• 0 Posts
  • 15 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle


  • I looked into distros using plasma 6 for a bit, but decided it wasn’t worth the hassle. It’s also a not trivial boot setup (dual boot with w11 and bitlocker + LUKS + secureboot) and the (k)ubuntu installer just handled it flawlessly (meaning not having to enter my bitlocker key on every boot)

    Works fine for me (except some weird locale issue, but I knew that in advance)








  • Because my pc uses 4-5 times the power to run the same ps4-era game. (Especially nice when it’s hot in summer)

    So I play it on my ps5, which offers me quick resume as well.

    I love pc gaming, been building pc’s for over a decade at this point, but I do also see the advantages my ps5 has over my pc.

    Could I build a more efficient and quiet pc, attach it to my tv and use that? Probably, and it’d be quite good with steamOS on it, but it’d be finicky to get sleep/resume working on it, and it’d probably cost me more.


  • Wireguard (which is what tailscale is built on) doesn’t even require you to open ports on both sides.

    Set up wireguard on a vps first, where it is accessible, then set it up from within your network. It’ll traverse NAT and everything, and you don’t have to open a port on your network.

    Tailscale is the exact same thing, just easier because it does everything for you (key generation, routing, …). Their service replaces your vps, up to you if you think that’s acceptable or not. IMHO, wireguard is worth learning at least. I eventually (partially) switched to tailscale because I’m lazy, and all services I host have authentication anyway, with vpn just being a second layer.




  • I don’t think programming language is a good metric for security. I assume everything I host has issues, and then try to mitigate from there.

    IMHO, a better approach is to vet the project beforehand, looking at whether it is still actively maintained. I usually use things like commits, issues, etc to try and gauge whether a piece of software is actively maintained so that when an issue arises, it can be fixed.

    You can mitigate much of the risk by using some basic best practices, like isolating all apps from each other (using docker, for example), using a reverse proxy, tools like fail2ban or a web application firewall, using proper database permissions for each app, etc

    What I also do is add another layer by making certain applications accessible only over vpn. That won’t work for some tools, obviously, but also reduces the risk for tools you are only using yourself.