Right? I’ve been using NextCloud/OwnCloud since ~2015. It’s a very standard LAMP app, nothing fancy going on at all. Give it enough memory and you’ll never have any problems, same as any other web service.
Right? I’ve been using NextCloud/OwnCloud since ~2015. It’s a very standard LAMP app, nothing fancy going on at all. Give it enough memory and you’ll never have any problems, same as any other web service.
I did it back in 2020 when we all had nothing better to do. Got as far as installing X11 and Openbox, and halfway through setting up the toolchain for Firefox.
It was fun - the kind of fun digging a big hole is. It’s not for everybody, but I sort of enjoyed it.
It’s fine. RAID is not a backup. I’ve been running simple mirrors for many years and never lost data because I have multiple backups. Focus on offsite and resilient backups, not how many drives can fail in your primary storage device.
Not sure how to do that in docker, I’ve run mine as a plain old PHP-FPM site for years and years. It might be something that can be tweaked using config files or environment variables, or might require building a custom image.
ClamAV is slow and doesn’t catch the nastiest of malware. Its entire approach is stuck in 2008. It’s better than nothing for screening emails, but for a private file store it won’t help much considering that you’ll already have the files on your system somewhere. And most importantly, it slows down file uploads 10x and increases CPU load substantially. The only good reason to use ClamAV for nextcloud is if you will be sued if you don’t!
It needs some tweaks to be snappy. The defaults are really bad.
This was my setup from about four years ago. Other than moving suricata elsewhere, it’s largely the same. Worth a shot if it’s something you’re into!
https://nbailey.ca/post/linux-firewall-ids/
OpenBSD is also great, I’m just more familiar with the Linux tools. All the required tools are in the base image, and they have a great official guide:
Yep. Firewall, routing, dhcp, dns, everything you’d expect from a gateway device. Plain Debian (or really any distro) can do it all. With a 1gbps bi-directional connection fully saturated it will run at about 10% cpu on my very crappy low power Celeron CPU.
Plus, there’s no web UI full of janky and insecure CGI scripts to exploit, and software updates are forever (well, until x64 is deprecated, so basically forever).
IPtables on Debian because I like my life to be boring and unchanging.
For about a year I was running a full out of band IPS on my network. My core switch was set up with port mirroring to spit out a copy of all traffic on one port so that my Suricata server could analyze it. Then, this was fed into ElasticSearch and a bunch of big data crap looked for anomalies.
It was cool. Basically useless because all it did was complain about the same IP crawler bots as my nginx logs. But fun to setup and ultimately good for my career lol.
Not an arch user, but it’s possible they moved dbus to a user scoped unit now. Might be possible to start it like this (or something similar)
systemctl —user start dbus.service
Most desktop environments you just hit alt+f2 to activate the launcher which lets you run any command you want
Yeah, all things considered this is a good case of proper segmentation, working security controls, and good incident response & crisis communication. Compare this to LastPass to illustrate the difference in how it was handled.
I use plain old bash with the plain old .bashrc that ships with Debian. I’ll bolt on a git-branch-aware function into the prompt here and there, but that’s about it.
Why? I ssh into a few dozen machines most days and my shitty little lizard brain can’t deal with everything being different on each box. So as much as I appreciate zsh, powerline plug-ins, all that glitzy stuff, I’ll be a late adopter when it comes to plain old Debian stable…
I’ll never participate in one of the “master race” communities because of the chronically icky association with fash shit. I get it, it’s an old reddit-ey joke from like 2011, but it’s undeniable that the name has a very strong undertone of white supremacy.
Moving away from the incumbent social networks is our chance to create a new culture without that baggage.
Yeah it works surprisingly well. I installed Gentoo on a 2005 era laptop a few years ago and had to keep adding zswap until Rust could compile for Firefox. Iirc it took about 12G of zswap to get it working, but it wasn’t too bad overall.
Honestly, you’re not going to have a lot of luck with recent games. The sandybridge i5’s were great back in the day but their time has come. I had a 2600 for a looong time but it’s been out to pasture for a couple years now.
Check out the “patientgamers” communities, they like to play older games that would run a lot smoother on your hardware.
If it was installed with tasksel that would be a good way to remove any dependancies like lightdm as well.
Could always whitebox it with Debian, nftables, dnsmasq, hostapd, etc. on an old mini PC if it has two NICs…
Taking this opportunity to personally thank you for making a good logo, I absolutely love the Debian swirl! There are so many boring geometric or single-letter logos out there, the details and texture of the swirl is just so good.
I don’t need artificial intelligence in my terminal. Do you know how many times some troll has posted about “rm -fr /” on Reddit and other shitty forums, which then gets gobbled up and laundered by LLMs? Not letting that anywhere near my prod servers with valuable data.