tapdattl

joined 2 years ago
[–] [email protected] 6 points 4 days ago

FreeIPA and Keycloak will give you directory management (LDAP and Kerberos), identity management, and single-sign on (OIDC and SAML) which if all your computers are running Linux as well, will give you centralized management of users.

You can then set other FOSS business management/productivity applications like NextCloud, Oodoo, Seafile, OnlyOffice, LibreOffice, CryptPad, etc. To use Keycloak as its authentication mechanism.

A lot of this will depend on what kind of work the business does.

You'll also want to look into log management and SEIM for security monitoring, Wazuh, Graylog, and others. This is especially true if the business has any data compliancy responsibilities in the country this is in.

[–] [email protected] 14 points 1 month ago (1 children)

I think the general consensus for homelabbers is a mesh network -- Tailscale and Netbird are the two most popular options

 

I would love any comments/criticism as this is the first project I've written where I actually felt comfortable with what I was doing

Thanks!

 

It appears to pass all tests, but I'm not sure if my test writing skills are necessarily that great, I semi-followed the learn go with tests eBook. I appreciate any feedback, and if this isn't an appropriate post for this community just let me know and I'll remove.

Thanks!!

*** Update *** Updated the repository to be a bit more discriptive of what the library is for and added in a small example project of it in action.

[–] [email protected] 10 points 1 month ago* (last edited 1 month ago) (1 children)

I'll save you 2 clicks :

Web Project Management

Odoo	:  Suite of open-source business apps written in Python

OpenProject: Collaborative Project Management

Wekan: Trello-like Kanban

Focalboard	: Self-hosted project management tool

Taiga: Web-based tool for agile project management

Kanboard: Kanban board for small teams and individuals

tuleap: Improve management of software development and collaboration

eGroupWare	: Enterprise ready web-based groupware suite with project management

Redmine: Flexible application written using the Ruby on Rails framework

LibrePlan: Project planning, monitoring and control

Trac	: Project management and bug/issue tracking system

Leantime	: Project management for the non-project manager

Scrumlens: Agile retrospective tool

dotProject: Web-based, multi-user, multi-language project management application

TaskBoard: Kanban-inspired app for keeping track of things
[–] [email protected] 8 points 2 months ago

I just wish I had done something absurd like sport a bright pink mohawk at some point before going bald 😂

[–] [email protected] 5 points 2 months ago

Lol "Ukraine's war against Russia" get the fuck out of here you punk ass shill

[–] [email protected] 4 points 2 months ago

The Homelab Show was a good one, though they haven't posted a new podcast in almost a year. Lawrence Systems and Learn Linux TV are the makers of it and have their own content as well

[–] [email protected] 1 points 3 months ago

I just saw a video on Pangolin which is, essentially, a self hosted version of what cloudflare tunnels provide. I have absolutely no experience with it, just saw a video on YT, but it might be the solution you're looking for

[–] [email protected] 5 points 3 months ago

Harry Cox, son of Dick Cox

That would be if his name was Richard, not Robert

[–] [email protected] 19 points 3 months ago (1 children)

He did

[...] Why does the radius need to be reactive? What do you stand to gain over just setting to like 3 or 4px and moving on with your life?

Junior webdev points

AKA you gain nothing.

[–] [email protected] 1 points 3 months ago (1 children)

What's your solution? PiHole? The thing I don't like about the PiHole is the lack of wildcard domain rewrites. I've been playing with AdGuard Home and Unbound, not sure what my final solution will be, though.

[–] [email protected] 1 points 3 months ago (3 children)

Yeah I've been toying with FreeIPA for IdM, Keycloak for SSO, and Netbird to create a zero trust internal network. DNS is the hurdle I'm currently figuring my way over

[–] [email protected] 17 points 5 months ago (3 children)

I've been playing with Stalwart-Email as a combined SMTP/IMAP server. Its open source and written in rust, still pretty early in development and I haven't played with it enough to give any real opinion on the pluses or minuses compared to other software, but its worth taking a look at.

 

I'm re-setting up my HomeLab and one of the things I'm trying to learn about on this go-around is Zero Trust networking. To accomplish this I am planning on using NetBird's mesh overlay network. I would like all of my services to use the NetBird mesh network at all times, whether they are communicating within my homelab's LAN or I am accessing them from outside via the greater internet.

I have successfully set up the NetBird management interface on a Hetzner VPS, however the issue I run into is if I lose internet access at home, none of my services are able to function as they can no longer reach the management interface. However, if I self host the management interface in my homelab, I am unable to access it from outside my home LAN.

I've identified 2 solutions that could solve this:

  1. Self host the management interface and set up a Cloudflare tunnel to the management interface, which would allow access from outside my home network.

  2. Self host the management interface, then set up a wireguard proxy/tunnel on a VPS that forwards traffic to my management interface (Similar in my mind to option 1, but not relying on Cloudflare)

What are your thoughts? Any other ideas?

I appreciate your comments/criticisms!

 

As the title states, how would you set it up? I've got an HP EliteDesk G5, what are the strengths and weaknesses of either:

  • ProxMox with one VM running TrueNAS and another VM running Nextcloud
  • TrueNAS on bare metal with Nextcloud running in docker
  • Some other setup

I'd like to be able to easily expand and backup the storage available to Nextcloud as needed and I'd also like the ability to add additional VMs/containers/services as needed

 

I'm wanting to create a centralized repository to keep base images of operating systems to be installed on new laptops or workstations bought/used in my household with my local CA already installed, configured to authenticate with my local FreeIPA instance, network configurations already configured, etc.

What do you all use to accomplish this? I'm only free/libre/open source software for my home lab, so that's a requirement as well.

Ideally I'd like to be able to buy a computer, flash the latest and greatest from my repository onto a bootable thumb drive, install onto the computer, and be ready to go without any further configuration.

1169
Should I? (lemmy.world)
 

It would be blasphemy not to

view more: next ›