aesir

joined 2 years ago
[–] [email protected] 1 points 1 year ago

I like it, it was released a couple of days ago so something might require a bit more polishing but overall it looks better to me.

[–] [email protected] 2 points 1 year ago

I have heard of several cloud screw-ups as well, leading to charges of several thousands.

On one side this can happen if you experiment something outside of the free machine(s), on the other side you have all the reporting and notification tools to avoid surprises.

Nonetheless, I still see your point, reason why I prefer to use an almost dry revolut prepaid for all the cloud accounts instead of my main credit card.

[–] [email protected] 1 points 1 year ago (2 children)

As you wish, indeed the only free offer without credit cards is the one of azure for students. In any case you are not anonymous.

[–] [email protected] 7 points 1 year ago (5 children)

Considering the small audience and purpose, I would not have any problem using the always free offerings of either Oracle or Google (the latter especially if located in the US).

[–] [email protected] 7 points 2 years ago (1 children)

I don't know, wouldn't the Hypervisor be able to track resources usage by itself without anything else?

[–] [email protected] 6 points 2 years ago (2 children)

If postmarket os works on that device maybe you can go full Linux (alpine), there will be no systemd which might be a problem and I am not even sure about docker compatibility. You can look it up though.

[–] [email protected] 1 points 2 years ago* (last edited 2 years ago) (1 children)

Relays have become a pro feature in the last release. I tested them on netmaker.io SaaS version and they work but it defeats the purpose of selfhosting my VPN manager. You also need to have a good relay, for instance among GCP, Azure, Oracle and Vultr only the latter works because their VPS are not behind a NAT.

Netbird first of all is extremely resource hungry. In some occurrences completely hanged a 1 GB RAM VPS when I was testing. Even without trashing I had issues connecting many of my peers. It has to be said that it was surely my fault in some ways as netbird.io SaaS worked fine.

[–] [email protected] 1 points 2 years ago (3 children)

Tailscale just works, I recently tried netbird and netmaker. I did not manage much with the first but netmaker instead seemed even easier to manage than tailscale, being faster at the same time. Unfortunately it failed with peers behin my corporate NATwhich tailscale can bypass with its own relays. But for others it can work very well.

[–] [email protected] 4 points 2 years ago

Hi, to check attacks you should look at the logs. In this case auth.log. Being attacked on port 22 is not surprising neither really troublesome if you connect via key pair.

My graph was showing egress traffic, on any kind of server the traffic due to these attacks would have been invisible but on a backup server which has (hopefully) only ingress you can clearly see the volume of connections from attackers from bytes teansmitted

[–] [email protected] 8 points 2 years ago* (last edited 2 years ago) (1 children)

ssh -p 12345 would leave your boxes accessible from anywhere too. Other blocks of IPs receive 10 times or more requests, as scanners can focus on blocks of ips from major providers.

[–] [email protected] 4 points 2 years ago (1 children)

I disagree, you'll have your backups, so even if everything breaks you will have a failsafe. If you get compromised it's still not an issue: Everything server side is encrypted, the safety is in the clients and your master password length.

So, I see no particular differences with other services. Considering I hear of some issues with bitwarden servers that are constantly under attack, selfhosting could even increase the availability.

 

In the past two weeks I set up a new VPS, and I run a small experiment. I share the results for those who are curious.

Consider that this is a backup server only, meaning that there is no outgoing traffic unless a backup is actually to be recovered, or as we will see, because of sshd.

I initially left the standard "port 22 open to the world" for 4-5 days, I then moved sshd to a different port (still open to the whole world), and finally I closed everything and turned on tailscale. You find a visualization of the resulting egress traffic in the image. Different colors are different areas of the world. Ignore the orange spikes which were my own ssh connections to set up stuff.

Main points:

  • there were about 10 Mb of egress per day due just to sshd answering to scanners. Not to mention the cluttering of access logs.

  • moving to a non standard port is reasonably sufficient to avoid traffic and log cluttering even without IP restrictions

  • Tailscale causes a bit of traffic, negligible of course, but continuous.

26
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]
 

Hi,

What to do if the domain name of one of my webserver, that me and some lab members use for work related stuff, is no longer resolved by our university DNS? When I first noticed it, I could see no resolution at all while now the domain resolves to a wrong IP. The site can be normally reached on any other network so there is no problem on my side I think.

Should I just wait (now more than 24 hours) or should I try anything? I am entitled to complain to our IT even though the issue is only with this not-really-professional FreeDNS subdomain?

EDIT: apparently some automatism marked this domain as malicious (absolutely it is not, not willingly and not compromised) and somehow DNS resolves to CNAME sinkhole.paloaltonetworks.com.

 

Hi,

I am looking since a long time for a selfhosted tool that would allow the user to insert and visualize data in a hierarchycal structure (tree). Ideally custom schemas could be defined so that it can be also regarded as a rudimentary noSQL database. I've looked at the awesome-selfhosted page high and low for anything similar with no luck. Do you happen to know anything that could work? The best example for the functionality I am looking for is the open source desktop app treeline

Thanks for your inputs,

 

Hi,

I am looking since a long time for a selfhosted tool that would allow the user to insert and visualize data in a hierarchycal structure (tree). Ideally custom schemas could be defined so that it can be also regarded as a rudimentary noSQL database. I've looked at the awesome-selfhosted page high and low for anything similar with no luck. Do you happen to know anything that could work? The best example for the functionality I am looking for is the open source desktop app treeline

Thanks for your inputs,

 

Hi, I can spin up for free a Windows VPS (win server 2016 with graphical interface or win server 2022 core version since it has only 1GB of RAM). The problem is that outside of Linux I have absolutely no experience. I would like to try hosting something also on Windows server just to take away some load from other machines or even just to learn something new.

Therefore I have the following questions:

*Is there any starting resource for windows selfhosting you can recommend? I would love if a list like the awesome selfhosted existed for services that can run on windows.

*Is there anything non-enterprise for which a windows server would provide any advantage over Linux?

*Does anyone self hosts on windows server? Can I ask what you use it for?

Thanks

view more: next ›