q0uaur

you see, in that case google has to pay, but flipping it like this makes the customers.. oh wait the product pay.

definitely don't expose any management interfaces to the open internet.

personally, i manage my homelab through ssh via the commandline, and key-based ssh auth is secure enough for my threat model (i am considering switching the entrypoint machine to a BSD though, to avoid the kind of bugs distros sometimes introduce).

but a webserver and a few containerized services seem pretty low risk to me, so i do have a few of them exposed via reverse proxy. The more sensitive one behind Authelia via the forward-auth pattern, which i feel like is a really good fit for homelabs.

i'm pretty sure Mox (email server with included webui written in Go) does that - at least the Umlauts in mails i get from Hetzner seem to always stand out.

it also defaults to not loading HTML in emails, which i love. really opened my eyes to how dumb it really is to just accept all kinds of dynamic content in unknown messages. (kinda same as how the modern web relies on remote code execution to work)

the linked page has an earlier blog entry talking about that:

https://blog.lyc8503.net/en/post/asn-1-asn-registration/

quickly skimming the article i couldn't see a specific price for the ipv4 block, but ipv6 is cheap - the article mentions having to pay at least $50 a year + service fees to a "LIR", and you also need a BGP-enabled hosting provider which i imagine will come with similar cost at least (don't quote me on that).

the syntax highlighting giving up while i'm scrolling down was my favorite part of the whole thing

this was my plan, but then i got really into using LSPs and i'm not about to install every LSP on every server i ssh into.

Currently i just use sshfs to mount whatever directory i want to work on locally, nice to have all lsps available and also see my changes reflected on the server instantly.

gave it a shot, i like the concept, even though i suspect it'll cost like $2 a query to really get somewhere.

anyway, my test was to search for FOSS software, explicitly asking for "not big tech" and no ads. the contents of the results were fine, if repetitive - but i was a bit sad to see a lot of youtube and reddit in the results. does the " algorithm" not look at the actual domains?

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

edit- shit, it was rocket.chat, i'm so sorry.

Ignore the below, it is for a different "FOSS" discord replacement.

i did self-host it for a week to test it out - and honestly i was put off immediately.

What happens when you set it up according to the docs, is that it automatically "registers" for a license - the free license being limited to 5 users, even if you self host. Ridiculous, and just right out the gate shows me that whoever makes this does not have the user's best interest in mind.

the UI is also full of stuff that requires an expensive license, and i did not see an easy way to remove that stuff when self hosting.

Back when i checked out sr.ht, i really liked the idea of git-send-email precisely because it doesn't require making an account for everything. there's a nice tutorial for how to set it up: https://git-send-email.io/#step-1

worked easily enough for me, i could see myself using it for small patches here and there.

I did end up installing forgejo in my homelab after all, but back then it sounded like federation was much closer than it actually was. i did kind of expect that though, federation gets pretty complex quick.

every time i log into forgejo, i do see that juicy "proceed with OpenID" button though, and i've looked into running my own openid provider a few times - sadly not seeing anything that would work for me yet. honestly i can't believe we went from "facebook sign in" to "google sign in" and are now going to "github sign in" without a single open standard that's gotten some adoption.

set this up today, the documentation is useful and the quickstart very helpful, the dns stuff pretty much works exactly as it's supposed to and is just a bunch of copypasting (in my registrar's ui).

specifically for mox there was some things i would have liked to see: explain how the webmail isn't accessible on the public ip by default - i don't know how many of you want to be in a specific vpn for checking your email, but i sure was surprised i couldn't reach it, but had to activate it in config (and first figure out how to even do that). mox also doesn't redirect to https by default - imo it should, since it already includes the convenient automated certificate setup (which worked great).

maybe it is intended for a different environment, but since it recommends not running another webserver on the same host, i really don't want to access the webmail from the local server or by http. i like most of my services being available behind a reverse proxy, there it would make more sense. maybe i'll look into that variant later, but the documentation isn't quite as complete as i'd like.

since a lot of people are sharing anecdotes..

i spent some time today buying a new domain and setting up mox on a hetzner vm. the IP was on 3 blacklists on first check, after fixing the reverse dns it's on 2, one of which is apparently fake? dkim and dmark seem to be working, sending a mail to protonmail succeeds the checks, and yet it lands in spam - however, i'm confident once the domain is older than "just now" and i've set up DNSSEC (takes 1-3 days for this to start working in my country apparently) things will improve.

