@TCB13@lemmy.world cover

This profile is from a federated server and may be incomplete. View on remote instance

TCB13 , to Selfhosted in Alternatives to CloudFlare?
@TCB13@lemmy.world avatar

@foremanguy92_ ,

Step 1: get a cheap VPS, or even a free one (https://www.oracle.com/cloud/free/)

Step 2: If you've a static IP at home great, if you don't get a dynamic DNS from https://freedns.afraid.org/ or https://www.duckdns.org/

Step 3: Install nginx on the VPS and configure it as reverse proxy to your home address. Something like this:

server {
    listen 80;
    server_name example.org; # your real domain name you want people to use to access your website
    location / {
        proxy_pass http://home-dynamic-dns.freeprovider... # replace with your home server IP or Dynamic DNS.
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect off;
    }
}

Step 4: Point your A record of example.org to your VPS.

Step 5: there's a potential security issue with this option: https://nginx.org/en/docs/http/ngx_http_realip_module.html#set_real_ip_from and to get around this you can do the following on the home server nginx config:

http {
(...)
        real_ip_header    X-Real-IP;
        set_real_ip_from  x.x.x.x; # Replace with the VPS IP address.
}

This will make sure only the VPS is allowed to override the real IP of the client.

Step 6: Once your setup works you may increase your security by using SSL / disabling plain HTTP setup letsencrypt in both servers to get valid SSL certificates for real domain and the dynamic DNS one.

Proceed to disable plain text / HTTP traffic. To do this simply remove the entire server { listen 80 section on both servers. You should replace them with server { listen 443 ssl; so it listens only for HTTPs traffic.

Step 7: set your home router to allow incoming traffic in port 443 and forward it into the home server;

Step 8: set the home server's firewall to only accept traffic coming from outside the LAN subnet on port 443 and if it comes from the VPS IP. Drop everything else.


Another alternative to this it to setup a Wireguard tunnel between your home server and the VPS and have the reverse proxy send the traffic through that tunnel (change proxy_pass to the IP of the home server inside the tunnel like proxy_pass http://10.0.0.2). This has two advantages: 1) you don't need to setup SSL at your home server as all the traffic will flow encrypted over the tunnel and 2) will not require to open a local port for incoming traffic on the home network... however it also has two drawbacks: you'll need a better VPS because WG requires extra processing power and 2) your home server will have to keep the tunnel connected and working however it will fail. Frankly I wouldn't bother to setup the tunnel as your home server will only accept traffic from the VPS IP so you won't gain much there in terms of security.

TCB13 , to Selfhosted in Fully Virtualized Gaming Server?
@TCB13@lemmy.world avatar

The technology has "been there" for a while, it's trivial do setup what you're asking for, the issue is that games have anti cheat engines that will get triggered by the virtualization and ban you.

TCB13 , to Technology in HP bricks ProBook laptops with bad BIOS delivered via automatic updates — many users face black screen after Windows pushes new firmware
@TCB13@lemmy.world avatar

User error, should've got an EliteBook instead of that cheaper thing. :P

TCB13 , to Technology in HP bricks ProBook laptops with bad BIOS delivered via automatic updates — many users face black screen after Windows pushes new firmware
@TCB13@lemmy.world avatar

The irony here is that if you've an HP laptop you'll still need to download certain drivers from HP to get things to work at 100%, for instance you may get all the hardware working after running windows update but your special brightness or wtv keys won't work unless you go into HP's website and download a thing.

TCB13 , to memes in It'll end up as "Vote stupid parties, win stupid prices"
@TCB13@lemmy.world avatar

🌈 Awww how can one not love this communist lemmy 🌈

TCB13 , to Selfhosted in just bought a Nanode 1GB from Linode
@TCB13@lemmy.world avatar
TCB13 , to memes in It'll end up as "Vote stupid parties, win stupid prices"
@TCB13@lemmy.world avatar

So goddamn sick of communist populists disguised as middle ground socialists. Goes both ways.

