Wander

joined 1 year ago
MODERATOR OF
[–] Wander@yiffit.net 5 points 10 months ago (4 children)

Yes, but It's pretty hands off since 99% of security stuff is managed for you by the Lemmy software, including rate limiting. Just make sure you use a secure password and if you want put the instance behind cloudflare which is super easy to do.

[–] Wander@yiffit.net 6 points 11 months ago

Don't buy Apple. As simple as that. You know when a company gives you the creeps? That's how I feel about Apple.

[–] Wander@yiffit.net 2 points 11 months ago (2 children)

I'd say to start with CF tunnels unless you need non-web based applications. Cloudflare tunnels require you to have a domain, though.

It has the added benefit that you have network monitoring, logging and some filtering for security that they do on top and you get to manage everything from their web interface.

be warned that the first time can be a bit confusing, but since it's done using their web interface it's easier than if you have a problem making wireguard work.

  1. Create a tunnel with a public hostname that will be the url to access that service. During the creation of the hostname specify you want it protected by L7 application firewall.
  2. Create a new self-hosted application in cloudflare application section and for starters use the default login email and in rules specify the list of emails that are allowed to login

you should now be able to access your application from anywhere.

Alternatively, if you have a DNS server in your home network you can add a private IP range to your tunnel. Let's say 192.168.0.0/24. Then when you connect with their pseudo-VPN (cloudflare warp or cloudflare ONE) you can directly use your home network's ip address from that device. If you tell your device to use a local DNS server that resolves your internal services, you'll be able to connect to them that way.

[–] Wander@yiffit.net 6 points 11 months ago

She'll have to get a computer and use it in her free time instead of a phone. It's the best way

[–] Wander@yiffit.net 6 points 11 months ago (1 children)

Joplin I think, or Trillium but that one could be less user friendly.

[–] Wander@yiffit.net 8 points 1 year ago* (last edited 1 year ago)

Install proxmox on a computer with plenty of RAM and CPU and you'll be able to create VMs which you can give out or rent out to anyone.

In regards to access, ipv4 is not a good idea. Especially not residential IP addresses., You should get ipv6 addresses maybe from a tunnelbroker. But anyways, first you need the server with the hypervisor (which is what you're looking for) and then you can slowly run tests, learn and eventually figure out networking.

Btw, it might be cheaper to simply rent a server, which would solve the issue of ip addresses. OVH has cheap servers and a proxmox install wizard.

Just please don't use it for anything sensitive until you can find someone to give a quick check up in regards to security to make sure you haven't missed anything. Unlike a regular PC, this one is expected to receive inbound connections which has its risks.

But don't worry about that too much now. Find an old computer or rent a server, install proxmox and start testing, playing around and learning.

Edit: chatgpt is good when wanting to learn this stuff. Especially gpt-4, but even gpt-3.5 will do. Just don't trust it blindly as it still messes up about 20% of the time. But it's often better than googling for tutorials since you can't often find what you're looking for.

Edit2: the setup I propose will allow you to divide a regular computer into 100s of virtual ones limited only by the total RAM, disk and CPU. If you only want a web server on dedicated hardware get a raspberry pi, because my proposal would be overkill. But it's the closest to "being your own cloud provider".

[–] Wander@yiffit.net 3 points 1 year ago (1 children)

Am curious. Are you able to run a modern windows 10 virtual machine / virtualbox vm on XP?

[–] Wander@yiffit.net 1 points 1 year ago* (last edited 1 year ago)

Yes. If your country is authoritarian use cryptocurrency such as Monero. Even Bitcoin can be much better.

The bank would know the amount, the merchant and other details even if it's a merchant from abroad. The bank might have a duty to report certain transactions or could be forced to give out a record. Other international payment process or foreign banks will generally not refuse a request if it comes from a country government you are a citizen of.

You can use crypto to buy gift cards to shop at regular retailers. This is your safest bet if you're concerned about a state surveillance of your transactions.

 

Artist: https;//furaffinity.net/user/evenstevnh

[–] Wander@yiffit.net 63 points 1 year ago (7 children)

One step towards avoiding misuse is to stop considering porn to be misuse.

[–] Wander@yiffit.net 6 points 1 year ago

Use insular to install it on your work profile

[–] Wander@yiffit.net 16 points 1 year ago

Not that instance, but Lemmy is missing a lot of moderation and federation tools. Right now you only have sledgehammers to deal with tiny nails, in regards to tooling.

[–] Wander@yiffit.net 9 points 1 year ago (1 children)

I'm planning on bringing a spare phone only on my trips to the US.

1
submitted 1 year ago* (last edited 1 year ago) by Wander@yiffit.net to c/furry@yiffit.net
1
submitted 1 year ago* (last edited 1 year ago) by Wander@yiffit.net to c/furry@yiffit.net
 

This new version introduced a system so that your instance stops sending out content to other instances that are supposedly dead / offline.

Unfortunately for some reason there's false positives. When I checked comparing the results from a curl request vs the information in our Lemmy database I found over 350+ false positives.

In the DB there is a table called "instance" which has a column called "updated". If the date on that column is older than 3 days, your server will stop sending any content to those instances.

For some reason I had entries that were dated as last being alive in July, while actually they were always up. If an entry is incorrect, you can fix it by manually using an update statement and adding today's date. If your instance is not too large you can safely update all entries to today's date and check if everything works as expected from then on any new content created on your instances.

The dead instances won't have an impact unless your instance is larger and generates more content, thus it might be easier to simply update all entries and have Lemmy believe they're all alive if you start noticing wonky behavior and don't want to check one by one.

If you don't know how to access the database run this command where domaincom is your instance domain without the dot.

  1. docker exec -it domaincom_postgres_1 busybox /bin/sh

  2. psql -U

(The default user is 'lemmy') You could technically do this is one single step, but it's good to know the command to get shell access to the container itself if you didn't know how to.

This should give you access to a postgres CLI interface. Use \c to connect, \dt to list tables and \d+ tablename to list table definition. You can also run SQL queries from there.

Try with this query: SELECT * from instance to list all instances and their updated date.

You can use other SQL queries to get better results or correct false positives. Just be careful with what you execute since there's no undo.

view more: next ›