bladewdr @ bladewdr @infosec.pub

Posts

0

Comments

23

Joined

2 yr. ago

The issues with IP reputation, and mail providers like Microsoft and Google choosing to make massive, sweeping email blackholes with no recourse are the real problem.

Hosting your own email is not really all that hard.

It does require some understanding of how SMTP works, and how to avoid things like backscatter - but its all very tractable.

I run my own mailserver on Linode. Granted it is a single user instance, and I don't send that much email, but I have had very few issues.

The few times I have had an issue is usually places just flat out not accepting email addresses with custom domains. (Looking at you, AutoZone... Looking at you.)

I really like https://karakeep.app/.

I have it plugged into a local Ollama instance for automatic tagging of articles.

I really do not like recommending people chmod 777 anything.

It encourages bad practices.

I don't often need to mess with PDFs but man StirlingPDF is just fantastic on the odd occasion that I do.

Also, curious - what do you use a download manager like PyLoad for? I've seen stuff like this but never found a use case.

Is Univention essentially just an LDAP server?

If you're using Hugo it also creates an RSS feed by default every time you build the site.

I've actually been fighting with this since yesterday.

Pocket Casts is one of my last things that I'm not self-hosting, and I'm trying to change that.

My list of requirements was:

1. Multi-device sync
2. Be able to play seamlessly from either a web UI or my mobile device, picking up where I left off on either device.

For my Gpodder backend I chose to use the GpodderSync NextCloud app, since I'm already running NextCloud.

I tried PinePods and PodFetch for the web interface, both of which had various issues with sync.

Supposedly there's a big update to sync coming for PinePods in a couple days, but I wasn't able to get it working at all.

PodFetch has its own internal gpodder server implementation, but for the life of me, I could not get it to keep listen state in sync. Also, I initially set it up to use OIDC authentication since I'm also running Authentik - but don't try to do that if you want to use the Gpodder integration. The two are essentially mutually exclusive, at least in its current state.

What I've settled on for the moment:

1. AntennaPod for mobile playback. (Be aware that there are additional steps for Android Auto support if you install it from F-Droid as I did)
2. NextCloud GpodderSync to keep track of listen state and subscriptions.
3. NextCloud NextPod app for web UI playback. I'm not exactly happy with this, as it's a very ugly and basic UI, but it does work, and it does keep track of where I left off the way I want. Hopefully the PinePods update fixes my issues with it, as the web interface for that was much more slick.

UPDATE: I recently discovered RePod which is also a NextCloud app, but the interface is much better than NextPod.

You can set up firewall rules to redirect the traffic destined for public DNS servers to your internal DNS server.

Not sure how to construct that rule in the unifi firewall but it comes down to "any outbound traffic on port 53 that's not destined for the adguard server, redirect it."

I just use ssh for management. Monitoring is handled by nagios.

Shouldn't use the Xfinity router anyway, that thing is fuckin garbage.

Sounds like a cost of living adjustment to me.

I'd also like to know where these surveys are being run, as the COL varies wildly between states.

This is the one I'm using as well. I use it to keep my work laptop running Linux in sync with the various Windows desktops I use in our offices. Works great for keeping my work keepass vault in sync.

Mail server, but mostly because deliverability in this day and age is a nightmare. If you're some one off running your own mail server in 2023 be prepared to deal with many headaches around IP reputation.

You don't need to be home for a cron job to run.

USB has a bad habit of randomly dropping off the bus until you reseat the cable or reset the device.

If you've got a copy of the data that's local, why are you opening up ports? Just run the backup job internally.

I'm also not fond of using SBCs as a NAS, by nature their I/O is extremely limited. It will probably work as a backup, but man do I not trust a USB interface at all.

I also recommend not relying on email for notifications - too unreliable. I use the healthchecks.io docker image and have it send me notifications via Pushover when something fails.

Wow what a throwback

People who value their sanity. WiFi is unreliable.

All the servers I've spun up in the past few years have been Debian instead of my usual Ubuntu.

The last straw was kinda when I learned that installing docker via the install menu gives you the snap version instead of the normal one, with no indication that this is the case.

Who in the world is using a USB printer in 2023?

Ethernet bby

Windows 11 on the main desktop for gaming reasons. Currently Pop_OS on the laptop, considering moving to Arch. My servers all run Debian or Ubuntu.