worst case i'll have to request a blocklist to unblock me, but i'll see.

personally - gmail is extremely plagued by spam. sure it goes into the spam mailbox most of the time, but enough non-spam email goes there too so you still have to check it. the current plague for me is "your package is awaiting delivery" spam - almost daily.

for being considered spam - i've had like 3 irl things set up on my old self-hosted mail, and these 3 arrived, even though while testing shortly after making the setup i did end up in spam. i don't know if companies have a whitelist of "if a user has this email on his account, don't send to spam" or something, but it hasnt been an issue.

i don't usually email too many individuals, in my social circles emails is not for that and has pretty much died long ago.

Due to the decent success i've had, i've spent some time today setting up mox to potentially replace my other solution - it is a bit of a process, many dns entries to make, and DNSSEC in my country seems to only update once a day so i'll see if i can enable it tomorrow, but so far it's working (but as usual, the first test email lands in spam.) i assume delivery will improve as soon as the domain is a bit older - i imagine most big mail services block email from a domain created the same day the mail is sent.

i'm still patiently waiting for an easy way to point a model at some documentation, and make it actually use that.

My usecase is gdscript for godot games, and all the models i've tried so far use godot 2 stuff that's just not around anymore, even if you tell it to use godot 4 it gives way too much wrong output to be useful.

I wish i could just point it at the latest godot docs and have it give up to date answers. but seeing as that's still not a thing, i guess it's more complicated than i expect.

thank you for this! i was looking for an easy way to generate passwords for this, and while diceware isn't in my distro's repos, turns out the EFF publishes the word list and the method to generate them online, making it super easy to make a small bash script to generate these! here's the link:

https://www.eff.org/dice

as someone who works on 3 different machines regularly and likes to have the same environment on all of them... i would LOVE if applications would stop cluttering my .config with cache data and other bullshit i keep having to exclude from sync.

its actually a big thing i am waiting for - both websites and ai tools to agree on a way to facilitate this.

i'm doing some game development in godot as a hobby, and the current llm's are really bad at it - very often i get code suggestions that use ancient versions of gdscript or the engine. I'd love to have a big enough context window and the tooling needed to go like "look at these godot docs for the current version: (insert link)" and then ask my questions, i think it would fix 99% of these issues. same with other less well-known tools and languages.

plenty of routers in my country (id go on a limb and say the majority) have both written on a sticker, different password for each device generated when the firmware first gets installed, and people NEVER change it.

edit they also come with a QR code you can scan on your phone to connect to the wifi without manually copy the password, so people just put up that qr code somewhere and connecting is easy enough.

i've been super happy with organic maps, but i have to admit maybe 3 possible downsides: 1. in my country openstreetmap is very well populated so i usually find what i'm looking for, but this isn't the case everywhere 2. search is just not as good sometimes - i once typed "gym" and it took me to a place in india. so to find places i still rarely use google maps. 3. there's no proper desktop app yet, or at least it's not widely published - i think it's being worked on, but until it's in the arch repos (the one in the AUR says it's outdated) i'm holding off on it.

still, giving google 99% less data is worth the slight inconveniences sometimes for me. also, it works perfectly offline if you download the maps!

i've been using my Fairphone 5 without any google account since last december, so about 5 months now i guess?

Not fully de-googled yet, not even a custom rom - just the stock OS, but not signing into an account. Most importantly, this means no Play Store for me - i get the majority of my apps from Obtainium (directly download + install APK releases from the app developer's source repository) and f-droid.

The apps i use most by far are messaging apps like Signal and Telegram which offer direct downloads and easy updating without play store, Organic maps for navigation, breezy weather, Immich (google photos replacement, self hosted) and etar (calendar, but its kinda clunky). oh and keepass2android-offline for my password managing needs, which is synced to my homeserver using Termux (linux running on android, with certain differences/limitations).

