Crowdsec will block external, public, IPs

Fail2Ban will block login attempts (ie from anywhere)

I have a similar setup with pfSense, pfBlockerNG, HAProxy, etc, but I keep F2B running on my DMZ server in case something is ever compromised as it’ll block / slow down anyone trying to move around the network.

Maybe, I’m self hosting several trees, so… 🤷‍♂️

Depends on the variety of course… my Willows need cutting down, whereas the acorns I planted before the willows are still tiny oaks in pots 🙂

Ahh, I see what you mean. Being asked to pay twice isn’t nice…

But would you / do you voluntarily donate to Jellyfin’s development?

I get it, it is (& a lot of things are) free… but at some point the developers need to recoup something…

Otherwise Jellyfin’s development will eventually dry up as raw enthusiasm runs out.

Can I (figuratively speaking) just change the destination in my backup scripts and start writing to Hetzner… or are they using a completely different setup?

Does that also include Burial?

Whatever you end up with

• test a restore
• consider how to deal with the source data being corrupted / ransomed / etc, ie multiple versions

I replaced Nextcloud with syncthing (files) & radicale (calendar, contacts & todos)

No-one used the calendar on NC, they just used their phones, Outlook, etc

No-one used the photo gallery on NC - that’s now Immich … again, with syncthing.

During the early days, just doing an update would break things.

For a small home setup, NC is too big, too clunky and just not the right tool.

Critical Synology Vulnerability Let Attackers Remote Execute Arbitrary Code

Just build your own. It’s easy. Move on.

Yeah, that’s all fine - when it works, it works well… But sometimes it just seems to get caught up in an error and can’t seem to reset for a few minutes. But ok, looks like your setup’s working ok, so must be just mine. I disabled a load of Google stuff and run trackercontrol (a local VPN on the phone that blocks stuff), so maybe I’ve broken something…

Hmm… I’m using gotify with a Ras Pi to send the alerts and I sometimes get long delays…

AFAICT it’s the phone, not the Pi, but all I can see are lots of websocket errors in the gotify client the time… are you not getting those then?

we are very excited about being part of the Claudflair team

Guess they’re so excited (and thrilled) that they forgot how to spell

Yep, hence my comment…

You should see the fear on people’s faces when I suggest they restore a backup - esp. on Production.

My advice (to combat their fear) is to take an offline backup that has some kind of checksum and then immediately restore it.

That gets them past the initial fear and then we progress onto other backup strategies… if needed.

Backups… fine

When’s the World “test you can restore” day?

Ok, didn’t think about “unlimited” actually being slower - thanks for the insight.

I’m running a pfSense f/w at the edge, so split horizon DNS and haproxy are already sorted… I’ll check out wireguard - should be straight forward

Thanks

I’m considering going this route - just to hide my (static) home IP.

What’s the rough sizing I’d need for a VPS? I’m guessing the smallest possible, but with the best / unlimited data usage?

Yep, it’s something that more people need to consider to keep their free (as in the source code is not a prisoner) software going

It looks like jellyfin costs ~$500/MONTH just for their hosting fees: https://opencollective.com/jellyfin

If everyone using jellyfin contributed $1/month, I bet that would be covered

(No, I’m not affiliated with them)

What’s the general thoughts on running a TOR node?

I think an exit node would probably get my (domestic) ISP asking some questions and / or my static IP getting blocklisted quickly

Yep, BOINC has regularly warmed my home office over many a winter… until I shutdown that machine.

Maybe I should try again…