• 15 Posts
  • 438 Comments
Joined 2 years ago
cake
Cake day: December 28th, 2023

help-circle

  • Wow ! I will still try mealie /Tandoor for family purpose and ease of use. If it doesn’t work as expected, I will totally try this out !!

    One question if you don’t mind,

    servings Indicates how many people the recipe is for. Used for scaling quantities. Leading number is used for scaling, anything else is ignored but shown as units.

    Does this function work well? I didn’t saw any examples so maybe you could tell me :)

    Thanks !



  • Fair point ! Yeah sure if you host a blog online it doesn’t make sense… But if you only self-host your services for family and some friends and access them over VPN, a local CA is actually a privacy respecting choice.

    Hosting something on the web (specially self-hosted) without the propre software and hardware is a bad idea in the first place anyway !


  • N0x0n@lemmy.mltoSelfhosted@lemmy.worldHow to selfhost with a VPN
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    6 days ago

    I also believe it’s possible to set up HTTPS encryption without a domain name, but it might result in that “we can’t verify the authenticity of this website” warning in web browsers due to using a self-signed certificate.

    Just create your own rootCA and IntermediateCA and sign your certificate with those, put the CA in your trust store of your system and get rid of this self-signed warning on every device and happily access all your service via: *.home.lab or whater ever local domain pleases you.


  • N0x0n@lemmy.mltoSelfhosted@lemmy.worldHow to selfhost with a VPN
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    6 days ago

    In addition to that, without a secure connection you’re stuck with HTTP/1.1

    That’s not entirely true. A lot of requests, even with https, are send over HTTP/1.1. And this is kinda mind blowing that in 2025 we still rely on something so old and insecure…

    Same goes with SMS and the old SS7 protocol from 1970… 2FA SMS is probably the most insecure way to get access to your bank account or what ever service promotes 2FA sms login.




  • Nothing fancy but I found an old RPI3 and want to selfhost Vaultwarden and piped on that thing to give my parents a way to watch YouTube without those nasty ads and give them a proper and easy way to store their password. (Over wireguard tunnel)

    Also If the universe aligns buy a N100 or 200? To host my own router/switch setup and finally take advantage of my 5Gbit fiber 🫤. I still need to figure out how I get WiFi AP to work with a N100…

    Not much but I have a lot other things to figure out but mostly software wise :).



  • EndeavourOS is great ! While it’s easier to install than Arch (I guess?) and give you tools to maintain your system, it’s still in need of daily maintenance to keep your system healthy and operational.

    You learn things but at slower pace and with less headache as a beginner. I’m very thankful EOS exists and give you a glimpse on how to configure/maintain and evolve with the Arch ecosystem !




  • N0x0n@lemmy.mltoLinux@lemmy.mlLPIC notes (just started)
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    9 months ago

    Very nice ! Thank you :).

    This certification looks way more professional than the Comptia’s + certification stack, which looked more like a scam/money grab than actual certifications.

    Good luck in your study’s, keep it going, don’t give up 💪👍





  • It’s related though. If you have enough money, the means and interest, nothing is impossible. Specially if you are a big player/monopoly in IT.

    Yes I don’t have any degree in cryptography, AI, or any related stuff in security and mathematics, however I read a lot, tinker a lot and work hard to maintain my homelab and self-hosted services. I’m not intelligent by any mean but I’m not stupid either, critical thinking is a very important aspect but I digress.

    To give you another example, to better understand my comment on why I’m thinking like this, are some of the NIST curves in cryptography to sign SSL certificates which do not contain any backdoor by itself but have known weaknesses which allowed the NSA to snoop on communication for years… Intentionally or not that’s you to decided with your personal believes. And that’s not something I read on reddit or first search engine result but mostly research papers or people in the education sector writing trusted paper. And thankfully zlibrary exist or I woulsn’t be able to access those resources.

    I surely oversimplified everything here, with my limited knowledge, but that doesn’t take away (IMO) that we shouldn’t trust any big player in the IT infrastructure overall.

    PS: And yes Microsoft probably doesn’t need to implemented such measure, cauz’ people are anyway giving those info away for free… You’re right on this point :).