For sacrificed functionality: my bank's website works just fine on mobile browsers. for the 2 factor auth, it uses something called "Mobile ID", seemingly a standard different from sms or app-specific ones, i'm not sure how widely available it is but it works great for me. Chatgpt says it's used in a couple of European countries. For buying public transport tickets, i used the website for a while, but in my country the website is kinda shitty compared to the mobile app, it takes like 15 clicks to get a ticket where on the app it's 3. so i went to apkmirror/apkpure (ad-infested websites that offer direct download of APKs without google acc) and got the app there - this is both a security risk and inconvenient, but in this case it works for me and i can buy tickets with the app without problems.

for private use or even small teams it's way too late for that, but honestly it seems they're just focusing on enterprise use and i'm kinda glad something open source and self-hostable for that market exists. we're already wayy too dependent on microsoft, but at least my workplace's code can stay local for now.

running all my homelab / private repos off of a tiny gitolite3 server, and i'm always amazed that it all runs on an alpine linux VM that uses 75mb of RAM.

for anything even just sharing with friends or whatnot i won't recommend it though, people do love their web-UI and having to explicitly give someone access can turn off people already.

i'm sure there's lots of people who use a decentralized workflow, but... in the big picture, it seems it has to be a vanishingly small minority. unless i have a wrong idea about what decentralized means in this case?

the way i see it, pretty much every project has an "upstream" which is in effect a central location where the development of a codebase happens. and with how easy it is to set up a git server, with all the advantages that having a server for it brings, i just don't see why some people make such a big deal out of it.

don't get me wrong, things like being able to pull a repo to have it locally, and work on it independently from a server, without internet connection, is a vital point for any version control, and i see a lot of value in git-send-email (sr.ht's way of doing things), but in the end there usually does end up being a central location for the code, so why not embrace it?

Totally agree with the OP's feelings about git except one small nitpick, for me push and pull are opposites seen as how i use them, so it feels intuitive enough. Except for the wording of pull request, which IMO concerns the point OP made about decentralisation.

i fully agree that we could take more advantage of the effectively centralized nature git is mostly used.

personally, i don't love using git, but i do love the advantages it brings, even for the smallest problems. it's pretty much an all in one backup and sync solution too in my workflow, so i'm using it for my whole system configuration and user dir too, even tried using it for my addressbook and calendar with xandikos (baikal ended up working better for me though).

it's just very unfriendly to use at times, and there's reasons the "meme" about copying out your changes, deleting the whole repo, and pulling again is actually a common thing to do.

like, it's easy to add everything with "git add .". But you realize one file doesn't belong in the commit, what do you do? git remove doesn't exist. git rm isn't it either. git unstage? nope. it's git restore --staged, but ... i don't want to restore anything? sure, the git version i'm currently using dislpays this every time i run git status, but... the whole fact that this needs to be displayed like this should tell you a lot already.

agreed that there is an unmet need for a version control that does the 99% of usecases in user-friendly ways.

edit: while we're at it, let's also ensure the next system we use makes it even harder to lose data. accidentally deleting a file that hasn't been added in git can happen, and i'd like my version control system to help with that too.

if you actually care about bloat, by far the best* thing to do is set up arch linux manually (no archinstall script) and just install the packages you actually need. it's insane how little it actually takes to get a working system.

it's a bunch of effort though, both to learn how everything works and to set up all the things you're usually just used to being there by default. but once it's done you'll be able to fix any issue that pops up, because you actually KNOW what's on your system, as opposed to it being a massive collection of things you have no idea about.

*something like gentoo might be better but... compiling a browser takes ages and i recommend having an up to date browser, so you'll spend tons of time on that.

it's going pretty well right now, but if they keep massively increasing prices, it won't keep up forever.

the company i work at pays almost double now compared to a year ago, for arguably worse service. some of us in IT are looking at options, because being locked into a service that keeps shooting up in price is a huge risk.

yes it'll be hard to get away from the ecosystem. but with the increasing price, demand for alternatives surges too, and i can't see it taking too long until we get some options.

it was a couple years ago, but when i tried to game on Debian i was shocked by some 4+ year old packages that i wanted to try gaming with, nothing worked.

it's probably better today, but i definitely recommend a very up to date distro for gaming, and arch is literally the most up to date there is. happy with arch myself, except the nvidia issues, if you run an nvidia gpu i don't recommend it just yet (getting better really quickly though)