There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

witten ,

Yeah, look at the x axis labels. 5 years, 2 years, and 3 years. WTF?

witten ,

Regardless of intent/effect, it’s sloppy and does not instill confidence in the data…

Self-hosted website for posting web novel/fiction

Hey hello, self-hosting noob here. I just want to know if anyone would know a good way to host my writing. Something akin to those webcomic sites, except for writing. Multiple stories with their own “sections” (?) and a chapter selection for each. Maybe a home page or profile page to just briefly detail myself or whatever, I...

witten ,

I haven’t used an out-of-the-box self-hosted solution for this, but I agree with others that blog or static site generator software could work. I think the main challenges you’ll find though are: 1. Formatting the content/site for long-form readability, and 2. Adding a table of contents and previous/next chapter links without a bunch of manual work.

Fortunately blog and static site software have plugins that can add missing functionality like this. Here’s one for WordPress (that I have no first-hand experience with): wordpress.org/plugins/book-press/

I also want to ask: What’s your plan for discovery/marketing? Because one of the benefits of the non-self-hosted web novel sites is that readers can theoretically discover your story there. But if you instead just post it on your own site, how will readers ever find it?

How do you guys handle reverse proxies in rootless containers?

I’ve been trying to migrate my services over to rootless Podman containers for a while now and I keep running into weird issues that always make me go back to rootful. This past weekend I almost had it all working until I realized that my reverse proxy (Nginx Proxy Manager) wasn’t passing the real source IP of client...

witten ,

I struggled with this same problem for a long time before finding a solution. I really didn’t want to give up and run my reverse proxy (Traefik in my case) on the host, because then I’d lose out on all the automatic container discovery and routing. But I really needed true client IPs to get passed through for downstream service consumption.

So what I ended up doing was installing only HAProxy on the host, configuring it to proxy all traffic to my containerized reverse proxy via Proxy Protocol (which includes original client IPs!) instead of HTTPS. Then I configured my reverse proxy to expect (and trust) Proxy Protocol traffic from the host. This allows the reverse proxy to receive original client IPs while still terminating HTTPS. And then it can pass everything to downstream containerized services as needed.

I tried several of the other options mentioned in this thread and never got them working. Proxy Protocol was the only thing that ever did. The main downside is there is another moving part (HAProxy) added to the mix, and it does need to be on the host. But in my case, that’s a small price to pay for working client IPs.

More at: haproxy.com/…/use-the-proxy-protocol-to-preserve-…

witten ,

That’s unfortunate about NPM and Proxy Protocol, because plain ol’ nginx does support it.

I hear you about Traefik… I originally came from nginx-proxy (not to be confused with NPM), and it had pretty clunky configuration especially with containers, which is how I ended up moving to Traefik… which is not without its own challenges.

Anyway, I hope you find a solution that works for your stack.

witten ,

I don’t think the goal is to convince the people stuck in the artificially created traffic about Gaza. I think it’s to get news coverage from sites like nbcnews.com so as to raise the profile of the Gaza war so that politicians must address it. You are welcome to argue whether that’s an effective strategy, but I think that’s the intent.

Also, side note… Social progress rarely comes from rule following.

witten ,

It’s about the public discourse. If an issue (e.g. the U.S. giving Israel weapons and enabling their war) disappears from the headlines, it’s much easier for politicians to ignore it. But if the issue keeps coming up, politicians feel pressure to act–or they risk getting voted out of office. Especially during an election year.

Should I learn Docker or Podman?

Hi, I’ve been thinking for a few days whether I should learn Docker or Podman. I know that Podman is more FOSS and I like it more in theory, but maybe it’s better to start with docker, for which there is a lot more tutorials. On the other hand, maybe it’s better to straight up learn podman when I don’t know any of the...

witten ,

I can’t comment on that, but actual Docker Compose (as distinct from Podman Compose) works great with Podman.

witten ,

Since this is on a home network, have you also forwarded port 80 from your router to your machine running certbot?

