Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)IO
Posts
7
Comments
480
Joined
2 yr. ago

  • I know it's linux and you never reboot it and yadda yadda, but have you tried rebooting both machines?

    For what it's worth, that's my fstab entry (it's mounted with a normal user, which is the same which the containers use). I seem to remember I had to change ownership of the /mnt/nasdownload folder (before the mount) to the user used to mount it.

    //192.168.1.10/Download /mnt/nasdownload cifs auto,user,uid=1000,gid=1000,rw,iocharset=utf8,suid,credentials=/root/.smbgringo,file_mode=0770,dir_mode=0770,_netdev,vers=3.0 0 0

  • Debian predates Ubuntu by a long time. Ubuntu was actually started as a repackaged/modernized version of Debian (yes, I know, it's a gross approximation, live with it). You WILL find anything you need on documentation on debian. Also, you can download the DVD version that has pretty much anything, including dev tools (like gcc and kernel sources) that you can use to build the driver from source (when you download it via windows for example).

    As a personal note: trying to add wifi connectivity to linux is also how I cut my teeth on linux 20+ years ago. It is hard if you don't know what's going on, but don't despair: the knowledge you'll get will be useful for years to come.

  • You can look (from a terminal) with lsusb what linux thinks it is. With that info you can probably find an open source driver from your windows side, download it and access it from linux (and so install it). Good luck, you'll earn a lot!

  • Now you make a good point, you also have to perform the update within the app in nextcloud. I use a custom image so I have to do it anyway, I haven't realised that.

    But I guess npm is the one that needs to be updated automatically to avoid most of the attacks on the web

  • AFAIK one container at a time. Since the different parts of a stack (e.g. app and db) have different release cycles it's not a problem (or it hasn't been for me).

    Also, the important bit (from a security perspective) it's the front end (i.e. the web app).

  • Yeah, absolutely good point, it's something that can be done in opnsense as well. Certainly blocking any bloc outside your country (or region maybe in Europe) makes sense. I block everything outside RIPE, and also China and Russia.

  • Port forwarding is unsafe, but even crossing the road is unsafe. Do you cross the road without watching? In the same way, you just don't let a published server online without doing regular updates. You set up docker, run nextcloud (docker) behind nginx proxy manager, and have watchtower update them regularly. You can also setup 2fa in docker, and pair it with fail2ban.

    Every port open widens the attack surface, but those services are made to be published, so there are mitigations against the risks.

  • I've found that sweating like mad helps clear the cold faster. Like put on a ton of jumpers and go for a brisk walk. Or sleep with way too many blankets. DRINK A LOT OF WATER!

    Slightly worse advice: get drunk before going to bed (that's one of the things that make me sweat).

  • I'm going to be a bit of an asshole here. With the amount of effort that she obviously put to attain that level of physical preparation (which is impressive for my couch potato standards), I'm a bit miffed that the costume itself is a bit meh. Still, she is a better wonder woman in that than I'll ever be even with the original costume and a team to set me up!