I replaced Nextcloud with syncthing (files) & radicale (calendar, contacts & todos)
No-one used the calendar on NC, they just used their phones, Outlook, etc
No-one used the photo gallery on NC - that’s now Immich … again, with syncthing.
During the early days, just doing an update would break things.
For a small home setup, NC is too big, too clunky and just not the right tool.
Thanks for the links, I’ll take a look as I’ve never actually played with port knocking.
Is this for internal facing servers? Not much more than CIS and the usual Best Practices (no root for SSH, etc)
For a DMZ node, minimal software (ie Arch) and automated defenses like fail2ban, key authentication, etc…
Firewalls with Geo-IP blocking also help, but that’s not technically what you’re asking for.
Would you use that on internal LAN connections or only external internet facing connections? I’m not aware (not checked) if any firewalls support it… not sure why?
Critical Synology Vulnerability Let Attackers Remote Execute Arbitrary Code
Just build your own. It’s easy. Move on.
Good god, is ActveX still alive?
I saw a bird on my lawn today…
Yeah, that’s all fine - when it works, it works well… But sometimes it just seems to get caught up in an error and can’t seem to reset for a few minutes. But ok, looks like your setup’s working ok, so must be just mine. I disabled a load of Google stuff and run trackercontrol (a local VPN on the phone that blocks stuff), so maybe I’ve broken something…
Hmm… I’m using gotify with a Ras Pi to send the alerts and I sometimes get long delays…
AFAICT it’s the phone, not the Pi, but all I can see are lots of websocket errors in the gotify client the time… are you not getting those then?
we are very excited about being part of the Claudflair team
Guess they’re so excited (and thrilled) that they forgot how to spell
Yeah, my reading speed has decreased a lot as I’m continually trying to assess if what I’m reading is true or not
Like, maybe the AI was the true story and the April fools story was the April fools? 🤯
Are you saying I could get Linux running on my Fairphone 3+?
Mind you, yeah, 3G switch off would then make life difficult…
Enterprises just lease desktops / laptops and replace them with the latest version of Windows… my team used to be after reasons to get the latest OS / laptop, now IT have to prise them out of their hands
Yep, hence my comment…
You should see the fear on people’s faces when I suggest they restore a backup - esp. on Production.
My advice (to combat their fear) is to take an offline backup that has some kind of checksum and then immediately restore it.
That gets them past the initial fear and then we progress onto other backup strategies… if needed.
Backups… fine
When’s the World “test you can restore” day?
Ok, didn’t think about “unlimited” actually being slower - thanks for the insight.
I’m running a pfSense f/w at the edge, so split horizon DNS and haproxy are already sorted… I’ll check out wireguard - should be straight forward
Thanks
I’m considering going this route - just to hide my (static) home IP.
What’s the rough sizing I’d need for a VPS? I’m guessing the smallest possible, but with the best / unlimited data usage?
Ok, so setup a DC (in a VM on your linux laptop), install Win11 joined to that domain, create a local user, then leave the domain & destroy the VM…?
Or install Linux 👍🏻
Dunno how long you’ve been online, but you should’ve seen searching before Google came along… it’s still better now.
But, there was not much tracking back then…
Whatever you end up with