This is one of the reasons I use the DNS challenge instead… Then you don’t have to route all these Let’s Encrypt challenges into your internal network.

witten ,

Maybe…? I’m not familiar with that router software, but it looks plausible to me…

What is the best way to safely and completely erase all data from old laptops?

I have a couple of old laptops lying around and want to throw them away, but have been cautious to do so because of privacy concerns of data still on the hard drives. What is the best way to wipe them? Or should I take them out and physically destroy them?...

witten ,
  1. There are companies you can pay to physically shred your disk drives. You have to be able to trust them of course for this to work.
  2. Or if you want to DIY, you can drill or smash your drives. Just wear eye protection, etc. Making the drives inoperative like this is the only thing I’d trust, but you can also software-wipe them first.
witten ,

It hasn’t always been exactly there though…

witten ,

Probably shouldn’t look up any car companies then…

witten ,

Wait. Signal was an SMS client. It wouldn’t cost them anything for a user to send an SMS message. IIRC, they nixed the SMS feature for security reasons, not cost.

witten ,

IIRC Honda isn’t unionized, so it’s probably not about striking directly. Rather, it’s likely a lame attempt to not have them unionize as well.

witten ,

borgmatic dev here. First of all, if Vorta is working well for you to recover files, then by all means use Vorta! Right tool for the job and all. Having said that, a couple of thoughts on using borgmatic in Docker and recovering files:

borgmatic has a search feature that makes finding a particular file in an archive or across archives pretty easy. So that might be step one in restoring an accidentally deleted file.

Once you’ve found the file and archive to restore, you can either use borgmatic extract or borgmatic mount. With extract, you copy one or more files out of a backup archives. The challenge though is that with borgmatic in a container, by default there’s not an easy way to copy those files into their original locations. However I think the “fix” is to mount your source volumes as read-write instead of (the documented) read-only. That way you can easily copy extracted files back to where they belong.

As for borgmatic mount, you’ve got a similar challenge and fix. You can presumably mount backup archives (or a whole repository) within the container, but then you need to copy your recovered files out of that mount into their original source volumes. So that probably also means those volumes need to be mounted read-write.

Let me know if you have any questions!

witten ,

Glad to hear it’s (mostly) working out for you! I know you came here looking for best practices with restores, but if you end up coming up with anything yourself, feel free to comment on that Docker borgmatic ticket with requests or ideas. I use the container myself on some systems for the same reasons you do, and I also wouldn’t mind smoother restores!

witten ,

Nope! Borg always requires Borg on the remote side. It’s Borg’s biggest strength and weakness versus competing backup systems IMO. Strength, because it can do pretty smart stuff with its own code running on both sides. Weakness, because it means it doesn’t work natively with cloud object storage like S3. It’s a tradeoff like anything else.

witten ,

I’m not super familiar with Unraid, but yeah, the borgserver image sounds like it’d work for this… You don’t need borgmatic on the server side unless you want it there to make running Borg commands easier.

witten ,

Separate configs is totally reasonable. It just sounds like you haven’t configured your Borg passphrase with borgmatic… Otherwise it wouldn’t prompt for your passphrase at all.

witten ,

I hope one (or both!) of them end up working out for you.

witten ,

I commiserate with you on all of this, but I just wanted to let you know that as a small form of protest, you can say no to them checking your receipt on the way out the door. Be polite and civil, of course. But they can’t legally stop you from walking out with your purchases.

witten ,

Hah. As if.

witten ,

Since I use Docker Compose with Podman, I just make a single systemd service to run Docker Compose on boot, thereby starting all my containers at once.

witten ,

I have one Compose file per stack, which is an application and all of its containers, databases, etc. Pretty much the same way I organized things with just Docker.

witten ,

Maybe I’m being naive, but it seems like the biggest threat of unchecked AI is “just” the further concentration of wealth (among humans). Which, ironically, poses a catastrophic risk to humanity…

witten ,

Yeah, the constant Docker breakage was one of the main reasons I switched to Podman. FYI you can use Docker Compose directly with Podman.