TCB13 , to Selfhosted in Is RAID1 over USB Reliable?
@TCB13@lemmy.world avatar

Well, nothing is reliable over USB type A. If you don't want to DIY you can get a USB JBOD with type-c like this one or that one or this cheaper one. They'll get the job done for a price. :)

However, there are easy ways to get reliable SATA ports from m2 slots that your framework has. NVME to 6 SATA ports: https://www.aliexpress.com/item/1005004263885851.html

To power the disks you can use ANY standard ATX power supply (get something brand-gold second hand for 20$). To make sure the PSU stays ON, just plug a wire between the green and any black wire.

Another option for power is to get a cheap 12V power supply and a step down DC/DC to provide 5V. If you don't have it a SATA cable like this is helpful. Simply cut the white plug and attach the red cable (5v) to the output of the DC/DC and the yellow one (12V) directly to the power supply.

There's also these dual output power supplies that you can regulate to 12v+5v but frankly I would just go for the option above as it will be safer.

Make sure you check every voltage and polarity before plugging anything into your power supply!!

TCB13 , to Technology in Google Cloud accidentally deletes a financial institution account due to ‘unprecedented misconfiguration’
@TCB13@lemmy.world avatar

Excellent explanation, however, technically it does not constitute an "odd spot." Rather, it represents a "100% acceptable and evident position" as it brings benefits to all stakeholders, from accounting to the CEO. Moreover, it is noteworthy that investing in services or leasing arrangements increases expenditure, resulting in reduced tax liabilities due to lower reported profits. Compounding this, the prevailing high turnover rate among CEOs diminishes incentives for making significant long-term investments.

In certain instances, there is also plain corruption. This occurs when a supplier offering services such as computer and server leasing or software, as well as company car rentals, is owned by a friend or family member of a C-level executive.

TCB13 , to Privacy in Proton Mail Discloses User Data Leading to Arrest in Spain
@TCB13@lemmy.world avatar

now, imagine if this user were using Gmail instead of Proton.

Now imagine if the user was using Gmail + PGP... same end result. Proton delivered no extra value whatsoever.

TCB13 , (edited ) to Privacy in Proton Mail Discloses User Data Leading to Arrest in Spain
@TCB13@lemmy.world avatar

And then I am the one exaggerating... I'll say it again, Proton is just another company that managed to find clever ways to profit from a group of people who value things such as "privacy".

They're just a very large marketing effort with little to nothing to show but everyone is convinced they're actually protecting users while they keep pushing proprietary / half open and non standard stuff as solutions for problems already solved with truly open tools, standards and protocols.

TCB13 , to Selfhosted in Here is what 6 decommissioned servers looks like. My Jellyfin will be very happy
@TCB13@lemmy.world avatar

With great power...

TCB13 , to Open Source in Stirling-PDF: Locally hosted web application that allows you to perform various operations on PDF files
@TCB13@lemmy.world avatar

This is a very cool project, but it would be cool to see it all in JS / client side instead of depending on a server-side Java powered component.

TCB13 , to Privacy in The Best Secure Email Providers in 2024
@TCB13@lemmy.world avatar
TCB13 , to Linux in text clarity on windows is so good, can I get the same on linux?
@TCB13@lemmy.world avatar

You will never get the same font rendering on Linux as on Windows as Windows font rendering (ClearType) is very strange, complicated and covered by patents.

Font rendering is also kind of a subjective thing. To anyone who is used macOS, windows font rendering looks wrong as well. Apple's font rendering renders fonts much closer to how they would look printed out. Windows tries to increase readability by reducing blurriness and aligning everything perfectly with pixels, but it does this at the expense of accuracy.

Linux's font rendering tends to be a bit behind, but is likely to be more similar to macOS than to Windows rendering as time goes forward. The fonts themselves are often made available by Microsoft for using on different systems, it's just the rendering that is different.

For me, on my screens just by installing Segoe UI and tweaking the hinting / antialiasing under GNOME settings makes it really close to what Windows delivers. The default Ubuntu font, Cantarell and Sans don't seem to be very good fonts for a great rendering experience.

The following links may be of interest to you:

  • All
  • Subscribed
  • Moderated
  • Favorites
  • kbinchat
  • All magazines