[–] 9 points 1 year ago (1 child)

Yes it's not too much bother to set this up, it can be put into ansible and once working I've not had to touch it again. Here's another dracut tool using dropbear that works well and has decent instructions on setup: dracut-crypt-ssh

The crypt-ssh dracut module allows remote unlocking of systems with full disk encryption via ssh

  • source
  •  

    Update: CMA moving in right direction? https://www.theguardian.com/technology/2025/oct/22/apple-google-face-enforced-changes-uk-mobile-phone-dominance-uk-competition-watchdog-stricter-oversight

    Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

    On Google's recent announcement about developer verification he writes:

    This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

    ...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

    He includes his report as a basis for others to use perhaps.

    Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

    On Google's recent announcement about developer verification he writes:

    This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

    ...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

    He includes his report as a basis for others to use perhaps.

    Dan is a UK based full stack web developer who is working on Bookstack, a self-hostable wiki platform (MIT license).

    On Google's recent announcement about developer verification he writes:

    This is a massive leap in control, further centralising approval power to Google across the entire Android ecosystem while cementing themselves as the ultimate gatekeeper of what users can run on their own devices, all under the guise of security. This is a further step away from an open ecosystem, while being harmful to any platform competition & innovation.

    ...as a UK resident I feel my best bet to counter this is via the Competition & Markets Authority (CMA).

    He includes his report as a basis for others to use perhaps.

    [–] 3 points 1 year ago

    Perfect Days, 2023

    Really love this. It lures you in and casts a spell with its mindful observation of a few days in one man's life. Feels timeless, the film seems to do little but so much is said. Director and star use the lightest touches to invoke something deep. The scenes with his sister are just beautiful in how they show us so much with so little. It's just an exquisite film.

    One Battle After Another, 2025

    So good - how it's told, the soundtrack, acting, just everything. Yes it's characters are somewhat cartoonish and it covers a lot of ground without much depth but it's a great ride so for me its forgiveable. Can't wait to see it again on streaming.

  • source
  • [–] 3 points 1 year ago

    Stow/chezmoi/your choice for dotfiles, config mgmt for system config. You don't need to rebuild whole server to start with ansible tho, you can take over one file at a time and grow as you learn.

    As you've found I don't know of a tool that will cover both usecases as config mgmt for dotfiles is too much and dotfile mgrs for system config is probably out of their scope.

  • source
  • [–] 3 points 1 year ago (1 child)

    Valkyrie (2008):

    "a reasonably entertaining drama about the time Tom Cruise tried to kill Hitler" about sums it up. Rescued (just) by worthiness and accuracy of the treatment of its subject matter. Mission Impossible in Berlin. Would have benefitted from less English actors and more German. Makes me want to rewatch Downfall (2004).

    Flow (2024):

    Second time watching this - magical and moving, still. Had the family mesmorised.

  • source
  •  

    Edit: thanks for all your help and replies, this is a such a great community!

    I would like to host a public service for some family, probably Peertube so we can share some videos. Invite only.

    There's no way I'm going to get everyone onto a VPN, it's a non-starter though I would prefer it.

    I am thinking to use a VPS with anubis and either crowdsec or fail2ban (or both?!) in front of Peertube. Will apply as much hardening as I can muster behind that: things in containers, systemd hardening, SELinux/Apparmor enabled/tuned, separate users for services, the usual. All ports shut except 80/443, firewall up.

    Despite all this I expect it will get scanned and attacked as it will have to expose ports 80/443 to the world so for family it will just work.

    Is there anything else I should consider for security? Is Peertube the weakest link in the chain? (a little concerned their min password length is 6 it seems and no 2fa). So long as I keep whole thing up-to-date is it as secure as anybody can manage these days (without resorting to VPN)?

    Is it all too much hassle and I should look for a company that offers hosted Peertube so they can worry about it?

    Thanks for any and all advice.

     

    Figured I'd ask here as thought self-hosters would care most about looking after their photos.

    What do you do with friends' photos you'd like to keep hold of? Maybe there's a pic on a chat app or they've sent you a link to an album on google photos.

    Would you just throw into your own pile of photos or do you carefully adjust metadata to indicate who took them? Just use dirs to separate them from your own? Interested in any and all thoughts.

    view more: next ›