witten ,

It’s not the “official” way to do it, but you can make systemd run Docker Compose (talking to Podman instead of Docker), which is pretty close to what you’re talking about. And then you don’t have to write stinky systemd INI files for each container.

witten ,

I don’t think Docker’s API and CLI are historically where it’s had problems…

Digital Trash Heap

So here’s the problem that I have, I have several generations of back ups, which are currently taking over huge amounts of space on my NAS server. I want to be able to go through and process all of the files that are on it while the duplicating, and possibly going through and tagging any files that I find that are helpful. Is...

witten ,

Borg Backup would also fit the bill for backups going forward, especially if OP is still backing up to a local server (as opposed to cloud object storage).

witten ,

It deduplicates aggressively at the block level. So if your files don’t change much, each additional backup takes very little space. And if a file changes a little, Borg only backs up what’s changed instead of the whole file again.

Borg also has a rich ecosystem of wrappers and tools (borgmatic, Vorta, etc.) that extend its functionality and make it easier to use.

witten ,

There are so many whole grains besides rice though. And in theory they aren’t arsenic-laden…

witten ,

It’s almost like these are agricultural products that come from outside.

witten ,

Some of the most condescending, man-splainy, anti-social, but-what-abouty contrarians I’ve ever had the displeasure of encountering online have been technical users.

witten ,

Lots of hotels tack on “amenity fees” or “resort fees” separate from those. It’s pretty obnoxious, especially since they don’t show them to you til you’re halfway through booking.

deleted_by_moderator

  • Loading...
  • witten ,

    Who is trying to get away from electric? Electrification is the future, because it’s not reliant on planet-killing fossil fuels (even if much of the electricity today comes from them).

    witten ,

    I dunno. It sounds like he was a state-sponsored arms dealer. Was he really “doing good?”

    witten ,

    Oh my God, it never occurred to me that money exchanged hands for that song. I just thought it was a cute little pop culture reference. How do we know it’s not though? In any case, I bet this is the song OP is referring to.

    Giving up on selfhosted email / Any sane email setups?

    So I’ve been running self-hosted email using Mailu for a couple of months (after migrating out of Google Workspace). Today it turned that although my server seems to be capable of sending and receiving emails, it also seems to be used by spammers. I’ve stumbled upon this accidentally by looking through logs. This seems to...

    witten ,

    I’ve had similar experiences trying to send mail to Microsoft-hosted email addresses. My current “solution” is to send all outgoing mail directly from my VPS-hosted Mailu server… EXCEPT for Microsoft-destined mail. For those messages, they get transparently relayed from Postfix to a third-party email sending service that Microsoft apparently trusts.

    The upshot is I can still use my own Postfix daemon for all mail sent to sane (non-Microsoft) providers.

    witten ,

    Ooh, lucky you! Maybe it was both the rDNS and the SNDS. Part of the problem IMO is it’s such a black box…

    witten ,

    You mentioned Borg and all of its command-line options, but have you taken a look at borgmatic? It should be much easier to learn and use than Borg, while still retaining Borg’s features. Just note though that borgmatic probably doesn’t hit all of your stated requirements (e.g., no GUI).

    witten ,

    Many folks use a centralized monitoring solution like Healthchecks to monitor backups across all of their servers. And borgmatic integrates directly with Healthchecks among others.

    Wisest Upgrade from Raspberry Pi (artemis.camp)

    I am several months into the self-hosting journey and I feel I have outgrown my Pi 4 B 8GB. I'm only running around 3 dozen containerized services and it seems to struggle to keep up. But I'm not sure of the best bang for my buck. I'd like good, long-term performance, but I don't really have a grand lying around for a Lenovo...

    witten ,

    A grand?? You can pick up a used Lenovo Tiny for 50 bucks (US) on EBay.

    witten ,

    Wow, that’s pricey!

    witten ,

    If so many folks were mislead by what you said, perhaps consider that you share some responsibility in communicating clearly.

    witten ,

    You too!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • lifeLocal
  • goranko
  • All magazines