Karna @ KarnaSubarna @lemmy.ml

Posts

157

Comments

247

Joined

2 yr. ago

Rule of Thumb: if your use case is not satisfied by your current Distro, then move to the one that does.

Arch or rolling release distros are great if you want latest version of software/packages as soon as possible. Downside is you need to put more effort/time to maintain it by yourself.

On the other hand, fixed release distros (e.g. Debian) doesn't offer latest packages immediately. But, given that packages are tested for distro release, so you will have a more stable (in relative term) system for yourself with minimal effort.

I used to like rolling release distros on my college days as I had plenty of time back then. Now, I'm settled on fixed release ditro as it suits my current use case.

Reverse proxy is not specifically for exposing a containerised service on internet, it also helps to enable SSL for all services via single reverse proxy on LAN.

If you want to expose a container based service just for yourself over internet, you can -

• If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].
• If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].

In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default you should set your firewall to block all incoming request from anywhere except LAN.

I'm personally using Cloudflared Tunnel, but planning to migrate to Tailscale.

[1] https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-ubuntu-20-04

[2] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/

[3] https://tailscale.com/

AdGuardHome is also self-hosted and does have this feature.

Actually in my cases, I have to block Facebook on all of my devices, but want to allow it for rest of my family members. So, I know its possible in AdGuardHome.

https://github.com/AdguardTeam/AdGuardHome

https://actualbudget.org/docs/config/reverse-proxies/

For which self-hosted app? Invidious?

Unless you are routing traffic through a VPN.

That's correct. Thanks for the correction.

• AdguardHome/Pi-Hole (for DNS Filter)
• DrawIO (MS Visio equivalent)
• Invidious (Youtube privacy frontend)
• SearxNG (Google Privacy frontend)
• Vaultwarden (Self-hosted Bitwarden server)
• Miniflux (RSS Reader)
• linkWarden (Link aggregator)

Also, checkout https://selfh.st/apps/

"Requires to create an account" for what exactly? I'm a long term Ubuntu user without any Ubuntu one account.

Ubuntu Core, to be specific.

Ubuntu.

Why? - I guess I'm too lazy for distro hopping now :(

Besides, this was the 1st Linux distro I tried back in 2005. After the usual ditro hopping phase was over, I settled on it; somehow (irrespective of snap and other controversies) I feel at home.

It's an open source product, in case you have concern about possibility of malicious code embedded within it.

At least there is no such indication so far from Mozilla :(

Why not Traefik as reverse proxy?

For gaming on Linux, use latest release (e.g. v575) of Nvidia driver. And for everything else stick to production release (e.g. v570).

If you have read the article, then this is more akin to switching from using two condoms to just one.

While that's true, but the main issue here is the unavailability of frequent security patches that Fedora now appears to be attempting to solve with X11Libre.

Mozilla should make Fakepost source code open-source so that people (with right hardware) can self-host it.

I'm also exactly on the same boat as you; I use Fakepost frequently and now it will be canned by Mozilla. The alternative I found is https://reviewmeta.com/, but it's quite slow and can't cover all domains of Amazon.