shrugal

joined 2 years ago
[–] [email protected] 4 points 1 week ago (1 children)

Nothing wrong with having to pay for software if the prices are reasonable. It's a product like any other, with real people working on it.

[–] [email protected] 1 points 3 months ago

I opened specific ports where needed, and also limit most frontends to local requests only.

[–] [email protected] 1 points 3 months ago* (last edited 3 months ago) (2 children)

I'm using the DS920+, as it's still the best 4-bay Synology NAS for media streaming/encoding tasks afaik. Caches are read-write, and do use the NVMe slots.

The RAM upgrade and added caches definitely made a huge difference. The system is averaging around 70% RAM usage, and goes beyond that for certain tasks, so the current workload wouldn't really be feasible without the extra RAM. And the caches really make most IO operation noticably faster, especially random drive access e.g. from multiple simultaneous processes.

I have some Arr containers on there, as well as Plex, Audiobookshelf, AppFlowy, some Beeper Matrix bridges, FileFlows for media conversion, my own Piped instance, SearXNG, Vaultwarden, FirefoxSync, and a few smaller ones.

[–] [email protected] 2 points 11 months ago

I switched the account in the app, so it should use it and fetch content from LW.

[–] [email protected] 8 points 11 months ago* (last edited 11 months ago)

I agree with everyone here that self-hosting email is never easy, but if you still decide to go down this route then here are two tips that I personally found very helpful, especially when you decide to host it at home:

The first is to get an SMTP relay server. That's just another mail server that yours can log into to actually send its mail, just like an email client would. That way you don't have to worry about your IP's sending reputation, because everyone will only see the relay's reputable IP.

Second is to configure a Backup MX. That's an additional MX DNS entry with lower priority than the primary, and it points to a special mail server that accepts any mail for you and tries to deliver it to the primary server forever (or something like an entire week). So when your primary server is unreachable other sending servers will deliver mail to the backup, and it delivers the mail to the primary as soon as that's back online.

You can get these as separate services, but some DNS providers (like Strato for example) offer both with the base domain package. It makes self-hosting an email server much simpler and more reliable in my experience.

[–] [email protected] 2 points 11 months ago* (last edited 11 months ago) (3 children)

That was my first thought as well! But I also tried LW which is still on 0.19.3, same problem.

Edit: My bad! I had "show read posts" enabled on my LW account, and read posts are correctly hidden when I disable it. So it really seems to be a problem with the new version.

19
submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]
 

I have "Show read posts" disabled in the settings, but it just stopped working all of a sudden. Since yesterday I'm seeing read posts again.

I tried toggling the setting, clearing cache and switching instances, but no luck so far.

Anybody else who has this problem? Any idea how to fix it?

Edit: Looks like it's a problem with the new Lemmy version!

[–] [email protected] 3 points 1 year ago (1 children)

Good to know I guess, but yea that's a bit too speculative for my taste.

[–] [email protected] 5 points 1 year ago* (last edited 1 year ago) (3 children)

Looks ok to me, what in particular do you take issue with?

[–] [email protected] 7 points 1 year ago* (last edited 1 year ago) (5 children)

This UsenetServer discount link gives you 1 trial month for $1, then $50/year after that, and includes a 1TB TweakNews block and a paid PrivadoVPN account.

[–] [email protected] 1 points 1 year ago

Completely agree! There are solutions for letting Lidarr download from Deezer and Tidal, but afaik no other music streaming services for some reason.

[–] [email protected] 4 points 1 year ago (1 children)

I'm transcoding everything to 320kbps MP3s. It's much much smaller than flac, and I can't hear the difference even if I try.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Trying to finish the Horizon Forbidden West story, but it's a bit meh. Really sad about that! The HZD stories were great, and the world is as beautiful as ever, but I stopped caring at some point with the newest one. Other than that, I just bought the Age of Wonders 4 season pass and am trying out the new races and traits.

 

Hey everyone,

My personal server of choice is a DiskStation right now, and I'm using the default reverse proxy for all my subdomains. I went through a few stages to secure them, and now that I'm finally finished (famous last words heh?!) I thought I'd document my approach and provide some configs and code. I've seen a few unanswered questions here and there about how to do this on Synology, so hopefully this helps a few people.

The guide covers limiting access to local IPs, as well as adding Basic or SSO authentication. The main goal is to integrate well with the GUI and access control profiles, and to leave all existing and autogenerated files untouched, so updates and changes via the GUI still work as expected.

Here is the basic idea:

The nginx server config is located in /etc/nginx/, and the reverse proxies are defined in the sites-available/server.ReverseProxy.conf file inside that folder. There's one server directive for every proxied site, and the DSM config adds a include .acl.<random string>.conf* directive if you set up an access control profile for a site. That * at the end there is crucial, because it means we can manually add more configuration files with the same prefix, and they will automatically be included and applied to all sites using this access control profile.

There are also include directives for the main and http scopes, as well as for the default DSM server directives. This means we can inject configurations in these places, just by adding correctly named files to the conf.d folder.

For Single Sign-On (SSO) authentication we run a Vouch-Proxy instance to handle the communication between nginx and the OIDC server. We also need to spin up another nginx reverse proxy and forward requests to it, because the built-in one doesn't support the required auth_request directive. Its container script just copies the default reverse proxy configuration with some modifications, and it is set up to reload whenenver the original file changes.

Link

 

So I know what AC3 means of course, but what does AC3D mean in some releases?

view more: next ›