Lingolol

Lanie Molinar CarmeloI'm curious to hear what others are <a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHosting</a>! Here's my current setup:Hardware & OS<ul><li>Hardware: <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RaspberryPi500</a> (8 GB RAM, 512 GB SD card) <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RPi</a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RPi500</a> <a href="https://allovertheplace.ca/tags/SingleBoardComputers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SingleBoardComputers</a> <a href="https://allovertheplace.ca/tags/HomeLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HomeLab</a></li><li>OS: <a href="https://allovertheplace.ca/tags/Stormux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Stormux</a>, an accessible <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> distro based on <a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ArchLinuxARM</a> <a href="https://allovertheplace.ca/tags/LinuxAccessibility" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LinuxAccessibility</a> <a href="https://allovertheplace.ca/tags/AccessibleTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AccessibleTech</a></li></ul>Infrastructure & Networking<ul><li>Dashboard: <a href="https://allovertheplace.ca/tags/Glance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Glance</a> (<a href="https://allovertheplace.ca/tags/Docker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Docker</a>) <a href="https://allovertheplace.ca/tags/DockerApps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DockerApps</a></li><li>Reverse Proxy: <a href="https://allovertheplace.ca/tags/Caddy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Caddy</a></li><li>DNS: <a href="https://allovertheplace.ca/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloudflare</a></li><li>Domain Registrar: <a href="https://allovertheplace.ca/tags/Porkbun" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Porkbun</a></li><li>Networking & Remote Access: <a href="https://allovertheplace.ca/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tailscale</a> (non-Docker), love its SSH agent and magic DNS features. <a href="https://allovertheplace.ca/tags/NetworkSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkSecurity</a></li></ul>Security & Monitoring<ul><li>Ad Blocking: <a href="https://allovertheplace.ca/tags/AdGuardHome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AdGuardHome</a> (non-Docker). Previously used PiHole but find AdGuardHome slightly faster. <a href="https://allovertheplace.ca/tags/PrivacyTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PrivacyTools</a></li><li>Server Monitoring: <a href="https://allovertheplace.ca/tags/Beszel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Beszel</a> (non-Docker). Tried Grafana/Prometheus/Alertmanager (accessible but overkill) and Netdata (poor screen reader accessibility). Beszel isn't perfect but best compromise so far. <a href="https://allovertheplace.ca/tags/ServerMonitoring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ServerMonitoring</a></li><li>Server Overview: <a href="https://allovertheplace.ca/tags/Cockpit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cockpit</a> (non-Docker)</li><li>Security Tools: <a href="https://allovertheplace.ca/tags/Fail2ban" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fail2ban</a>, <a href="https://allovertheplace.ca/tags/FirewallD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FirewallD</a>, <a href="https://allovertheplace.ca/tags/ClamAV" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ClamAV</a>, and <a href="https://allovertheplace.ca/tags/Rkhunter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rkhunter</a> (non-Docker). Tried CrowdSec but couldn't get it working on Stormux. <a href="https://allovertheplace.ca/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a></li><li>Service Uptime Monitoring: <a href="https://allovertheplace.ca/tags/UptimeKuma" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UptimeKuma</a> (Docker), accessible and easy to use. <a href="https://allovertheplace.ca/tags/MonitoringTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MonitoringTools</a></li></ul>Authentication & Identity Management<ul><li>Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far! </li><li>LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well! <a href="https://allovertheplace.ca/tags/AuthenticationTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AuthenticationTools</a> <a href="https://allovertheplace.ca/tags/IdentityManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IdentityManagement</a></li></ul>Productivity & Personal Tools<ul><li>Docker Management: <a href="https://allovertheplace.ca/tags/Dockge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dockge</a> (Docker). More accessible than Portainer; main issue is built-in terminal isn't readable with screen readers. <a href="https://allovertheplace.ca/tags/DockerCompose" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DockerCompose</a></li><li>Docker Logs Viewer: <a href="https://allovertheplace.ca/tags/Dozzle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dozzle</a> (Docker), great web interface and easy searching.</li><li>Git Hosting: <a href="https://allovertheplace.ca/tags/Forgejo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Forgejo</a> (non-Docker), my personal Git server. <a href="https://allovertheplace.ca/tags/GitServer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitServer</a></li><li>Backups: <a href="https://allovertheplace.ca/tags/IDrive" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IDrive</a> (non-Docker), backs up all my devices easily. <a href="https://allovertheplace.ca/tags/BackupSolutions" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BackupSolutions</a></li><li>Notes: <a href="https://allovertheplace.ca/tags/Joplin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Joplin</a> server (Docker). Accessibility improving; love the VSCode extension. <a href="https://allovertheplace.ca/tags/NoteTakingApps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NoteTakingApps</a></li><li>Bookmarks: <a href="https://allovertheplace.ca/tags/Linkding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linkding</a> (Docker). Accessible bookmark manager with good browser extension support. <a href="https://allovertheplace.ca/tags/BookmarkManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BookmarkManager</a></li><li>Recipes: <a href="https://allovertheplace.ca/tags/Mealie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mealie</a> (Docker), starting to learn cooking! 🍳📖  <a href="https://allovertheplace.ca/tags/CookingApps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CookingApps</a></li><li>RSS Feeds: <a href="https://allovertheplace.ca/tags/Miniflux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Miniflux</a> (non-Docker), excellent accessibility. Originally wanted better podcast support but other options had major accessibility issues. <a href="https://allovertheplace.ca/tags/RSSReader" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSSReader</a></li><li>Automation & Workflows: <a href="https://allovertheplace.ca/tags/N8N" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#N8N</a> (Docker). Haven't explored deeply yet—open to ideas! <a href="https://allovertheplace.ca/tags/AutomationTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AutomationTools</a> <a href="https://allovertheplace.ca/tags/WorkflowAutomation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorkflowAutomation</a></li><li>Pastebin Service: <a href="https://allovertheplace.ca/tags/PrivateBin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PrivateBin</a> (non-Docker). Considering alternatives or CLI tool for easier console access. <a href="https://allovertheplace.ca/tags/PastebinAlternative" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PastebinAlternative</a></li><li>File Sharing & Editing: <a href="https://allovertheplace.ca/tags/Samba" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Samba</a> (non-Docker), easy file management from my Windows 11 mini PC. <a href="https://allovertheplace.ca/tags/FileSharing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FileSharing</a> <a href="https://allovertheplace.ca/tags/Windows11" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows11</a></li><li>Search Engine: <a href="https://allovertheplace.ca/tags/SearXNG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SearXNG</a> (non-Docker), accessible and searches multiple engines at once. <a href="https://allovertheplace.ca/tags/PrivacySearchEngine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PrivacySearchEngine</a></li><li>IRC Client: <a href="https://allovertheplace.ca/tags/TheLounge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TheLounge</a> (non-Docker). Some accessibility issues but best I've found so far for always-connected IRC. <a href="https://allovertheplace.ca/tags/IRCClient" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IRCClient</a></li><li>Read Later Service: <a href="https://allovertheplace.ca/tags/Wallabag" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Wallabag</a> (Docker). Biggest issue is Wallabagger Chrome extension doesn't work for me yet. <a href="https://allovertheplace.ca/tags/ReadItLater" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReadItLater</a></li></ul>Notifications & Development Workflow<ul><li>Notifications via: <a href="https://allovertheplace.ca/tags/Ntfy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ntfy</a> (Docker) and Zoho's ZeptoMail (<a href="https://allovertheplace.ca/tags/Zoho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zoho</a>)</li><li>Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. <a href="https://allovertheplace.ca/tags/VSCodeRemote" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VSCodeRemote</a></li></ul>Accessibility Focus ♿️🖥️Accessibility heavily influences my choices—I use a screen reader full-time (<a href="https://allovertheplace.ca/tags/ScreenReader" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ScreenReader</a>), so I prioritize services usable without sight (<a href="https://allovertheplace.ca/tags/InclusiveDesign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InclusiveDesign</a>, <a href="https://allovertheplace.ca/tags/DigitalAccessibility" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DigitalAccessibility</a>). Always open to discussing accessibility experiences or recommendations!I've also experimented with:<ul><li>Ollama (<a href="https://allovertheplace.ca/tags/Ollama" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ollama</a>): Not enough RAM on my Pi.</li><li>Habit trackers like Beaver Habit Tracker (<a href="https://allovertheplace.ca/tags/HabitTracking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HabitTracking</a>): Accessibility issues made it unusable for me.</li></ul>I don't really have a media collection, so no Plex or Jellyfin here (<a href="https://allovertheplace.ca/tags/MediaServer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MediaServer</a>)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 😄What's your setup like? Any cool services you'd recommend I try?<a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHosted</a> <a href="https://allovertheplace.ca/tags/LinuxSelfHost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LinuxSelfHost</a> <a href="https://allovertheplace.ca/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://allovertheplace.ca/tags/TechCommunity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechCommunity</a> <a href="https://allovertheplace.ca/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://allovertheplace.ca/tags/TechDIY" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechDIY</a><a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@selfhost</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@selfhosted</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@selfhosting</a>

