seanho
seanho
About
- Username
- seanho
- Joined
- Visits
- 875
- Last Active
- Roles
- Member, OG
- Karma
- 145
- About Me:
- seanho.com
Comments
-
Nowadays with Proxmox, virt-manager, vagrant, etc., it's super easy to spin up a few KVMs and/or LXC and see for yourself just how dependent the guest OS is on the host OS, and how easy it is for the host to access secrets in the guest.
-
Something to be aware of, which tripped me up a number of times: add_header declarations are generally inherited from enclosing blocks. E.g., if headers are specified in a server block, they'll propagate to nested location blocks. However, if a…
-
Farewell to two idlers in FR and UK, it was good while it lasted. Consolidating to dedis and home lab.
-
I looked into this with ffmpeg scripting a few years ago, but never finished it. Would you mind tossing your script up on github?
-
V2ray and caddy in-memory cache?
-
Huawei corporate has also distanced themselves from it, saying it was the independent actions of a single dev (although pretty high up)
-
Agreed that VNC should not be exposed to the internet. SSH tunnel, VPN (OpenVPN, WireGuard, ipsec, etc), or SSL to a Guacamole server on the LAN. Port tcp/5900+(display number). If using TightVNC server, don't forget client must also be tight …
-
(Quote) No worries, I understand why you'd want to keep it similar to the current storage VPS offerings. My use cases would be fine with just an S3 interface rather than a full VPS, and I was thinking it might spare you some headache in that y…
-
How about an S3-compatible object storage service, with either metered or unmetered traffic?
-
Another possibility is to copy/rebase onto a btrfs filesystem and use bedup (extent-panel dedup). Then you get copy-on-write if you need to make modifications. ZFS is another option.
-
(Quote) burp is ok, not a ton of development, but not orphaned (one-man show, coming out of his master's thesis). I moved to it (from BackupPC, if memory serves me) mostly because of the Windows VSS support, and haven't looked in detail at…
-
PoI's Thornhill
-
Great topic! I've been using a little-known tool called burp for several years, but may move to borg in the future. Incremental with daily/weekly/etc history. Block dedup on the server, which helps with a few Windows clients for which I'm…
-
What location are you looking for?
-
FreeNAS can be installed to a USB drive; most of the OS is loaded into ramdisk, so it doesn't hammer the USB drive. If using hardware RAID, make sure you're able to procure an identical replacement card (and flash to same firmware) if/whe…
-
Very. The assumption is that you'd run this on dedis, VDS with unlimited CPU usage per ToS, or owned hardware (e.g., homelab). Don't run F@H on a LES NAT VPS, just ... don't
-
The probability of not winning any of the next drawings from 2k-10k is (untested python): numpy.prod( 1.0 - 1.0 / r for r in range( 2000, 11000, 1000 ) ) So the probability of winning at least one of those drawings is 1 minus that. Comes out to ab…
-
Yep, just touch /option.netfilter and wait at most half an hour for the host cron job to pick it up. The file will then be renamed to /netfilter.enabled, container will reboot on its own, and you'll be good to go. There's also /option.fus…
-
You are too kind, WSS! My expertise is not in hosting (nor is it surveillance!), so I have learned a lot from this community over the years.
-
I have not used solar powered cameras. Everything I've seen points to sticking with PoE. For power, the daily charge/discharge can be taxing on batteries. For data, local-only storage is useless if it gets stolen / destroyed, and WiFi tends to …
-
Dahua 2MP with Sony StarVis sensor. Can see in pitch dark, it's like magic. (Some of the Swanns are rebranded OEM Dahua.) Andy at EmpireTech, drop him a line on ipcamtalk or his AliExpress store; his Amazon prices tend to be higher. Also, Blue…
-
Wallabag (on the above list) seems to be popular
-
Selling the old hardware for cheap? :wink:
-
As an end user, I find lobster (LunaNode's panel) a beauty to use. I don't know about WHMCS integration or monthly/annual billing, though. https://github.com/LunaNode/lobster
-
Can vouch for IonSwitch in Seattle; network and uptime have been solid. I haven't need to use support much, but they've always been prompt and courteous as far as I can tell. I appreciate their slow and measured approach to expansion.
-
It's OpenNebula; if your plan has the resources to support it, you can create multiple VMs. ISO upload is in there.
-
https://k3s.io/ Kubernetes for the edge. I'm working on an ansible role to install it on top of debian; this is my plan to run it on my fleet of VPSes. Sticking with KVM >1GB for now. K3s uses sqlite instead of etcd, so no HA server yet (th…
-
Ok then: * Best LES provider: IonSwitch * Best non-LES provider: OVH
-
* IonSwitch 2. DRServer mod edit: fail.
-
Enterprise pull equipment can be so cheap. Instead of paying for a support contract with same-day replacement, just buy two or three spares! (Yes, I know corporate procurement doesn't work like that. But in a SME situation where you can direct…
-
I understand, my point is that these old boxes are so cheap nowadays that you can pick one up for a dedicated firewall and put your M4 to work with a hypervisor. You can have a second failover instance of PFSense (with CARP) on a VM if you like, bu…
-
And after you learn iptables, now you can learn the "new hotness" that is nftables....
-
R210ii, HP T620plus, T730, M73/M93p SFF, X9SCM/L in a little 1U, lots of options. These are all old tech, but will do very well as dedicated PFSense boxes. For the SFF and thin clients, make sure there's space to add a $20 PCIe NIC.
-
The cutover to nftables default is such a pain. Kubernetes also requires reverting to iptables-legacy.
-
Do you need it to be new with a support contract? If not, used Dell 5324 is dirt cheap and has everything you list except for 10G uplink. To add 10G uplink, Aruba S2500-24T. There are lots of these sort of EOL managed gigabit switches around as e…
-
For debian, in addition to what you've listed: git, rsync, locales, apt-transport-https. Perhaps bash, but dash may well be sufficient. Nowadays, just ssh and apt are enough for ansible to install everything else I'd need.
-
This would be awesome! I never considered that it might actually work.
-
Yep, that was my conclusion regarding gluster, as well. I have my doubts ceph would tolerate long latency, either. Maybe it could work if I segment VPSes into geo-regions of latency less than 40ms.
-
I enforce that all server and app config is managed and tracked in git, and all data is in storage buckets that can easily be backed up with common tools like borg. If a server dies, reinstall the OS, hit it with ansible, and restore data from backu…
-
In the past year, I've started getting into home labbing and now have around 70c/140t in a 36U rack, plus some pretty nifty switches. I thought that would decrease my annual spend on VPSes, but somehow it has only increased....