habitualTartare @ habitualTartare @lemmy.world

Posts

0

Comments

75

Joined

2 yr. ago

"we have more important things to discuss" and "why are we still talking about this and wasting time when there's a secret laptop and emails" /S

The perfect brisket heist.

Here's the voting record to "table this discussion" a yay means against impeachment.

https://clerk.house.gov/Votes/2025175

And the congressional record. https://www.congress.gov/congressional-record/volume-171/issue-108/house-section/article/H2906-2

I'll be honest that I haven't watched his videos so maybe it ends up stable. TrueNAS basically says in their docs you can end up with weird issues.

If you host it in proxmox directly there's less overhead, as in it's not going bare metal > proxmox > TrueNAS > application. You might run into issues but honestly try it and keep a configuration backup if it fails. Pcie passthrough instead of devices for the HBA card and any external graphics cards works the most stable but you won't be able to "share" those resources.

I personally like docker for most everything I can with a few things hosted within proxmox. I originally started with portainer which gave me a web GUI for docker but honestly docker-compose files are a better approach. So proxmox > debian > docker Proxmox > trueNAS and proxmox > other VMs. This has its own challenges like passing storage from the NAS to jellyfin but works for me.

As for components, I'm stable on an old office desktop computer potato (albeit it does hit some limits with file transfers and transcoding multiple streams). I wouldn't necessarily recommend going out and buying an equivalent but if you want to mess around, don't be afraid of not enough resources in a test config.

For #3 officially, nesting TrueNAS in another hypervisor and then using it as a hypervisor is not really recommended, especially with any kind of virtual drives. It could lead to challenges. Virtualizing drives is definitely not recommended and the most stable choice is passing pcie through with a hba card.

Given that, I have a similar setup and I've made backups for important data, I passed a pcie data/SAS hba card that I connect any TrueNAS drives to directly instead of a virtualized drive.

https://www.truenas.com/blog/yes-you-can-virtualize-freenas/

Did you see he won the golf tournament? It's good to win. You hear he won right? Did you hear he won? /S https://youtu.be/zBflZLStKQg&t=300

If you want to use sunshine over the Internet you can

• download another program like a VPN (tailscale) or peer to peer (ZeroTier: https://github.com/moonlight-stream/moonlight-docs/wiki/Setup-Guide#zerotier)
• check the docs for UnPnP support. It looks like some configurations require both devices to be on the same network for the first connection step. https://github.com/moonlight-stream/moonlight-docs/wiki/Setup-Guide#streaming-over-the-internet
• accept any security risks to port forwarding

Know that doing this is not advised and your computer will now be directly accessible to the Internet. As long as you're fine with the potential for vulnerabilities and that risk or just don't care:

You need to setup port forwarding on the local router for the computer you want to connect to and check the docs for origin_web_ui to include "wan" (Internet). Docs also describe encryption configurations. https://docs.lizardbyte.dev/projects/sunshine/latest/md_docs_2configuration.html#port

Know that your network router (like 192.168.1.1) keeps everything on your network from receiving any connections that weren't already requested by a computer or phone on your network. Port forwarding opens a hole into your network and that computer now has to protect itself so keep it updated, especially sunshine, and I'd recommend not turning off ufw but just adding some rules to allow the sunshine traffic.

I think most people weren't fully aware until recently. You had to be active online or actually look for information to see it was more than just rich billionaire syndrome. We all live in bubbles and some people didn't get to hear about all the details with the 2019 pedo submarine incident Nowadays it would be very difficult to argue you didn't know but bought a Tesla because it's in your face.

For context, the model S was first sold in 2012, the model x in 2015, model 3 in 2017 and Y in 2020.

The Biden website was essentially just archived and the new administration is working on building up the site. This isn't something specific, almost all the old website links are broken.

“It’s day two. We are in the process of developing, editing and tweaking the White House website. As part of this ongoing work, some of the archived content on the website went dormant. We are committed to reloading that content in a short timeline,” -Harrison Fields

Everything is archived here: https://bidenwhitehouse.archives.gov/

I personally haven't explored self hosting mail. This thread is a year old but might give you insight from people who have.

I've heard about using mailbox.org to do what you're talking about. It seems the general consensus is getting a clean IP mentioned in the thread linked above is the biggest challenge.

Edit: mailbox isn't the what I was thinking of. I've definitely heard of services that let you self host half of it and just do the send receive part.

Setting up jellyfin, I used docker on debian, and an old Quadro card. What could possibly go wrong?

Turns out that week the Nvidia drivers got a faulty update pushed to debian stable and caused an error with getting the GPU to work in any container. I could either wait a week or pull the simple fix from testing. So impatiently I pulled it from testing.

Learning Linux is a great start.

Learning any coding language will help you understand a bit more about the programs will work, however there isn't much need to actually learn a specific language unless you plan to add custom programs or scripts.

The general advice for email is don't. It's very risky to host and it's a big target for spam. Plus there's challenges getting the big companies to trust your domain.

However hosting things behind a VPN (or locally on your home network) can let you learn a lot about networking and firewalls without exposing yourself to much risk.

I have no direct experience with next cloud but I understand it can be hosted on Linux, you can buy a Synology NAS and run it in that, or use something like TrueNAS.

