[–] 2 points 1 week ago (1 child)

By "we" I don't mean just the people of Ukraine but the rest of the world too. Fuel prices are through the roof and the world economy is shit due to the dick measuring contest between that orange idiot and the two other dictators - Putin and Netanyahu.

  • source
  • parent
  • context
  • [–] 3 points 2 months ago* (last edited 2 months ago)

    CoMaps is available on F-Droid and it works really well. There are little nuances like search not displaying the suburb for a street address, especially where I live, so it takes a bit of guessing. Overall though, offline, open source, great navigation, zero complaints.

    Edit: fixed typo.

  • source
  • parent
  • context
  • [–] 7 points 2 months ago (2 children)

    My solution is surprisingly Microsoft OneDrive, but hear me out. I have the family plan that gives you 1TB per account and you can have up to 6 in the family, giving you a total of 6TB. The thing is, I don't trust Microsoft, so I use rclone with a crypt remote that encrypts everything before it reaches OneDrive and the encryption key lives in the rclone config on my machine. Make multiple local copies of this file and you're all set. You can replicate this with any storage provider and you don't have to trust them.

  • source
  • [–] 3 points 2 months ago (3 children)

    For auth providers, I've tried all the ones you named. Here's my brief analysis:

    • Authelia - deployment and configuration is moderately complex but documentation is great and it works well with Caddy reverse proxy.
    • Authentik - way too complex to deploy and configure, requires you to understand their concepts very well. I'd stay away from it.
    • PocketID - super easy to deploy and configure. Passkeys are easier and arguably more secure than passwords and it supports a few methods other than passkeys.

    With these services you mentioned you want to or are already hosting, you could use the following in the order they are listed:

    1. Basic auth using Caddy (reverse proxy layer)
    2. Anubis to ward off bots and scrapers (between reverse proxy and hosted service)
    3. PocketID for auth (before service as single sign-on)

    I would recommend 2 and 3 as 1 is pretty useless against a determined attacker. Anything that's on the public internet is bound to be attacked at some point, so follow best practices and perform server hardening on the host machine. Remember, you classify the sensitivity of the data you host and determine the severity of the risk if that data were to be exposed. So work with that in mind when choosing an option.

  • source
  • parent
  • context
  • [–] 3 points 2 months ago (5 children)

    Firstly, what's your threat model - as in what are you trying to block? For SSH access, fail2ban works. For bots and scrapers, I'm not sure how effective it is. What jails have your enabled/configured for fail2ban?

    I don't have your setup, but like someone else here said, I use Caddy on Docker as a reverse proxy for all my self-hosted services running in Docker containers. One really effective means of blocking AI scrapers and bots is Anubis - https://github.com/TecharoHQ/anubis. It might be worth a shot. It works for me.

  • source
  • [–] 76 points 2 months ago (5 children)

    Amazon wasn't caught doing shit. "Caught" implies there is a possibility of consequences. Two days from now nobody is going to remember this story and the world will move on and there will be no consequences for this.

  • source
  • [–] 21 points 3 months ago (2 children)

    I do commend the strength of his rectum for shitting while sitting in a chair. It does take great resolve to keep a straight face while doing it in a room full of people with cameras pointed at your face.

  • source
  • [–] 65 points 3 months ago (6 children)

    This bullshit age verification doesn't solve anything. All it does is bring circumvention measures to users' attention and they go around it. Then these idiots wonder why it didn't work. It is a pointless, wasteful exercise.

  • source
  • view more: next ›