It’s no longer open source. Big Deal in my books.
Errar es humano. Propagar errores automáticamente es #devops
It’s no longer open source. Big Deal in my books.
Vault features are cool. I really like it. But with Hashicorp now there is this big risk of “rug pulling” regarding its license.
The wise thing, in my opinion, is to avoid this company as much as possible.
If your comments have been federated to other instances, they will be there until they are deleted locally. If someone clicks on your user profile, they will get a DNS error if the domain is no longer there. Images in the comments pointing to you instance will be broken too. Nothing terrible actually happens.
Migrating accounts a la Mastodon is not happening soon in Lemmy.
My advice is: Go on and save some money.
Sorry to read that.
I’ve dd
ed an external drive instead of an SD card once by mistake. I’ve never felt more stupid than that day.
It’s running NetBSD, isn’t it?
Some security tips:
Firewall should block everything by default, and you start allowing incoming and outgoing connections when you need them or if something fails.
Disable passwords and root access in ssh daemon.
Use fail2ban or something similar to block bots failing to log-in.
Use random long passwords for everything (eg: like databases). And put then in a password manager. If you can remember the database password, it’s not strong enough. If you can remember the admin password for a public web service, it’s weak.
Don’t repeat the passwords. Everything should have its own random long password.
.env files and files with secrets should be readable only by its service user. Chmod them to 400.
Monitor logs from time to time to see if something funny is happening.
Random ports are easy to discover and there are tools to discover what service is behind a port.
It’s annoying for the legitimate user and easy to bypass by an actual attacker.
Also, if you use a random port above 1024 it could be a security issue since any user could star listening if the legitimate process crashes.
See this
Nothing illegal is being discussed.
But I’m happy to talk about Jolly Roger.
Wow! this is exactly what I needed. Although, I didn’t exactly ask for it.
Thank you very much
Thanks to both of you.
I had the hope that DMARC, SPF and DKIM was stuff I could just ignore if not sending email. It seems I was wrong about that.
I’ve got 3 tricks for ya:
You may have one psql server per region and then use Bucardo to synchronize them.
I’ve never done this in production, so take my advice with a grain of salt.
Since you posted it in a selfhosting community, this is the feeling I get:
tmux gang be like: ctrl-b, c
screen boomers be like: ctrl-a, c
wrong: you press esc multiple times to make sure you are in normal mode.
You’re right.
I used the phrase “wrong ideas” precisely to evoke that sentiment. Stallman’s ideas may be “wrong” for us, for good reasons. But that doesn’t make them objectively wrong. And he doesn’t seem to cross any legal boundary using his blog to defend some ideas we don’t like.
And neither should we mix the work of FSF with Stallman’s weird blog posts.
The things you say actively reflect on your employer and future employers.
why?
Imagine a interview where employer tries to know every aspect of your personality and ideas, before hiring you.
Seems quite impossible.
For a celebrity like Stallman seems easy. But imagine checking the background of a random candidate just to see if she posted something bad years ago. And rejecting her application because of a post defendig the wrong ideas.
I agree we already have courts and police. If he did something illegal, there’s a course of action there.
Dammit I cannot unsee it now.
I will keep saying Liñux now.
VPS + VPN is the cheapest option I believe for the services. It doesn’t have to be “elaborated”.
You can port-forward public VPS ports to your private addresses/ports. If you don’t want to use
iptables
you can usefirewalld
.The only “but” will be latency. For gaming it won’t perform as you may need.