Is anyone here selfhosting the psono password manager?
node815 @ node815 @lemmy.world Posts 8Comments 164Joined 2 yr. ago
node815 @ node815 @lemmy.world
Posts
8
Comments
164
Joined
2 yr. ago
This is going to sound weird, but I think I tried it a few days ago on my server. I never installed it at the time because of all of their setup steps to enable OICD login. I've been on the hunt for a OICD/SSO compatible one since Vaultwarden isn't yet capable of such a thing. I just installed Authentik and it sparked the search. LOL - I've used Vaultwarden for a few years now and have yet to find anything quite as capable as it for managing my well over 500 logins I've accumulated over the years.
Your post got me to install it and I believe it will work, I'm testing it and can report later if you want. :)
If you are using Docker at all, with wireguard, I use WG-Easy - dead simple to use and works quite well. Immich is up and coming and making waves in the self hosted community as well in terms of being a viable replacement for Google Photos so that may be an option, or you can always drop in Nextcloud or Owncloud and sync your photos that way with the bonus applications which come with either suite.
I've had issues after updating the kernel and ignoring it. I WFH and all of a sudden my sound would stop working or something else may stop. I found it much easier just to reboot after.
I use Arch with Wayland and it worked... Sort of....the idle animation was a bit busy as in it looked a lot like the frames between each animation weren't erasing, but the mouse chase worked quite well.
For MakulukuLinux, to take full advantage of the AI , you have to pay to upgrade. I am an Arch user and tried it out for a bit, it was a bit limiting without unlocking the AI functions. Now, this was about 6 or so months ago, so it may have improved some.
My recommendation is to install qemu or VirtualBox or Gnome Boxes and test drive them there.
You may need to clear your HDD first, run cfdisk I have had issues when doing an install over an existing OS, it doesn't seem to like having existing data so you have to clear it first with the command then rerun the install script.
I liked them enough to purchase a total of 8, so yes. Once integrated, they are quite fast no delays that I've seen so far. I have 3 in the living room (our apartment doesn't supply any overhead lighting), and usually run them white all the time, but on the rare occasion, I do like to tint them to a different color (Holidays usually) to fit the mood. Then have 1 in the bedroom.
There is also Tuya Cloud Cutter which I got to work with one bulb to permanently decouple a bulb from Tuya's servers, it provided a new key. I ended up bricking it after by getting brave and flashing Tasmota to it (no longer powered up). So, I took that as a loss. Eventually, I will decouple the rest to make it more cloud free. I will say that in order to properly get the keys, you will need to download the Tuya App from your app store, factory reset the bulbs, then pair them with the app. The app will complain about some device issues, but those are safe to ignore, once they are connected to your Tuya Cloud, then you can harvest the local key.
With Linux, you need to have the awareness of what is running on your phone 24/7 and AFAIK, there's nothing like that except maybe Home Assistant, but that's pushing it. I have a buddy which has an always on VPN which he uses 100% of the time at home, never any issues with him. As for the phone, I have Wireguard for when I am not connected to my WiFi, and then disconnect when I'm back on my WiFi network. This way, I am certain to be on my home network 99.99% of the time. I use Tasker for that.
With that said, you will need an automation of sorts on the Android to be 100% sure you are on your appropriate VPN. Whether through Tasker, Macrodroid or a few other apps.
If you have Tasker, you can do that. Not sure if you are using Wireguard, but that makes it simpler to integrate IMHO with it. With it, you set a condition basically if App XYZ is open then use VPN ABC Otherwise, If app XYZ is not open, then use BCA VPN.
I admit I didn't read many replies due to time. But to add to them, the more I deal with my mother who is becoming more technologically challenged in her years, I constantly get to hear about how confusing her Android is sometimes, I sort of wish she'd switch to Apple for it's simplicity! I used to have an iMac and was gladly part of the eco-system for a while and enjoyed how intuitive it was. With that said, when the time came for me to join the Smartphone world in '10 or so - I went Android and haven't looked back.
We've looked at them in the past and while they make solid quality phones and easy to use phones, from what I understand, the battery life is somewhat to be desired? (as of a few years ago). The formula they use to make everything stay within their Eco-system seems to be working for them. After all, if you have an iPhone, then it seamlessly works with your Mac, or other Apple Devices. There's more control over it.
For the best flexibility with our family, we use Android and will for the time being. Not to say though that the newer Linux based phones (PinePhone,Librephone etc) aren't catching my attention because they are and I'm a die hard Linux user! :)
I've tried this a few times, so I know I've added more hits to your counters! I know it can be run on non-pi devices which is cool, ever think of changing the name to suggest it's not just for the 'ol pi? :)
Folder Sync Pro - if you have a NAS or extra server, you can upload backups from your phone to there for safe offline storage. I use it to hold my photos and Tasker profiles.
SMS Backup and Restore - Likewise, this backs up your SMS and call records, useful if you are needing to preserve records for legal reasons or otherwise. They have an IAP purchase for pro - I think
Solid Explorer File Manager pro - Hands down, this by far for me has been nothing short of awesome. Well worth the $$ for it. They use the Unlock file
(Solid Explorer Classic UnlockSolid Explorer Classic Unlock) for this. Or at least used to - to enable the pro functions.
