Fail2ban + key-based SSH + self-hosted WAF if you can spin up another machine == 80% of your Web hosting problems gone

6TiB, backed up to the cloud. So 12TiB in total

Thanks for the comment, that was a good read

Thanks, since the user would need to read write and execute permissions to the directory, I put in chmod 775

Thanks I changed it to chmod 755 and it worked

You can do that with Wireguard and NAT.

Traefik’s marketing as the “Docker reverse-proxy” put me off since I like technologies to stay agnostic of each other (personal preference).

Your arguments are correct, and usually I’d run a separate web server but I suppose for a homelab having less things to manage is great

Indeed, I don’t find NGINX that easy to configure either

I have heard a lot about Envoy proxy from Istio but never looked into it for baremetal usage. I’ll keep an eye out, thanks

It should technically do that already, but as extra insurance I’m running it with the -u bind flag in ENTRYPOINT. The problem was solved with a chmod 755

Thank you, chmod 775 worked

Thank you, I’ll keep that in mind. I didn’t actually mount volumes into the container yet, the problem was solved upon changing to chmod 755

I think ZFS does some advanced stuff which makes it better than just relying on hardware checksums (which have been shown to not be so great)

How about bitrot?

Yeah I’m looking for something like this for Linux desktop

Does it work on desktop? Linux?

Qubes OS doesn’t have GPU acceleration using Virtio-powered interfaces if that’s something you need. Also it’s based on Xen and you are not encouraged to mess around with dom0.

TBH if there’s a way that you can attach to the display output of a VM with a GUI when you start your computer, it will probably fit your use-case perfectly. I haven’t found a method to do this but I think there should be some way to attach directly to the display of a VM after booting up.

I’m an old timer and was recommended tachiyomi a lot, but these days I just go online TBH. Most manga isn’t worth it for me to keep

Those remote access fears can be solved with a wireguard VPN

And I’m running 2 relay nodes. The TOR network desperately needs exit nodes to relieve the bottleneck at the exits, and that’s where I want to help.

Of course, it’s not for everyone, which is why one could just donate to the TOR foundation (or whatever they are called) and that money goes into infrastructure.

I’m not a native speaker, I assumed obfuscate meant hiding the IP address. I mentioned it because you asked.

I didn’t make a new account just for this lol, it’s just that I’m passionate about it.