Personally my setup is on one physical server so I use Proxmox which lets me run 2 different Linux servers and trueNAS on one single computer through virtual machines. I like it because it lets me tinker with different stuff like home assistant and it won't affect say my adblocker/VPN/reverse proxy. I also use Docker to run multiple services on one virtual machine without compatibility issues. If I started again, I'd probably have gotten bigger drives or invested in SSDs. My NAS is hard drives because of cost but it's definitely hitting a limit when I need to pull a bunch of files. Super happy with wireguard-easy for VPN. I started with a proprietary version of openVPN on Oracle Linux and that was a mistake.

"Trump's gulf hurricane wipes out south"

She can only be impeached by the house of representatives then removed by the Senate so probably safe to assume never or at least not for 2+ years.

They won't care if you bring your own device unlocked. If you're buying from Apple's website or another 3rd party, it should give the option to select the version between unlocked or carrier specific options like Verizon, AT&T, T-Mobile.

You can buy the locked version from T-Mobile outright if it's cheaper. If you ever want to change carriers you can get it unlocked after a certain amount of time around 90 days.

Edit: Based on your other comments, you're buying from Apple directly. The last question relates to if the device is carrier locked. Choose "Connect to any carrier later".

In that case, and if you do need a gpu (such as jellyfin, Plex or another reason) look at the GPU transcoding link in my previous comment. You can flash Nvidia consumer cards or price compare with Intel A series GPUs. This means a bit of tinkering but if you need transcoding and cheap Quadros aren't available to you, it's an option.

You can always go for a used PC with integrated graphics like Intel and see if that works for your use case. Follow the recommendation for a big case with lots of space, look at any of the dell Optiplex or similar office PCs. If you have specific applications Google them + minimum or recommended requirements. An SSD as a boot drive is absolutely worth it over an HDD.

Your camera setup probably won't need an external graphics card but if it does you can always upgrade later.

All of those components should be used and a few generations behind to save cost. A used Quadro m4000 is about $100 usd in the US. A used Xeon based office PC all in should be ~$400-600 USD max stateside and you can find whichever drives you need to add. I don't know what your local economy is like or what you can expect. If you're able to find a used office PC or and older device, give that a try and see if it works. If you have 15 users all hitting a computer it's going to take resources. Those resources are going to depend on what they're doing. If you want enterprise fault tolerance, ECC may be worth the extra cost. If you want to budget it out you can probably get everything you want running on something 4-5 generations behind for around $100 USD + drives cost.

Consider if you're going media streaming like a Plex/jellyfin server. It would be kinda similar to playing 15 YouTube videos on your desktop.

If it's 15 users with maybe 2-3 hitting it at any one time then you can build cheaper and get decent performance. If you're just hosting static pages/simple programs with low resource requirements anything post 2010 with 4 cores and 8GB RAM will probably run it fine and work as file storage for cameras.

Based on your description, your exposing something to the Internet. You absolutely should have things virtualized/containers and use a reverse proxy. Use cloudflare for the domain name registration and take advantage of their ddos protection. Keeping everything virtualized/separated would also give an IDS a fighting chance since they'd have to pivot if you bothered to setup firewalls between the devices.

If you have the space for some used servers, you can find something affordable. Any enterprise server will be loud and electricity costs should be factored.

If you don't have the space for a noisy server, an old workstation on the used market can be affordable. Otherwise you can build something yourself using consumer parts. Ryzen 5 (Ryzen will allow you to use ECC RAM which is something you might want) or an i7/Xeon from the previous generation or two should be more than enough. Add 32-64Gb of RAM and a SSD boot drive. I'd probably get HDDs designed for surveillance to save cost and put your file server storage on an SSD separate from the OS. Backups on VMs are stupid easy too which means you're more likely to bother using and testing them.

Edit: forgot about GPU. If you're using as a media server and need transcoding or another reason, an external GPU like the Nvidia p600 m4000 will work. Use this link to figure out what you need (you don't have to use Plex it's just a guideline)

Virtualization can be nice in that you can tinker and not worry about dependencies. Plus you can have one resource that's stable on FreeBSD, another that works well on Unix, etc.

Headless servers can run surveillance stuff via web interfaces or API/app integrations. Plus you can use the GUI via vnc, spice or another service to get to your x11 environment. I find proxmox easier than docker/containers as most of my troubleshooting is there. I've got security cameras linked to home assistant and it's all headless. You could plug a monitor in and pass that to a virtual machine to get the desktop experience.

Hardware recommendations are going to need more information. Number of users? Number of cameras/tasks the server is expected to do concurrently, will you have media/NAS hosting and if so, how much space and how fast do you want that to be?

Your use case in the OP for less than 4 users could probably be run on a potato (my potato is bottlenecked by wifi @ 10MBps). 10-15 users streaming media or 20 cameras constantly streaming to a monitor could easily eat up a decent chunk of resources.

If you're not exposing anything to the Internet, you probably don't need an IDS. It's a lot of effort to reduce false positives/tune it and the benefits are probably not worth it unless this is a business use case. Enterprise IDS/SIEMS used by actual companies is typically not FOSS because it needs that support provided by the vendor.