• 0 Posts
  • 258 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle


  • That is a different spin than the original comment, which is why I made that commen.

    https://docs.getaurora.dev/ https://docs.projectbluefin.io/ aurora has one small page of documentation total unless you click on the logo which suddenly opens a hidden unlabeled drawer with sparse docs. Bluefin has even less. I consider this near-zero documentation. So how would OP’s non-techy girlfriend (or someone who has only heard of aurora and bluefin from this thread) know to go to bazzite, a completely different project to most people, to debug their completely different OS? Because googling “ublue aurora flatpak won’t install” literally gives this page: https://docs.getaurora.dev/guides/software/ which is literally almost useless.

    Bazzite’s documentation has gotten way better since I installed it (they had almost nothing on rpmostree commands when I did), but I don’t believe everything in the documentation for bazzite applies the same to aurora and bluefin, especially with differences in pre-installed non-layered gaming defaults vs working with flatpaks will be not even close to the same.

    Also fedora knoite has little documentation https://docs.fedoraproject.org/en-US/fedora-kinoite/. It has enough to get you started and installed, but that is about it. It has one single line of code about rpmostree for example, not even anything about installing an RPM not in fedora’s limited repos.

    I didn’t say any of it was bad. Just that you have to be slightly careful with using those for non-techy users because the documentation just isn’t there yet.



  • That said, it isn’t fun for firmware development.

    I have daily driven it for 6 months or so. Most things work great but more niche uses like embedded firmware development, digitally signing documents (impossible on bazzite as far as I have found) and anything that requires udev rules or interplay between software.

    Otherwise it is great! Much better day to day than opensuse Kalpa.


  • Crazy enough, I have everything going that I want to on my server!

    • *arr suite and jellyfin
    • traefik reverse proxy with crowdsec + bouncer for some sites (e.g. not documents or media)
    • paperless-ngx for documents
    • immich for photos
    • leantime to manage personal projects
    • Book stack for a personal wiki
    • calibre-web for my library
    • syncthing for file and music syncing so I don’t have to stream music
    • valheim server for me and my friends
    • boinc for turning my server to a productive heater in the winter
    • home assistant for my in-renovation smart home

    As far as my server goes, I have everything I need. Maybe setting up something for sharing files over the web if needed. I used nextcloud for that before it killed itself completely and I realized I never really needed it.

    Next is working on my smart home because we had to fully strip the house to renovate. KNX first, zwave for things that KNX doesn’t have or are crazy expensive, ESPHome for everything that the other two can’t accomplish. Minimal 2.4GHz interference and don’t have to rely as much as possible on flaky wireless in a brick house.






  • https://immich.app/ I would also put in A tier. Not without its failings and requires a self hosted component, but holy hell is it good.

    KISS launcher is also S. It does what it sets out to do and does it well. Not everyone’s style, but it is close to flawless for people who like it.

    Heliboard A tier. Much better (right now) than florisboard but no swipe typing

    AntennaPod easy S tier or even higher. Completely refined, great podcast experience, almost no bugs, great stats, looks very polished, one of the best podcast apps including all non-foss

    Eternity for Lemmy B tier. Great UI, but not all of the old functions from infinity are either disabled or translated to Lemmy which leads to some crashes and broken buttons.

    LiftLog (B tier) is an open source weight lifting app. Not yet on fdroid, but hopefully in the future. Very simple, very beautiful interface, everything that I personally need except it doesn’t yet have the feature to order your lifts chronologically during a workout which sucks when you have to modify the order or lifts done because you go to a public gym


  • Aren’t people here conflating intrusive thoughts vs the call of the void? I remember someone explaining it to me a bit like this:

    Intrusive thoughts are often violent and more “you need to kill yourself right now, jump in front of that train!” Or “push that person down the stairs now, do it!!!”

    Where call of the void is much more passive as in “what if/I could I jumped in front of a train right now” or “if I pushed that person down the stairs right now, they would probably get very hurt” and extends to things like “I could just drop my phone in a sewer grate”

    My understanding is that everyone™ gets the second but a lot less people get the first. I also get the second but not the first. I could be wrong because it was a random person that explained it to me.






  • Neither are all but the cheapest smart TVs.

    It’s called double and triple dipping. Every single company that can get away with double, triple, quadruple dipping can and does.

    Buying the initial product + Subscription + selling your data + dropping support to force you to buy a new product is quite commonplace. The old mantra of “if you are not paying, you are the product” doesn’t apply anymore because most companies do both.


  • Honestly, crowdsec with the nginx bouncer is all you need security-wise to start experimenting. It isn’t perfect security, but it is way more comprehensive than fail2ban for just getting started and figuring more out later.

    Here is my traefik-based crowdsec docker composer:

    services:
      crowdsec:
        image: crowdsecurity/crowdsec:latest
        container_name: crowdsec
        environment:
          GID: $PGID
        volumes:
          - $USERDIR/dockerconfig/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
          - $USERDIR/data/Volumes/crowdsec:/var/lib/crowdsec/data/
          - $USERDIR/dockerconfig/crowdsec:/etc/crowdsec/
          - $DOCKERDIR/traefik2/traefik.log:/var/log/traefik/traefik.log:ro
        networks:
          - web
        restart: unless-stopped
    
      bouncer-traefik:
        image: docker.io/fbonalair/traefik-crowdsec-bouncer:latest
        container_name: bouncer-traefik
        environment:
          CROWDSEC_BOUNCER_API_KEY: $CROWDSEC_API
          CROWDSEC_AGENT_HOST: crowdsec:8080
        networks:
          - web # same network as traefik + crowdsec
        depends_on:
          - crowdsec
        restart: unless-stopped
    
    networks:
      web:
        external: true
    

    https://github.com/imthenachoman/How-To-Secure-A-Linux-Server this is a more in-depth crash course for system-level security but hasn’t been updated in a while.