If you have Android Wear - pretty much any of the watchfaces you desire can be there or even make your own with some of the apps there for it. :)
Great job on the cabling and the setup! As an Apartment dweller, I hope you don't mind my living vicariously through your setup!
Let me preface this with that I am an experienced CLI user and with Docker, so this really is not in my interest generally, but getting older and dealing with a variety of other personal issues, having a nice dashboard to deploy things sometimes is just really nice ya know? So I figured I would put on my dusty beginner's hat to get this a run.
For the beginner, it's a nice system to get started and get your feet wet with a no-nonsense app install experience. I tested this in a VM on my desktop and installed Sonarr and Sabnzbd which if you use Docker with these, you know the proper volume mapping is key. They take the hassle out of doing this for the end user. With that said though - file permissions are a bit off and both Sonarr and Sabnzbd needed the proper permissions set for the folders. Not a deal breaker for someone accustomed to the CLI, but for a new self hoster, this can be a bit frustrating.
Their app store is pretty impressive and I guess growing, the install on the server was painless to get running. It's something to keep an eye on, it's in good company with the other ones like Umbel and CasaOS, each has their own qualities.
For those wanting more fine grained control over the apps and installs, Tipi is a bit more opinionated to the port numbers and paths used and you can't easily modify those (at least from what I could tell). In the long run, this is a non issue for the most part if you are starting on a freshly installed server and don't want to handle the challenges of proper path mapping, reverse proxying and so forth. (They include Traefik in the install). Not having to worry if port 3000 is already taken or 8080 is, you can trust that it will handle it and it does!
I'll admit, I'm not a huge fan of Traefik (It's too big of a hassle for me and I use Cloudflare tunnels anyway). I couldn't get past the login even after literally copy pasta of your example for the user test as a last resort. So, I'm not sure if it's because I'm not using Traefik or some other reason. (Username tried was test Password Test) I also tried at first my username/password combo I set for it using the command to generate the passwd file.
Your page links 404 out, but if you reduce it to https://klay.gay/self-host/ it works and shows v.0.9.2 so you may want to edit your post. :)
I use Purelymail for mine. I have Uptime Kuma integrated with it using the SMTP server and also have different things like my password vault connected through it. It's generally lightning fast and budget friendly too.
Everyone's comments here made me realize just how bad it is still with employers trying to get warm bodies in the office. My company used to be "Everyone who works from home wastes time and is less productive" They quickly realized when their hands were forced and the pandemic hit, there were much less sick days, and productivity has never been higher!
We have a Moto G7 Power which we turned into an e-reader for my wife. She was constantly chewing through her primary phone battery doing this so I offloaded it to the Moto which has been great. With the 5000mah battery (I know, that's standard these days), and it's primary responsibility of displaying text on screen, ti's made a good stand in.
As other's have said, Android webcam, there are plenty of apps out there, I use "IP Webcam" by Pavel Khlebovich from the Play store which is no cost and does the job quick and dirty.
If you are into home automation, some people have placed old phones near windows and taken advantage of the light sensors built in (Which regulate the auto screen brightness), and used those to trigger indoor lighting events based on the light level where if it's darker inside, then lights on or gradually turn lights on accordingly. . Or, use the proximity sensor used to turn screen of when near your ear and create a trigger if something came close to it, IDK what you'd want to monitor being close by, but let your imagination fly! Home Assistant is great for this, their companion app, reveals soooooo many sensors on the Android device which can it can act upon. It's crazy.
Donate the phone to a non profit charity. This is a good list of places: https://www.androidauthority.com/where-to-donate-old-cell-phones-3311699/
Use older apps on the old phone which aren't compatible with newer Android OS api's. For example, Prior to them yanking the app, I used an old Samsung phone to use Rockstar's Ifruit appa as it wasn't compatible with newer Android phones, to take care of my dog in GTA V.
Testing so far - I got it to do the SSO with a little work. There's a TON of file editing which needs to be done, so as long as you follow their docs, it should work okay. I was able to export my Bitwarden plain JSON file (I use Vaultwarden), and it was flawless. The server dumped all of the logins into a folder so you have to expand that to get to the main logins which if you had them in folders already, are there as "Sub Folders" if you will. You can move the folders one-by-one but not en-masse which may be a show stopper for some. Especially if you have many to move like I do.
PROS:
CONS
TOTP is NOT included in the logins, this means that in order to get to the TOTP code, you have to search for it using the browser plugin, then copy it from your web portal and then copy it over to the tab you were on. On my Firefox session, it FROZE IT UP For longer than the TOTP code expiration so I had to copy a new one and was able to pass the login through.
You have to be logged into the web panel before the browser extension will work. You can close the tab though and it will retain your session. Compared to below, it's a night/day difference where there -it logs in to the server without ever touching the web vault which I rarely ever use.
vs.
**Vaultwarden/Bitwarden **
Maybe I'm spoiled, but I've completely grown accustomed to the pasting of the TOTP code during my login session after I fill in the credentials. This by far is hard to break the cycle. Some may argue that it's not secure to store your TOTP in the same password manager and they are probably right, but for me, it's enough. :)
Vaultwarden is working on SSO it seems so this may be something to consider if you are working into the SSO world like I have been. https://github.com/dani-garcia/vaultwarden/pull/1955
Edit to fix formatting and add another con about the plugin this time.