• 3 Posts
  • 34 Comments
Joined 2 years ago
Cake day: June 14th, 2023
  • a_fancy_kiwi@lemmy.worldOPtoSelfhosted@lemmy.world•How do you handle SSL certs and internet access in your setup?English
    31·
    10 days ago

    A few reasons

    1. My partner has plenty of hobbies but sys-admin isn’t one of them. I know I’ll show them how to turn off wireguard to troubleshoot why “the internet isn’t working” but eventually they would forget. Shit happens, sometimes servers go down and sometimes turning off wireguard would allow the internet to work lol
    2. I’m a worrier. If there was an emergency, my partner needed to access the internet but couldn’t because my DNS server went down, my wireguard server went down, my ISP shit the bed, our home power went out, etc., and they forgot about the VPN, I’d feel terrible.
    3. I was a little too ambitious when I first got into self hosting. I set up services and shared them before I was ready and ended up resetting them constantly for various reasons. For example, my Plex server is on it’s 12th iteration. My partner is understandably weary to try stuff I’ve set up. I’m at a point where I don’t introduce them to a service I set up unless accessing it is no different than using an app (like the Homeassistant app) or visiting a website. That intermediary step of ensuring the VPN is on and functional before accessing the service is more than I’d prefer to ask of them

    Telling my partner to visit a website seems easy, they visit websites every day, but they don’t use a VPN everyday and they don’t care to.

  • a_fancy_kiwi@lemmy.worldOPtoSelfhosted@lemmy.world•How do you handle SSL certs and internet access in your setup?English
    2·
    10 days ago

    That’ll be my impetus to learn how to write a script.

    This part caught my eye. You were able to do all that other stuff without ever attempting to write a script? That’s surprising and awesome. Assuming you are running everything on a linux server, I feel like a bash script that is run via a cronjob would be your best bet, no need to ssh into the server, just let it do it on it’s own. I haven’t tested any of this but I do have scripts I wrote that do automatic ZFS backups and scrubs; the order should go something like:

    open the terminal on the server and type

    mkdir scripts

    cd scripts

    nano docker-updates.sh

    type something along the lines of this (I’m still learning docker so adjust the commands to your needs)

    #!/bin/bash

cd /path/to/scripts/docker-compose.yml
docker compose pull && docker compose up -d
docker image prune -f

    save the file and then type sudo chmod +x ./docker-updates.sh to make it executable

    and finally set up a cronjob to run the script at specific intervals. type

    crontab -e

    or

    sudo crontab -e (this is if you want to run the script as root but ideally, you just add your user to the docker group so this shouldn’t be needed)

    and at the bottom of the file type this and save, that’s it:

    # runs script at 1am on the first of every month
0 1 1 * * /path/to/scripts/docker-updates.sh

    this website will help you choose a different interval

    For OS updates you basically do the same thing except the script would look something like: (I forget if you need to type “sudo” or not; it’s running as root so I don’t think you need it but maybe try it with sudo in front of both "apt"s if it’s not working. Also use whatever package manager you have if you aren’t using apt)

    while in the scripts folder you created earlier

    nano os-updates.sh

    #!/bin/bash

apt update -y && apt upgrade -y
reboot now

    save and don’t forget to make it exectuable

    then use

    sudo crontab -e (because you’ll need root privileges to update. this will run the script as root without requiring you to input your password)

    # runs script at 12am on the first of every month
0 0 1 * * /path/to/scripts/os-updates.sh
  • a_fancy_kiwi@lemmy.worldOPtoSelfhosted@lemmy.world•How do you handle SSL certs and internet access in your setup?English
    21·
    11 days ago

    wildcard let’s encrypt cert

    I know what “wildcard” and “let’s encrypt cert” are separately but not together. What’s going on with that?

    How do you have your tailscale stuff working with ssl? And why did you set up ssl if you were accessing via tailscale anyway? I’m not grilling you here, just interested.

    I know enough about security to know that I don’t know enough to secure against much anything

    I feel that. I keep meaning to set up something like nagios for monitoring and just haven’t gotten around to it yet.

  • a_fancy_kiwi@lemmy.worldtoNot The Onion@lemmy.world•Google is building a fart button into AndroidEnglish
    85·
    9 months ago

    This just in, Google will he deprecating their phone app fart button in 18 months for the new and improved Android Poots button.

    Wait, we’re just now getting word that in 7 more months, Android Poots will be replaced with Google Toots. All 3 buttons will be active at the same time while Google works on feature parity.

    You’ll never believe this, insiders are telling us that 4 months after Google Toots, Google will be introducing Google Farts to replace Google Toots. Google Farts will be different than the original Fart button, not sure how but we are expecting it’ll be a worse experience.

    And finally, 6 months later, after hundreds of millions of dollars spent, somehow none on marketing, and after generating a healthy user base that defied all odds, Google will begin to shutdown all 4 buttons and lay off all the teams that worked on them.