Akatsuki Levi

Do you have a spinning fish display in front of your homelab server, right? We all know the spinning fish improves performance and security, it is a indispensable part of homelabbing

For a moment I was really confuser as to how Caddy could replace nodejs’s package manager

I use Forgejo at work. We have set it up on a server and it quickly became our main VCS server. Forgejo just sounds complex, once you install it(really simple setup), it is just… Git. You create your repos, you push your commits, and do all the normal git stuff with it.

You can even enable Forgejo Actions and have built-in Github Actions like CI for your repos, and it works surprisingly well.

I personally actually use Forgejo with Forgejo Runner It gives me a fully self-hosted experience that feels just like Github, and Forgejo Actions is nearly 1:1 with Github Actions

About CI Rental thought, never touched there, but maybe not that hard? Probably Jenkins or Drone CI has support for it

And LFS, AFAIK both Gitea and Forgejo have support for it(just need to enable on the app.ini)

I still don’t get it, like, why tf would you use AI for this kind of thing? It can barely make a basic python script, let alone actually handle a proper codebase or detect a vulnerability, even if it is the most obvious vulnerability ever

I have switched production to Caddy before V2 and haven’t looked back ever since. During my Apache era, always had to keep a eye on stuff and deal when things decided to break With caddy? I just throw the config and it just works without complaining at all

Disable password authentication on SSH

Enable firewall and block all ports you’re not using(most firewalls do this by default)

Switch to a LTS kernel(not security related, but it keeps things going smooth… Technically it is safer since it gets updated less often so it is a bit more battle tested? Never investigated whenever a LTS kernel is safer than a standard one)

Use Caddy to proxy to services instead of directly exposing them out

HTTPS for web stuff(Caddy does it automatically)

‘fuck’ and the family of ‘fucking’

AIO has a updater but it is manual by default You need to enable automatic updates yourself, which… Is done through a bash script you need to add yourself into the system crontab

And not only that, the instructions do say things could break and even suggests setting up backups for such

Up! Also would love to see how it looks