OneCardboardBox

@[email protected]

This profile is from a federated server and may be incomplete. View on remote instance

OneCardboardBox ,

For backup, maybe a blu-ray drive? I think you would want something that can withstand the salty environment, and maybe resist water. Thing is, even with BDXL discs, you only get a capacity of 100GiB each, so that's a lot of disks.

What about an offsite backup? Your media library could live ashore (in a server at a friend's house). You issue commands from your boat to download media, and then sync those files to your boat when it's done. If you really need to recover from the backup, have your friend clone a disk and mail it to you.

Do you even need a backup? Would data redundancy be enough? Sure if your boat catches fire and sinks, your movies are gone, but that's probably the least of your problems. If you just want to make sure that the salt and water doesn't destroy your data, how about:

  1. A multi-disk filesystem which can tolerate at least 1 failure
  2. Regular utilities scanning for failure. BTRFS scrubs, for example.
  3. Backup fresh disks kept in a salt and water resistant container (original sealed packaging), to swap any failing disk, and replicate data from any good drives remaining.
  4. Documentation/practice to perform the aforementioned disk replacement, so you're not googling manpages at sea.

This would probably be cheapest and have the least complexity.

OneCardboardBox ,

BTRFS should be stable in the case of power loss. That is to say, it ought to recover to a valid state. I believe the only unstable modes are RAID 5/6.

I'd recommend BTRFS in RAID1 mode over mdadm RAID1 + ext4. You get checksumming and scrubs to detect drive failures and data corruptions. You also have snapshotting, in case you're prone to the occasional fat-fingered rm -rf.

OneCardboardBox ,

I wouldn't trust anything like that to the open internet. It would be better to access the system over a VPN when you're outside the network.

OneCardboardBox , (edited )

As others have said, a reverse proxy is what you need.

However I will also mention that another tool called macvlan exists, if you're using containers like podman or docker. Setting up a macvlan network for your containers will trick your server into thinking that the ports exposed by your services belong to a different machine, thus letting them use the same ports at the same time. As far as your LAN is concerned, a container on a macvlan network has its own IP, independent of the host's IP.

Macvlan is worth setting up if you plan to expose some of your services outside your local network, or if you want to run a service on a port that your host is already using (eg: you want a container to act as DNS on port 53, but systemd-resolved is already using it on the host).

You can set up port forwarding at your router to the containers that you want to publicly expose, and any other containers will be inaccessible. Meanwhile with just a reverse proxy, someone could try to send requests to any domain behind it, even if you don't want to expose it.

My network is set up such that:

  • Physical host has one IP address that's only accessible over lan.
  • Containerized web services that I don't want to expose publicly are behind a reverse proxy container that has its own IP on the macvlan.
  • Containerized web services that I do want to expose publicly have a separate reverse proxy container, which gets a different IP on the macvlan.
  • Router has ports 80 and 443 forwarding only to the IP address for my public proxy
OneCardboardBox ,

Not sure if you're able to edit the title, but this doesn't look like FOSS, just open source.

OneCardboardBox ,

Did you mean source-available?

I guess? Always thought there was some pedantic Stallman-esque argument for the differentiation between FOSS and OSS, independent of the Open Source vs Source Available distinction.

OneCardboardBox ,

I know this is a joke, but I couldn't be a programmer without some pedantry. LUnix is actually a real OS! I booted it on my Commodore 64 once.

https://en.wikipedia.org/wiki/LUnix

SSH login without user name? ( docs.gitlab.com )

I was reading GitLab's documentation (see link) on how to write to a repository from within the CI pipeline and noticed something: The described Docker executor is able to authenticate e.g. against the Git repository with only a private SSH key, being told absolutely nothing about the user's name it is associated with....

OneCardboardBox ,

It would have to iterate over all saved keys, which sounds rather inefficient to me and potentially unsafe (timing attacks etc.)

sshd only checks for matches in the user's authorized_keys file, not system wide.

Please help me dial in my espresso.

I'm relatively new to the espresso game and my espresso always tastes a bit sour... please help! I'm using a Breville Barista Express. From what I understand, the sourness is generally because of under extraction. The water seems to be at around 190-200 degrees, so I don't think that's the issue. I've tried to dial in the...

OneCardboardBox ,

How many grams of espresso are coming out at the other end? The rule of thumb is around 2x the mass of coffee in the portafilter. However, that's just a rough guide. Generally, more water -> more extraction -> less sour. Just for experimentation's sake, try adjusting variables like fineness or water, and let the shot time go longer. See how you like the results.

I tried to follow all the rules of espresso. "Only X seconds of brew time", "Only this Y grams of water". I never got a good tasting shot. Then I started experimenting. I have a pretty cheap DeLonghi Dedica, and I began to tailor my shots to how my machine actually works, vs how others told me to do it.

Nowadays, I pull a ~43g shot from 18g of coffee. I have my grinder set to some fineness level that I haven't needed to adjust in months. The shots I pull are always better than most non-specialty coffee shops. Sometimes, I even get a perfect shot that tastes like heaven. It all became better when I stopped focusing on rules and started learning what my machine likes.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • kbinchat
  • All magazines