InEnduringGrowStrong@sh.itjust.works

  • 0 Posts
  • 19 Comments
Joined 1 year ago
Cake day: June 22nd, 2023
  • InEnduringGrowStrong@sh.itjust.works@sh.itjust.workstoRetroGaming@lemmy.world•Good games to talk over?English
    31·
    7 months ago

    Hey the dialogue in DOOM is great.

    I’m assuming you’re OK with single player games?

    Anyway.
    Titanfall 2 campaign is pretty tight, although short.

    Outer wilds is definitely something where you can talk all the time while you uncover the mysteries of its universe. It’s not action oriented, but flying around at space finding clues of what’s happening. Do NOT look for spoilers, once you know everything it’s pretty much done.

    Castle Crashers is a fun co-op where you can banter all you want. Don’t know how fun it is to watch, I never watch, but you buddie can join in.

  • InEnduringGrowStrong@sh.itjust.works@sh.itjust.workstoSelfhosted@lemmy.world•Do you run a private CA? Could you tell me about your certificate setup if you do?English
    2·
    7 months ago

    I run a private CA for client SSL.
    For traditional server SSL I just use let’s encrypt, although I already have the domain (less than $10 a year) for my public facing stuff, and just use a subdomain of that one for my homelab.

    I have a container with openssl for the private CA and generating user certs as well as renewing the let’s encrypt ones. I just use openssl without anything fancy.
    The output folder is only mounted rw in that one container
    I only ever mount the subfolders in read-only in other containers that need those certs.
    All these containers are running on the same server so I don’t even have to copy anything around, the containers don’t even need connectivity between them, it’s just mounted where needed.

  • InEnduringGrowStrong@sh.itjust.works@sh.itjust.workstoSelfhosted@lemmy.world•OwnCloud and NGinx = untrusted domain = sadfaceEnglish
    4·
    7 months ago

    in nginx:

    server {
...
location / {
    ...
    proxy_pass https://redacted.......;
    proxy_pass_request_headers on;
    proxy_pass_header   Set-Cookie;
    proxy_set_header HOST $host;
    proxy_set_header Referer $http_referer;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Host $server_name;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
...
  }
}

    I think the was a trusted proxy setting in owncloud itself that needed to be set too, or maybe I’m thinking of another service.

  • InEnduringGrowStrong@sh.itjust.works@sh.itjust.workstoSelfhosted@lemmy.world•VMs or containers?English
    1·
    1 year ago

    Yea I’ve been running “core” in docker-compose and not the “supervised” or whatever that’s called.
    It’s been pretty flawless tbh.
    It’s running in docker-compose in a VM in proxmox.
    At first, it was mostly because I wanted to avoid their implementation of DNS, which was breaking my split-horizon DNS.

    Honestly, once you figure out docker-compose, it’s much easier to manage than the supervised add-on thing. Although the learning curve is different.
    Just the fact that your add-ons don’t need to go down when you upgrade hass makes this much easier.

    I could technically run non-hass related containers in that docker, but the other important stuff is already in lxc containers in proxmox.
    Not everything works in containers, so having the option to spin a VM is neat.

    I’m also using PCI passthrough so my home theater/gaming VM has access to the GPU and I need a VM for that.

    Even if they only want to use k8s or dockers for now, having the option to create a VM is really convenient.