samenome"Don't use shorewall anymore, it's old" my stupid brain said. And who wants to be 'old'? Not me. No. I am hip, chic, sprightly-brained. I also live a very happy rich fantasy existence, keep that pin away from my bubble!DuckDuckGo: 'nftables replacement for shorewall' gets: "Just accept that Firewalld is a major player, and that iptables is on its way out with nftables being more robust and consistent. And nftables is the default Firewalld back end. Firewalld is good once you get used to what it's doing. And it's the default on Fedora/CentOS/RHEL and SUSE/openSUSE Leap/Tumbleweed. "I am always using <a href="https://aus.social/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a>, (because, ahem, old? I'd dare not say) including on this firewall box. But, there's a firewalld package. Probably best to go with the flow ....So I install firewalld, then muck about with dnsmasq, then turn back to fiirewalld, which seems enabled without me asking consciously asking for it (?) oh well ...Then I get to: Machine: A zone called 'work' exists. Me: nnah, not here in my shed it doesn't. <a href="https://aus.social/tags/firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewall</a>-cmd --delete-zone=work --permanent Machine: Error: BUILTIN_ZONE: 'work' is built-in zoneWhat!? Say the fuck WHAT? "work"??? What fresh hell is this? Am I not allowed to be away from work even here at my shed with the magpies and roos?Christ on a bike. Well I'll just get my bigger stick, and do: <a href="https://aus.social/tags/rm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rm</a> /etc/firewalld/zones/work* and restart firewalld. ... It is back ... 🤐 Machine: Error: BUILTIN_ZONE: 'work' is built-in zone Oh. ComeTheFuckON!<a href="https://aus.social/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a>, unless something changes my mind in the night, you are headed for the bin in the morning. And some unasked-for advice from me to the <a href="https://aus.social/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a> people: You MIGHT, just might, have permanent built-ins for 'drop' and 'bridge', ... perhaps. But 'work'? Fuck off to the place with the fuckoff sign, read it carefully, then fuck off further, yes and your friends too. Example zones? fine. Recipes about common 'internal'/'dmz'/'external' arrangements? also fine. Helpful in fact. Demanding that I have a "work" zone??? 'WORK' <a href="https://aus.social/tags/JFC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JFC</a> <a href="https://aus.social/tags/cunts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cunts</a>To think that I fought the good fight for the cultural insensitivity of <a href="https://aus.social/tags/DMZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DMZ</a>. (oh yeah - that little fucker? built-in too, ofCourseItIs) What a waste of my time. <a href="https://aus.social/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a> people: If you had a four-port PCbox configured as a debian <a href="https://aus.social/tags/firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewall</a>, what would you use to make the configuration of <a href="https://aus.social/tags/nftables" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nftables</a> easy/safe/happy/fucker-free?

