A software developer and Linux nerd, living in Germany. I’m usually a chill dude but my online persona doesn’t always reflect my true personality. Take what I say with a grain of salt, I usually try to be nice and give good advice, though.

I’m into Free Software, selfhosting, microcontrollers and electronics, freedom, privacy and the usual stuff. And a few select other random things as well.

  • 4 Posts
  • 956 Comments
Joined 4 years ago
cake
Cake day: August 21st, 2021

help-circle
  • Yes, that will be an issue. I guess not a technical one, Linux is perfectly able to fetch a token and connect to network shares etc. Not sure how that works with Email and the modern cloud office stuff. But likely, the IT department will have to enforce that policy as well. That’s why I asked if OP has to use software on Windows (11)… Otherwise, if it worked 4 years without issues… maybe there is no issue with Active Directory…



  • hendrik@palaver.p3x.detoSelfhosted@lemmy.worldCertificates...ugh
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    5 days ago

    You could try to debug the permission issue… Like take a note of the current permissions, chmod the certificates to 666 and the parent directories to 777 and see if that works. Then progressively cut them down again and see when it fails. And/or give caddy all the group permissions ssl, acme, certwarden… and then check which one makes it fail or work.


  • Kind of the reason why I quit Netflix. For once it got more expensive each year. And at some point there was less and less of my favorite shows on there, so I’d need to subscribe to a second service for Star Trek… then a third one for all the good stuff that’s Disney… And I don’t even watch that much TV. So instead, I just quit. Maybe one day I’m gonna read a book on a Friday evening 😆 Or the stuff the government forces me to pay for.



  • Sure. I’m not entirely sure how PCIE works these days. But in it good old days we had methods to read pretty much arbitrary memory regions via PCIE or early Thunderbolt(?).

    I just figured it’d be massively complicated to wait for the user to pull something on the screen, do computationally expensive OCR, some AI image detection to puzzle documents back together, and then you’d only get a fraction of what’s really stored on the computer and you’d still need a way to send that information home… When you could just pick a plethora of easy options like read all the files from the harddisk and send just them somewhere. I think it’s far more likely they do some easy and straightforward solution. And it’d be more effective as well.






  • No worries. Your post was well-written. And I’m glad people could offer some advice. Not even the proficient Lemmy users get all of this right all the time. I just figured I’d drop you a comment in case the mods take action, to spare you the effort to also learn about the modlog and how to look up their note… But seems it wasn’t necessary 😄




  • I think whether you do closed source software is a personal choice. Based on considerations of your application. Like money, of if you want to rely on a company and how well they do their job, if it’s still gonna be around in 7 years. If you can customize it enough to suit your needs. Or you base the decision on ideology.

    I’ve been using Yunohost on the NAS. And it’s simple, works well and is pretty reliable, I didn’t get any major issues for many years now. (And in general, community maintained open-source software has served me well. So that’s what I do.)

    Downsides as a proficient Linux user are: You can’t just mess with the config while the automatic scripts also mess with the config. You need to learn how they’re set up and work around that. Hope software has a config.d or overrides directory and put your customizations there. Or something will get messed up eventually. And you can’t just change arbitrary things. The mailserver or SSO or reverse proxy and a few other components are tightly integrated and you’re never gonna be able to switch from postfix to stalwart or something like that. Or retrofit a more modern authentication solution. It is a limiting factor.
    And YunoHost doesn’t do containers, so I doubt it’s what you’re looking for anyway.

    I’m a bit split on the entire promise of turnkey selfhosting solutions. Some of them work really well. And they’re badly needed to enable regular people to emancipate themselves from big tech. Whether you as an expert want to use them is an entirely different question. I think that just depends on application. If you have a good setup, that might be better suited to your needs. And if done right might be very low maintenance as well. So switching to a turnkey solution would be extra work and it might not pay off. Or it does pay off, I think that really depends on the specifics.


  • Isn’t that a Nintendo Switch game? You’d need to install and run an emulator for that, like you did with Yuzu on Windows. I don’t think Yuzu is around anymore, but there are some sucessors, Eden and Citron? I’d install one of those. At least Eden has SteamOS mentioned on it’s homepage. You need to install it, though. The SteamOS or Linux version from their homepage, not copy the entire emulator over from Windows. After that you can transfer the game files and load them into the emulator. Any variant to copy files between computers should work. A windows network share, USB stick, microSD card, a cloud drive or filedrop/sync tool…




  • Not sure if I get your point. Abstraction is a concept used by IT people to deal with complexity. You’ll use Docker containers in order not to have 200 very specific problems and learn about the intricate details of all of them. Or use a turnkey solution because a working day has a finite amount of hours and you can just not care and have somebody else set the XY value of Postgres to 128 because that’s somehow needed for software M on python x.xx… Of course you’re then not going to learn about these things. It is not “bad”, though, in itself to abstract these issues away from you. Same for the other things I mentioned, networking, virtualization. Abstraction there allows to swap out complex things, do things once and in a clean way because it’s easy to miss things without abstraction and you always need to pay attention to a bazillion of specifics. Also helps with backups, deal with issues because things should break within confined layers, punch above one’s weight, security, do something once and roll it out several times…

    I think what you want to avoid is poorly designed or written software. Or poorly done setups. Or not learn about important things. Abstraction is generally something you want, especially with complex things.


  • Maybe try something like YunoHost. That’s a web server Linux distribution. And it’s supposed to take care of the set up and come with somewhat safe/secure defaults. You’d need some kind of server, though. Or run it in a VM to isolate it from your home services. They have PeerTube, Lemmy, PieFed installable with a few clicks. (There are other projects as well, Yunohost isn’t the only option to help with the set up.)

    But yes, some kind of isolation is probably nice with web services. Also from the home network, and from storage with personal data on it.


  • hendrik@palaver.p3x.detoSelfhosted@lemmy.worldOpenWRT router
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    1 month ago

    Yes, OpenWRT lasts way longer. Main thing that ends support is hardware requirements. My old devices with only a few megabytes of memory got dropped eventually. Not because of the chipset, a modern OpenWRT would just not fit any longer. I rarely see other reasons for them to discontinue updates.