Findmysec @ Findmysec @infosec.pub

Posts

12

Comments

222

Joined

1 yr. ago

Not needing Kubernetes is a broad statement. It allows for better management of storage and literally gives you a configurable reverse-proxy configured with YAML if you know what you're doing.

OP please forward this email and your story to Louis Rossman

Fail2ban + key-based SSH + self-hosted WAF if you can spin up another machine == 80% of your Web hosting problems gone

6TiB, backed up to the cloud. So 12TiB in total

Thanks for the comment, that was a good read

Thanks, since the user would need to read write and execute permissions to the directory, I put in chmod 775

Thanks I changed it to chmod 755 and it worked

You can do that with Wireguard and NAT.

Traefik's marketing as the "Docker reverse-proxy" put me off since I like technologies to stay agnostic of each other (personal preference).

Your arguments are correct, and usually I'd run a separate web server but I suppose for a homelab having less things to manage is great

Indeed, I don't find NGINX that easy to configure either

I have heard a lot about Envoy proxy from Istio but never looked into it for baremetal usage. I'll keep an eye out, thanks

It should technically do that already, but as extra insurance I'm running it with the -u bind flag in ENTRYPOINT. The problem was solved with a chmod 755

Thank you, chmod 775 worked

Thank you, I'll keep that in mind. I didn't actually mount volumes into the container yet, the problem was solved upon changing to chmod 755

This is a very useful trick, thanks.

The problem was with the chmod, I changed it to include execute permissions for the user (764) and it worked. I'm also running named with a -u bind flag in "ENTRYPOINT" for insurance.

I think ZFS does some advanced stuff which makes it better than just relying on hardware checksums (which have been shown to not be so great)

How about bitrot?

Yeah I'm looking for something like this for Linux desktop

Does it work on desktop? Linux?

Qubes OS doesn't have GPU acceleration using Virtio-powered interfaces if that's something you need. Also it's based on Xen and you are not encouraged to mess around with dom0.

TBH if there's a way that you can attach to the display output of a VM with a GUI when you start your computer, it will probably fit your use-case perfectly. I haven't found a method to do this but I think there should be some way to attach directly to the display of a VM after booting up.