Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)RA
Posts
1
Comments
45
Joined
2 yr. ago

  • Being bad at a thing is the first step to being kinda good at a thing.

    First, many distros ship with sudo so its pretty ubiquitous, anything you learn about managing sudo will apply to most if not all distros, not just debian. (Great choice though ❤️)

    The correct answer is "it depends".

    In a production environment you'll typically have some external authentication source like IdM, FreeIPA or active directory set up. In this case its common to just give full sudo access to the group that comprise your admin team, as in most cases you have to trust that they know what they're doing.

    Ideally you want to follow the priciple of least access and avoid privilege escalation as much as possible. For example, there may be specific instances where a non-priv user needs to run $x as a super user, in which case, you should only grant the ability to 'sudo' for that executable as opposed to 'ALL'.

    As you've already discovered, with great power comes great responsibility. 😉

  • I come to the fediverse for a bit of interaction with humans, or at least observe a bit of discourse 😅 I just unsubbed from another community because it was non-stop bot links. I have RSS for that, don't need it in my lemmy feed too.

  • Hey. I did this, I self host a lot of stuff and at some point it just became my default setting. In this case though I dont think its really that valuable unless you're planning on hosting your own communities and moderate users and whatnot which comes with its own admin burden. Not to deter you or anything. I used a modified docker compose, so you'd need some way to host lemmy, lemmy's UI server and a database backend, and a reverse proxy in front.. DNS and SSL certificates... Its kinda intermediate to highly technical to host your own I guess? Would I recommend it to someone not technical? No, unless you were really keen and looking for a project to expand your skills a bit. 😉