with reboot, though I'm not sure which command ansible will actually try with these:

    - name: Check if a reboot is required.
      ansible.builtin.stat:
        path: /var/run/reboot-required
        get_md5: no
      register: reboot_required_file

    - name: Reboot the server (if required).
      ansible.builtin.reboot:
      when: reboot_required_file.stat.exists == true

I presume it's that reboot, but maybe it'll try the systemctl one instead. Is there a better method to give the user the needed passwordless sudo actions without the security risk of opening everything up to that user (which I don't want to do at all)

What does your infrastructure look like? by Nitrousoxide in c/selfhosted@lemmy.world

[-] Nitrousoxide@beehaw.org 3 points 1 year ago* (last edited 1 year ago)

I run everything on local hardware. 1 Synology NAS, one old desktop (Ryzen 5 5600X) which has been repurposed to a Proxmox node, and a second Proxmox node (i5-6500T). I use Open Media Vault with Docker as my primary host, and I have a CoreOS secondary host that I have a couple of Podman containers on. I'm planning moving stuff to Podman eventually, but I was mostly focused on moving the bare metal OMV host to a vm recently. I have a media share on my NAS that some containers rely on. I also have a NFS share on it that I use for larger data pools (like nextcloud, download folders for torrents).

Everything is: Bare metal Proxmox -> VMs -> Containers. No services running directly
I use Docker (mostly) and a couple of podman containers, moving to podman going forward
Only orchestration is docker-compose (for docker) and systemd (for podman)
No central log server, haven't needed one

5

Lemmy Follow Bookmarklet (gist.github.com)

submitted 1 year ago by Nitrousoxide@beehaw.org to c/support@beehaw.org

0 comments fedilink

I made a bookmarklet (with some ChatGPT help to troubleshoot) which will redirect you to your own instance’s URL for a foreign Lemmy community to easily subscribe to it.

This will not correctly redirect you if you are in a topic already. It will only work if you are on the base community page. If someone wants to tweak it (or redo it entirely) to work in a bigger variety of instances please feel free. My skills with JavaScript are… minimal.

21

Lemmy Follow Bookmarklet (gist.github.com)

submitted 1 year ago by Nitrousoxide@beehaw.org to c/lemmyworld@lemmy.world

3 comments fedilink

I made (with some ChatGPT help to troubleshoot) a bookmarklet which will redirect you to your own instance's URL for a foreign Lemmy community to easily subscribe to it.

This will not correctly redirect you if you are in a topic already. It will only work if you are on the base community page. If someone wants to tweak it (or redo it entirely) to work in a bigger variety of instances please feel free. My skills with JavaScript are... minimal.

/r/Conservative is going to save Reddit by Nitrousoxide in c/politics@beehaw.org

[-] Nitrousoxide@beehaw.org 44 points 1 year ago

They won't leave a single boot unlicked

Self hosted FOSS software by Nitrousoxide in c/foss@beehaw.org

[-] Nitrousoxide@beehaw.org 4 points 1 year ago

Also, if you want to actually learn, I would strongly recommend against using Docker containers for everything. Besides being stuck with what the developers prefer, all the work of installing things is already done.

I really disagree on this point. You should use docker or podman (preferably Podman) to containerize your applications on your server to keep them ephemeral and separated from the host OS wherever possible. This improves security, makes setups reproducible, and eases backup and restore procedure. If you want to build from source do so with a containerfile/docker file to keep your build environment fresh and clean.