Encrypt-Keeper

Unfortunately not as self hosting is really just an amalgamation of a number of different technologies, concepts, groups of best practices, and there are nine and a half viable ways to do any given thing you’ll want to do. For my day job I manage several public systems that serve millions of requests a day and even I can’t really give you a “One definitive way of doing things”, but I have my preferences.

I think if you wanted a rough plan of what would be the most valuable things to learn in which order it would be

1. Docker, especially persisting your storage and also how its network works. Use containerized services only on your local network at first to get a feel for things, and give yourself the ability to screw things ip without putting yourself in any danger.

2. VPNs and how they work. You can start with a direct stupid simple VPN like WireGuard, or Tailscale if you want a mesh-VPN. This will allow you to reach your services remotely without having to worry too much about security and the micromanagement that can sometimes come with it.

3. Reverse proxies for things you’d like to expose to the public. At this point you want to learn as well about things like server hardening, have a system in place to automate software updates etc. there’s a common misconception that using a reverse proxy is innately much safer than port forwarding directly to your services. It can help by obscuring your home IP, and if you pair it with a WAF of some kind that’ll help you with much of the chaff attacks that get tossed your way, but at the end of the day in both cases you’re exposing the web services on your local network to the internet at large, so you have to understand the risk and reward of doing this.

deleted by creator

Believing that either the Reddit exodus was negligible to that community, or that it was entirely decimated and left to Lenny are both inaccurate opinions. There was a very tangible effect on the selfhosted subreddit specifically when many left for Lemmy, and now both communities both feel like two halves of the same whole. Enough people moved over to lemmy that I truly don’t feel the need to open reddit hardly ever, but I do from time to time. I think lemmy also has a benefit that other fediverse sites like Mastodon don’t, in that Lemmy is not quite as allergic to the concept of discoverability, and the fact that Lemmy is inherently based around communities means that you don’t have to do the Mastodon thing where you spend the first month having to go out and follow a ton of individuals. You can just follow a couple communities and the content flows in.

I switched from SWAG to Caddy. Its config file is much simpler, with many best practice settings being default resulting in each sites being like 3 lines of code. Implementing something like mTLS requires one line per site, just super nice to configure, and you’re not left without a template config for more obscure services.

That being said, SWAG does more than enough and Nginx is a powerful software so you really aren’t missing out on anything but more streamlined config.

Traefik is kind of just like, a nightmare that tries to sell you on it being “self configuring” but it takes some work to get to that point and the “self configuring” requires the same amount of time in a text editor as manually configuring Caddy does. I can see Traefik being powerful if you’re using it with actually clustered k8s and distributed workloads. If that’s not your use case it’s kinda just more work than it’s worth.

StaRSS

For you trekkies out there

Are you sure? I’ve seen generally favorable responses to the game from critics and players alike. Literally the only criticisms I’ve seen levied against the game so far are that it’s woke.

As somebody who runs Ubiquity UniFi gear, it’s all flash and very little substance. Its dashboard will dazzle you with charts that either aren’t accurate, aren’t meaningful, or are generally unhelpful. It has a “new” (half a decade old now) and classic interface you can choose between, but neither interface gives you access to every setting you’ll need. I still to this day find myself swapping between them.

If you just need basic devices to make packets go, they do the job. But an average day in the life of a UniFi-enjoyer consists of things like trying to troubleshoot some kind of network issue only to find that the data collected by the devices doesn’t mathematically make sense, so you go to the UniFi forums just to find out it’s a bug that’s existed for years and has never been resolved. And on days like that, I find myself wishing I had something less flashy that would just allow me to see what’s going on with my network, accurately.

If you have an iPhone, it’s a pain over Tailscale because Tailscale frequently likes to disconnect for various reasons and this isn’t something Tailscale can fix, it’s something with the way Apple manages background processes.

If you’d like an alternative, you can host your services directly to the internet via a reverse proxy like Caddy or Nginx, and then use mTLS to secure that access with a certificate you load only onto your devices.

Hard bots have actually been so much trouble, that literally the only way to make them hard at all is to make them cheat by allowing them to operate outside of the ruleset the player is bound by. It’s a humongous issue with every strategy game on the market.

I think the thing to note here is that ISPs roll those things out fully aware that hardly anyone who pays for that will actually USE that amount of data. They don’t want a killer app for it, they just want you to think you need that much data, and then never actually use it. In fact there are some places where regardless of your bandwidth, you have a monthly data allotment. This game represents a shift into super high bandwidth usage for the general non-technical population. If everyone and their mom starts actually using all the bandwidth they pay for, can the ISP deal with that? If you don’t have a monthly data limit, do they start to roll those out to you and your area?

I’ve played it within the last few weeks. Like I said, deep as a puddle. Lots of systems have been bolted onto the side, sure. But the gameplay loop remains largely unchanged since launch. None of the added features integrate into the experience in any kind of meaningful way, they’re all just distractions, little side excursions. Base building? Cool, what are they for? Oh gloried fast travel points. Their primary practical use is to help you build more bases. There’s no real rhyme or reason to engage with any of the new systems added. They’re just novelties you toy around with briefly because they’re new.

There’s nothing wrong with just using a VPS for this. Despite what some mouth-frothing hobbyists will tell you, it’s still well within the realm of self hosting. There’s just no reason or difference for hosting a blog on your UnRAID server vs a VPS.

If you really want to be some kind of purist and only use your own hardware, then you could configure a web server that can reverse proxy on your UnRAID server and forward port 443 in your router to your UnRAID box, but you’d have to change your UnRAID access port to something else. You’d want to keep this web server docker container up to date, and preferably see if you can implement some kind of WAF with it or in front of it. You’d then forward the requests from this web server to your ghost container.

A better idea would be to use a different piece of hardware for this web server reverse proxy, like a raspberry pi or something, and put it on a different subnet in your house. Forward 443 to that, then proxy the connection back to UnRAID, in whatever port you bind the ghost container to. Then you can tighten access that raspberry pi has. Or hell, host the blog on that hardware as well and don’t allow any traffic to your main LAN.

There are half a dozen better ways to do this, but they all require you to rely on a third party service to some extent.

I can’t think of a single DLC I’ve ever played in my entire life that didn’t add new mechanics

No he’s objectively right. No Mans Sky has made improvements but they just made puddle wider. It’s no deeper than it was at release.

Most games are locked at 30 fps anyway

No?

Not at all. It’s a factory building game. 3D Factorio if you will.

Fun game, if not a little on the easy side. Beat Ante 8 on my second run. There is an endless mode thankfully.

I don’t think they’re doing that.

What it really comes down to is that this type of “safe” game design where you rehash the same game over and over again for 20 years thing used to make a shitload of money, that’s why they all do it, and now it doesn’t. Or at least, they’re discovering that there’s a mathematical maximum amount of times you can rehash something without innovating. And not doing that is too huge a pivot for a huge lumbering company like Ubsioft to make on a reasonable timescale.

This is what’s supposed to happen though. When not enough people buy games to make them profitable, the games have to change, or Ubisoft goes under. Either is fine.

Getting all the functionality of Pihole into Unbound would be a good deal more than “a little work” lol. And for no real practical reason when all you’re trying to do is set up secure DNS with some ad blocking on your network. And this is coming from a professional who wouldn’t have to “learn” anything to do it. If it was really that little work, Pihole + Unbound wouldn’t be the go-to solutions for so many people.