Permanently Deleted
- 4 posts
- 35 comments
Permanently Deleted
- thisisawayoflife@lemmy.worldto
Reddit@lemmy.world•It's time to admit Lemmy has won the "the biggest reddit alternative" award, why it's time for all of us to consider supporting it (here's why) + reopening r/LemmyMigration
2 yearsI looked at the repo and they have no unit tests
Lol wut
- thisisawayoflife@lemmy.worldto
Selfhosted@lemmy.world•Do any of you have that one service that just breaks constantly? I'd love to love Nextcloud, but it sure makes that difficult at timesEnglish
2 yearsHere you go:
There could probably be some additional refactoring here, but it works for my setup. I’m using default nginx paths, so they probably look different than other installs that use custom stuff like /var/www, etc.
Use it by putting it in a shell script, make it executable, then call it:
sudo scriptName.sh 28.0.1Replace the version with whatever version you’re upgrading to. I would highly recommend never upgrading to a .0, always wait for at least a .1 patch. I left some sleeps in the when I was debugging a while back, those are safe to remove assuming it works in your setup. I also noticed some variables weren’t quoted, I’m not a bash programmer so there’s probably some consistency issues that could be addressed if someone is OCD.
- thisisawayoflife@lemmy.worldto
Selfhosted@lemmy.world•Do any of you have that one service that just breaks constantly? I'd love to love Nextcloud, but it sure makes that difficult at timesEnglish
2 yearsSure! I’ll respond with a link in a bit.
As a person who used to be “the backup guy” at a company, truer words are rarely spoken. Always test the backups otherwise it’s an exercise in futility.
One of my next steps was hardening my OPNSense router as it handles all the edge network reverse proxy duties, so IDS was in the list. I’m digging into Crowdsec now, it looks like there’s an implementation for OPNsense. Thanks for the tip!
Good call. I do some backups now but I should formalize that process. Any recommendations on selfhost packages that can handle the append only functionality?
Nextcloud zero day security
What is everyone doing? SELinux? AppArmor? Something else?
I currently leave my nextcloud exposed to the Internet. It runs in a VM behind an nginx reverse proxy on the VM itself, and then my OPNSense router runs nginx with WAF rules. I enforce 2fa and don’t allow sign-ups.
My goal is protecting against ransomware and zerodays (as much as possible). I don’t do random clicking on links in emails or anything like that, but I’m not sure how people get hit with ransomware. I keep nextcloud updated (subscribed to RSS update feed) frequently and the VM updates everyday and reboots when necessary. I’m running the latest php-fpm and that just comes from repos so it gets updated too. HTTPS on the lan with certificates maintained by my router, and LE certs for the Internet side.
Beside hiding this thing behind a VPN (which I’m not prepared to do currently), is there anything else I’m overlooking?
- 2 years
I wonder what performance impact there would be if you were to move pgsql onto bare metal with enough ram dedicated to caching all of the db data (think: i5 or i7 nuc). That’s going to be my next step with my homelab; I want to migrate everything to a single db host with a lot of RAM and M2 storage and avoid the db process replication I have going on. I have no performance complaints with NC currently, I’m running PHP cache and redis as well as image preview and imaginary.
- thisisawayoflife@lemmy.worldto
Selfhosted@lemmy.world•Do any of you have that one service that just breaks constantly? I'd love to love Nextcloud, but it sure makes that difficult at timesEnglish
2 yearsYou absolutely need to move from patch to patch and cannot just do a multiple version jump safely. You also need to validate the configs between versions, especially major release updates or you risk breaking. New features and optimizations happen and you also may need to change our update your reverse proxy configuration on update, or modify db table configuration (just puking this from memory as I’ve had to do it before). I don’t know that there’s automation for each one of those steps.
Because of that, I run nextcloud in a VM and install it from the binary package. I wrote a shell script that handles downloading, moving the files, updating permissions and copying the old config forward, symlinking and doing the upgrade. Then all I have to do is log in as administrator, check out the admin dashboard and make sure there aren’t new things I have to address in the status page. It’s a pain, but my nextcloud uses external db and redis and PHP caching so it’s not an easy out of the box setup. But it’s been solid for a long time once I adopted using this script.
Using NVEnc with the current linuxserver images. The readme covers the issue.
Awesome, I’ll check it out later this evening. Thank you!
I assume tdarr will take a handoff/trigger from Radarr to operate on a file?
For conversion of videos after download
For conversion of videos after download. I don’t use tdarr. Doing what you suggest works for Sonarr, but not radar because of different base images. Two different groups maintaining those projects I guess.
Edit: this is the issue I’m speaking about in particular:
radarr, docker & nvenc
Anyone done this? Got a set of repeatable instructions? My understanding is that the root docker image needs to switch from alpine to ubuntu and that hasn’t happened yet.
- thisisawayoflife@lemmy.worldto
Selfhosted@lemmy.world•Running multiple activitypub services on single domainEnglish
3 yearsI’ll start researching what the user agents are for the various services and then work on creating a simple POC with nginx. If that actually works, I can try to put together a production quality app to handle it.


Not enough info. Those are two different things.