Hacker Public RadioNew Episode: hpr4303 :: TIL two things to do with firewalldYou can't use 10.0.0.0, and if you restart firewalld, you should restart your podman containers.Hosted by dnt on Wednesday, 2025-01-29 is flagged as Clean and is released under a CC-BY-SA license.Tags: <a href="https://infosec.exchange/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a>, <a href="https://infosec.exchange/tags/podman" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#podman</a>.Today on the <a href="https://infosec.exchange/tags/HackerPublicRadio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HackerPublicRadio</a> <a href="https://infosec.exchange/tags/Community" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Community</a> <a href="https://infosec.exchange/tags/Podcast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Podcast</a><a href="https://infosec.exchange/tags/HPR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HPR</a> ❤️ <a href="https://infosec.exchange/tags/CreativeCommons" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CreativeCommons</a><a href="https://hackerpublicradio.org/eps/hpr4303/index.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hackerpublicradio.org/eps/hpr4303/index.html</a>

Mac_CZ 🇦🇶Any firewalld/IPv6 experts here? How can I make firewalld to forward packets to internal network for some destination address/port. <a href="https://mastodon.macsnet.cz/tags/IPv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv6</a> <a href="https://mastodon.macsnet.cz/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a>

ricardo :mastodon:<a href="https://fosstodon.org/tags/Firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firewalld</a> 2.1 Released with Improved Network Security<a href="https://debugpointnews.com/firewalld-2-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://debugpointnews.com/firewalld-2-1/</a>

GNU/Linux.chIPSets mit firewalldMit IPSets lässt sich die Konfiguration von firewalld deutlich vereinfachen. <a href="https://social.anoxinon.de/tags/Firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firewall</a> <a href="https://social.anoxinon.de/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a> <a href="https://social.anoxinon.de/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a><a href="https://gnulinux.ch/ipsets-mit-firewalld" rel="nofollow noopener noreferrer" target="_blank">https://gnulinux.ch/ipsets-mit-firewalld</a>

Recent searches

Search options

Administered by:

Server stats:

#firewalld