Affine is a bit weird, and not quite FOSS (source available and you can self-host it following their terms). But it fits a gap no one else quite fills, and I’ve been hosting it for a few people for a while.

I don’t know for sure. They announced it one day, but I haven’t really caught that much public discussion before that.

It might also be more accurate to say they switched the default selection, since you are able to select the MAC solution in the installer of the desktop versions, it’s just that SEL is now the default selection instead off AppArmor.

This was the mail they announced the change in: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/YN4TCBCU4A2V5G2MWR5EWYF46267BO7F/

Safely is a spectrum. I’d argue that as long as you aren’t under active ddos, cloudflare’s stuff isn’t all that useful. For DNS, I’d take a look at https://desec.io/.

SUSE is now on SELinux too.

Made me look at helix, which actually works better for my usecase. So I guess I gotta thank him for that?

This blog took a look at it a while ago. Tl;dr, it’s arch, plus hyperland, plus some packages, plus - the original part - some questionably managed dotfiles.

Also, anything DHH does should be immediately suspect. And him having some of his wealthy friends put some money in a foundation isn’t really an indicator of quality, just networking.

https://マリウス.com/a-word-on-omarchy/

I mean, you can write however you like. But it does kinda give the vibes of it being written like a click bait YouTube speaks.

It’s less any verbosity, and more that the sentence and post structures sound very ai. Not that you’d be the only person that just writes like that, but especially the concluding paragraph sounds exactly like something an LLM would output.

I host several services accessible via the open Web. They are isolated enough that a breach would most likely only compromise that service. They are also kept up to date, and logs are monitored.

There’s always a risk when exposing something, and I am limiting some services to access via VPN because either the data in them is too sensitive, or I don’t trust them to be secure enough.

You probably also aren’t a worthwhile target in most cases.

Or, as honourably mentioned, OpenSuSE, specifically tumbleweed.

Looks like a Clevo Chassis. They’re actually not that uncommon, a lot of smaller ‘laptop manufacturers’ offer them with slight customisation.

I have little love for Canonical, but I wouldn’t go that far. What makes an OS ‘the Windows’ of something is in my eyes the heaps of useless surveillance, which ubuntu lacks.

I’ve been using opensuse tumbleweed for quite some time on my systems, and been pretty happy with it, in case you need an endorsement.

Also, all of them (I’ve seen) have a new account, and all their text output seems LLM generated, with them claiming it’s cause english isn’t their native language and they need LLMs to translate - on that note, that’s suspect to me, cause translating a human written text, at least with dedicated translation services, tends to retain a human structure. This feels more like they’re generating the whole message.

Doesn’t apply here, but some also had a story about “working in X trade for Y years”. It all feels very disingenuous, very much like marketing. I’d be surprised if even half of these projects are still around in two years time.

Rant over, just something that grinds my gears.

I have two live hdds resting on high density foam on top of my server. Will be three soon. I really should get a bigger case…

That might be the case. And you might in fact be perfectly well intentioned (though, as you might have found this community isn’t, on average, very into closed source software).

On the project site, this post, your replies, I have read nothing that sounded like genuinely you. It all reads like marketing. Or, more precisely, as if you have a LLM write/rewrite your responses. This, to me, makes them feel incredibly disingenuous. You might just sound like that naturally. In that case, I’m sorry.

If you want to win over this community, a good avenue would probably be open sourcing your application and arranging for some form of donation.

Edit: Also, you didn’t state that it’s closed source in your first sentence?? Well, you did in the first sentence of the reply to the comment that called out there not being source code on the repo, but the cat was out of the bag at that time.

An unkind observer might suspect the goal to be having the aesthetic of an open source or at least source available project without actually being one.

Websites I use regularly:

• sites I write or maintain myself
• federated social media
• my bank (they have my ID already)
• code forges maintained by others
• a Swiss e-commerce platform, alibaba, local electronics retailers
• YouTube

I suppose such measures might affect retail sites and YouTube, but I can get the stuff I need locally, and being off YouTube, I’ll certainly have the time for it.

Huh, Authentik was what I used before Kanidm. Wasn’t anything wrong with it per se, but there where a lot of moving parts and complexity rhat didn’t really serve a purpose for me.

I thought about kubernetes or proxmox, but I don’t really see any reason to. All my containers are controlled via podman quadlets, and either run on a single machine locally, or on a VPS.

On how you want to slice up the hardware - I feel like there isn’t one right answer, and I’d do whatever feels most comfortable to admin for you. I feel like for homelab workloads, any half-reasonable setup should work fine, just make sure you have good backups.

On SSO - I have never tried Authelia, but am personally very enamoured with Kanidm. It’s very lightweight, and has pretty good default settings.

On reverse proxy - I personally use Caddy, but Traefik is good too, and can do more stuff out of the box. I just mount the certs I need readonly in the container of the service that needs them. Clunky, but works well enough for me.

If the people you want to have access have static, exclusive ip addresses. Which is pretty unusual, these days.