• 1 Post
  • 634 Comments
Joined 3 years ago
cake
Cake day: June 17th, 2023

help-circle







  • Tqilscale makes it easy, but Tailscale moved their servers from Canada to the USA a long while ago, and so with the USA being what it is right now I removed tailscale and configured wireguard. Hardest part of wireguard was just setting up firewall rules to masquerate and port forward, the rest was pretty easy, just time consuming






  • I thought there was a table method of “destruction”. Like you delete or destroy the table of allocation. Even though the data is on the SSD, its not contiguous like HDD and so its spread into bits everywhere. However failing that, leave them unplugged (unpowered) and in 70°C plus heat, the bits will lose their electrons rapidly.



  • I have openSUSE on my main machine, with SELinux. They are more security focused by default than some other distros.

    Firewall on by default, SELinux enforcing by default, sudo needs root password-not just passwordless or same user password like some distros. There’s a YAST GUI hardening App so you can see what passes best security practise and what needs attention. Zypper has various patch commands so you see a list of what patches are available, their critical/recommended status, and weather they are installed or unneeded for your setup. Also ability to apply patches by CVE numbers.

    SELinux can be frustrating initially, until you get used to how it works. I.e. I setup shared network folders but couldn’t see data in some folders, it was because copying files into the folder to be served doesn’t automatically give access over the share, there needs to be SEL policy assigned to the files which you establish the policy and then can apply to all files in the folder.



  • NixOS gives you a declarative build from a config file, so you can reproducibly deploy the same system, without worry of a system using different dependencies.

    MicroOS does something similar in that you can first boot from a config file and the system builds, including services and applications.


  • BCsven@lemmy.catoSelfhosted@lemmy.worldRaspberry Pi 4B
    link
    fedilink
    English
    arrow-up
    2
    ·
    21 days ago

    Yes, I bought a rocketfish drive enclosure years back, so dropped a drive in that, and attached vias USB. Never had issues with it.

    Assign as data drive in Openmediavault.

    Openmediavault had some plugins and settings to set folders2ram so that the initial SDcard OS is writting to RAM instead of constant writes to the SDcard.



  • BCsven@lemmy.catoSelfhosted@lemmy.worldRaspberry Pi 4B
    link
    fedilink
    English
    arrow-up
    9
    ·
    22 days ago

    There are some sites dedicated to suggestions, or if you download the pi image burner tool it has a bunch of OS suggestions in the menu, like Pihole, Kodi media box, home assistant, etc.

    I have a few running. One was setup as NAS and dlna music server using OpenMediaVault, one is a Volumio music player, my other one is Home assistant.

    If you like old 80s-90s games there is RetroPi.

    Too many choices really :)