lemmyvore @ lemmyvore @feddit.nl

Posts

15

Comments

2,750

Joined

2 yr. ago

https://geek-cookbook.funkypenguin.co.nz/recipes/keycloak/authenticate-against-openldap/

It builds on the Keycloak and OpenLDAP tutorials but they're all very well covered.

I use Flym on Android. Sadly abandoned but still working great. It can import and export OPML, has an RSS search built-in and can retrieve the full version of a piece from the original website.

Write a document that describes the main points of your setup. That's about it. You don't have to teach them everything, just guide them. Like, if you use a certain Linux distro and Docker just say "I use Docker on Debian and the compose files are in that directory". That should be enough to get someone started if they know Linux and Docker, and if they don't they're not going to learn it from your doc, they should go looking for someone who does.

Let's face it, many of our self-hosted setups are DIY setups we make as a hobby. If you really want an out-of-the-box experience that can be administered by a non-techy there will be limits to what you can achieve.

That's besides the point, they can probably use any number of alternatives. The problem is the act itself, being suddenly booted off a platform is very disruptive and it takes time to regroup. Also, who's to say that Meta won't do that to them as well.

There's no reason to, there's nothing wrong with Nvidia. I game on it without any issues. Most people on Linux use Nvidia.

Look into terminal multiplexers like screen or tmux, they are a sort of "window" system for tty.

There are text-only browsers but I'm not sure they'll be usable on today's websites. May want to set your tty to a graphical mode (framebuffer) and use a mixed-mode browser that can render images and some other stuff.

Usually stick to 200-250€, maybe 300€ if it's a really nice deal. (Price for new, unlocked and without subsidizing.)

TBH I'm not sure what exactly OP wants. They like Evolution and dislike Thunderbird but they both look the same to me. All mail software on desktop has list of folders, list of messages and message view.

All the apps on your phone have access to the phone identifier. As well as other information, like your Google account. It's pretty trivial to tie a phone to you.

They have your identity the moment you put the sim in the phone. The phone have unique identifiers that are recorded when sold.

I check the return code from the borg backup job and issue a notification to my phone via NTFY if there was a problem.

Please note that return code 1 (warning) will be issued if a file changes while borg is backing it up so it's very common if you backup log files for example. Which is why I only notify for code 2 or greater.

You can also do it the other way and simply issue a notification no matter what happened, and just list the return code as-is. This is probably better since you also get confirmation that the backup job is actually running.

Claws-Mail is still alive and well and works great. Lots of plugins, you can write your own post processing actions, custom powerful filters, customizable interface etc.

If you don't already know the benefits it's unlikely it solves a problem you have.

Even among its users many are using it because it's cool rather than because they actually need it.

It's a declarative system, meaning you can describe how it should be setup (using a magic strings you have to look up online) and then it "sets up itself" according to the description.

It's normally something you'd use for mass and/or repetitive deployments.

It's usefulness for a single system is debatable, considering you can achieve very close to 100% of "reproducibility" anyway by copying /home and /etc and fetching a copy of the package list.

Where the prescriptive approach is supposed to help is when you attempt to reproduce the system a long time later, after things like config files and packages have changed. But it doesn't help with /home, it hasn't been tested over long intervals, and in fact nobody guarantees long term compatibility for Nix state.

If someone gets access they can delete your keys, or set up something that can intercept your keys in other ways.

The security of data at rest is just one piece of the puzzle. In many systems the access to the data is considered much more important than whether the data itself is encrypted in one particular scenario.

Now replace "signal" in your comment with "ssh" and think it over.

If any part of the data gets corrupted you lose the whole thing. Recovery tools can't work with partially corrupted encrypted data.

You. Don't. Store. Secrets. In. Plaintext.

SSH stores the secret keys in plaintext too. In a home dir accessible only by the owning user.

I won't speak about Windows but on Linux and other Unix systems the presumption is that if your home dir is compromised you're fucked anyway. Effort should be spent on actually protecting access to the home personal files not on security theater.

Oh no, tell that to SSH.

The AUR is basically just a script that describes best case scenario for building something under Arch. They don't have any specific quality rules they have to meet.

It's super easy to make and publish an AUR script compared to a regular distro package (including Arch packages).

The ads are added in the app. If you cast, the Chromecast can't add apps (yet) so they'd have to make ad streams instead, and switch between the streams show-ad-show which would take several seconds of loading screen each way and so on. Which is a level of fuckery even they shied away from.

TLDR they can't (easily) show ads during casting.