It’s not that difficult to get SELinux working with podman quadlets, especially if you run things rootless. I have a kerberized service account for each application I host and my quadlets are configured to run under those. I very rarely encounter applications that simoky can’t be run rootless but I usually can find an adequate alternative. I think right now the only thing that runs as root is one of the talk or collabora containers in my nextcloud stack. No selinux issues either.

Thank you, it’s a lot of work and I could get by with a lot less but I’d like to essentially have enterprise level everything for me to just fuck around with and provide to friends as i see fit. It’s a bit if a hodgepodge of well implemented stuff stuck together with duct tape and bubblegum but im refining it slowly all the time.

I fr hate using AI to troubleshoot because I can feel how it makes me lazy, but sometimes using AI is better than banging my head against a wall for 10 hours. And usually i stop once I find a productive line of research or investigation to follow.

I care about displaced people in general and stand in solidarity with all of the oppressed of the world. That includes many varieties of Americans including the indigenous people of North America who have been displaced and genocided by Euro-American colonialism and also rural and suburban Americans who are being run out of their communities for the sake of capital and profit. And my heart extends to those outside of the US from Palestine to Sudan to the Congo to every other corner of the Earth.

but AI is increasing the rate at whoch data centers are being built which is putting enormous strain on a lot of communities with aging or inadequate public infrastructure and utilities like water and electricity. Some people have seen water and/or electricity prices double or have even lost access to their public utilities because everything is being routed to a nearby datacenter thats younger than their kids. And in many instances politicians are ignoring the communities they’re displacing because theres significant money involved.

For local DNS i run FreeIPA since everything in my network is domain controlled. I’m gonna look into adding filtering through that, but we’ll have to see how it goes.

Theres so much I end up handling manually with my UDM that at this point i might rather just install open source routing software on it atp. I don’t even use the web UI for wireguard because I can’t even specify the allowed IPs for a connection.

I just turned off ad blocking. I can set up network wide filtering without relying on proprietary incompetence.

I’m not entirely sure how I want to run my ad blocking yet. I left adblocking on for the wifi subnet because I don’t mind it there, and I have ublock origin on my PC. I might use PiHole but my DNS on my network is actually managed by FreeIPA so making sure everything works properly there is paramount. I’m pretty sure I can do that easily but I need to test it to make sure my forward zones work as expected and nothing breaks.

Yeah I found some documentation from Ubiquiti afterwards that said all DNS requests would get proxied, although it didn’t mention it wouldn’t forward dynamic updates.

I did use dig, but I didn’t do a trace which probably would’ve been helpful. I just didnt anticipate that id be getting MITM by my own infra.

Bitwarden as Vaultwarden enables TOTP.

I actually have a hybrid setup. My public DNS and my mail server are in the cloud as those are too important to risk going down. I also have a FreeIPA replica in the cloud to help manage them. Then I set basically everything else up in my homelab because I don’t care if roundcube goes down so long as IMAP and SMTP still work.

I have the renewal process itself automated, just not the replacement process.

I selfhost my own mail server (my primary mail in fact).

My LE certs expired on Christmas eve, when I was also getting sick. I didn’t realize my mail server was down for a week until about NYE. Luckily Postfix queued all my emails and there was nothing important lost, but I am reevaluating self hosting my mail server. That being said, this was also the worst issue I’ve faced in over a year of self hosting mail. And it only arose because my dumbass still hasn’t automated my certificate rotation.

ofc!

grayjay, it’s an app developed by Louis Rossman to combine a lot of streaming platforms into one privacy and security respecting app. it does have billionaire backing tho if that yanks your chain

I agree with you but that doesn’t mean everyone does. Whether you like it or not, social media platforms are going to be used. OP is just sharing a tool they built and believe may be useful to others for free. There’s no need to shit on their work just because you ideologically disagree with the underlying services managed. Again, I feel the same way as you but OP is contributing a useful tool to the people; that is seldom a bad thing. I could see myself using this to boost my LinkedIn presence, because it’s one of the few things I have and need in my early career. Would I like to get rid of my LinkedIn? Absolutely. Do I despise most social media platforms (including Lemmy to a degree)? Definitely. Do I appreciate OP for making and sharing this? You bet I do.

My brother in Christ, im sorry to inform you but the upcoming fiscal crisis are gonna be some of the least of your kids worries. I’m still probably closer in age to you rather than them, but i grew up knowing that money is gonna mean jack shit once the water starts boiling (metaphorically, but hyperbolically realistic). We’re the frogs in the pot and the economy is gonna be the least of our troubles. We’re seeing a global rise in fascism, climate disasters, war, inequity, and yes financial instability. If you wanna help your kids, get involved in the community and organize. Start unions at your work places and march in protests for a better future. I’m not talking about a stronger or more fashy future, but one where we work together. Join or make mutual aid networks where you live. The best thing you can do for your children (imo, coming from a young person) is help set up the future you want for them. I would hope that’s one of community and mutual aid where we help each other not because we expect a reward or are paid to, but because together we stand taller and can hoist up those who cannot stand on their own. I hope i don’t sound too preachy, but it sounds like you love your kids so I implore you to get involved further. The future did not look kind to me when I was a child, and it looks even less hospitable now. We can change that. Direct action and mutual aid are the way forward to a better future imo.

I mean i definitely do in a sense of the word