What setups/softwares do you use to secure your server?

Hi all,

Podman is no longer supporting iptables so I am trying to learn how to set up nftables in its place. It’s been a struggle to get it to work properly. I can not ping my own server after starting the nftables rules. I am using Alpine Linux v2.24.1 and nftables v1.1.6 (Commodore Bullmoose #7).

I have everything I host and expose behind authelia (which requires 2fa) as middleware or as the only login method with oicd, thus far it seems to work well, of course I get a bunch of malicious traffic and spam but this gets to authelia and stops there, I don’t even see multiple tried login tries ever so I felt pretty safe. However it does seem that everyone uses either fail2ban or crowdsec in addition so I have been wondering if it would really add any security in my setup or if I’m missing something. I’m sure it wouldn’t hurt but crowdsec always seemed a little too complex for me and I don’t want something I don’t fully understand in my security layer and I never saw a nice way to setup fail2ban so never bothered. Afaik there’s no webui or such things and you have to manually make working regex for everything. I’d like to know if I’m missing something or if anyone has tipps to give

i’m searching for an audio player that is suitable for radio productions. the radio format has some talking and some music playing. the playlist of songs is prearranged, so normally no shuffling of music during the radio show.

🔴 LibreTube: Ein alternatives Frontend für YouTube (Android)

When discussing Fediverse, you sometimes hear the idea that you shouldn’t need different accounts for different platforms. The “why can’t I comment under Youtube video with my Twitter account”. In Fediverse it already works to some extent. You can comment under PeerTube video with your Mastodon account, and you can participate in Lemmy thread with your Mastodon account. What is this functionality called? Does it have specific name? It’s probably not “single sign-on” and not “federation” from what I understand. And to what extent is it implemented? Is there some way to participate in Lemmy thread with your PeerTube account? Is there any progress being made on implementing the initial idea of using any Fediverse account with any other Fediverse platform? What is the name for the problem of implementing or mapping the platform-specific functionality? As in, neither Mastodon nor PeerTube have the interface for upvoting and downvoting posts. Wouldn’t it be easiest to implement Fediverse-wide SSO (as in, log into Lemmy interface with your Mastodon account) instead of figuring out some funky mapping and patform interactions?

Purely a hypothetical for me; I don’t have the means for a VPS or that many files. But in the future, if I’d want to use the 3-2-1 rule with a VPS subscription, what sort of software would I need to ensure that my files can’t be accessed on the VPS and need off-site decryption keys? What kind of setup would allow you to access said files from a different device if the decryption keys are stored locally on it? People who’ve done something similar, how has that gone for you?

I’ve now managed to get the stream of my HiWatch Series, model HWI- T641H-Z 2.8-12 mm by accessing via browser to rtsp://USERNAME:PASSWORD@192.168.30.50:554/Streaming/Channels/101. Working nice. But on its own, very unusful unless I get storage and image detection going. So, I need something like Frigate.

All of the music players I’ve tried let you import or export .m3u playlists, but none of them automatically scan a folder for playlists nor update the .m3u realtime. I’m trying to sync playlists between my laptop and phone.

It was way easier than I thought it would be to get started. I put Sparky Linux on an 18 year old laptop and moved a bunch of movies and shows over to it, got Tailscale squared away, and now I can watch my media ANY WHERE IN THE WORLD. The only problem is storage. Jellyfin doesn’t recognize my external drive for some reason and says the path is invalid. Is there a simple solution I’m missing?

As I start to host more and more services on my home server, my family and friends are interested in using some of the services I host as well. Up to now, all of my services have been internal-only, and my wife and I just use Tailscale to access everything. Getting others set up with tailscale isn’t an issue, but I can only have up to 4 other users before I have to pay to add more, and I have more than 4 people I would like to have access to some of the things I host.

This is not strictly self-hosted per se, but I am looking for your guidance.

I pay for the Nabu Casa subscription for remote access to Home Assistant. Mostly as a way to give them money for a great service, but it’s convenient and felt pretty secure. It should be the only remote way into Home Assistant. About an hour ago I got a login attempt notice that an IP was trying to access API/config. The IP is in some bad IP databases. What I found interesting was that the log shows an AI bot. A Google Gemini bot specifically. Makes me worry that AI is going to make yet another aspect of life frustrating and unfun.

As my kids want their own rooms in the future I’ll need to downsize a bit. Is there a list for recommended 10” Equipment? Any help appreciated. My research so far turned always in the direction of get rack bars and a 3D printer ( or shops selling the 3d prints)

I’m looking at dusting off my motion setup. It was an old setup to monitor what my pets are doing in the house with a webcam.

I had the following issue: Stremio would open normally and even load subtitles but would not load videos at all in Linux Mint 22.3. Other people on github have had the same issue.

im using lineageOS soa the default apps are pretty okay already, but i was just looking on f-droid and found something called DresSecureComms and it looked pretty good, but i just wanted to know if it actually makes a difference

Hello!

Does anyone else here participate in the selfhosting hobby without a formal IT related education or a career in a similar field? I’ve only had one or two programming courses as part of my university education, but it was only very basic Python and C. I’ve never formally learned how to use containers, version control or anything else. Sometimes I regret not pursuing an education in IT/programming because there are so many things I’d like to accomplish but can’t (for example if there’s a feature missing in some project, or to feel safe in my abilities to harden my servers and my network in order to expose services to the open internet).

Hi everyone,

Wireguard is blocked in my country, so I no longer can use Tailscale or other Wireguard-based solutions. My home server is behind a NAT. What other ways of secure private connection can I use?

So I asked if I was an idiot for coming up with the bright idea to start my own lemmy instance. Well I can proudly state that yes, I am an idiot, but I’m an idiot with his own lemmy instance: MopLemmy.fyi. Barebones and barely federated, but by God it’s mine.

Of the many useful things I could do with my spare time instead I’m setting up a Lemmy instance because why not. The scope of this is definitely greater than any self-hosting I’ve ever attempted, so please feel free to tell me just how much trouble I’m in. I’m just giving the broad strokes to see if I’ve made any crucial errors (other than deciding to do this at all).

I’m interested to hear what do people use as their cloud backup and the cost of it. I currently use idrive e2 storage at 5$ per TB a month. Trying to see if there is any better deal anywhere and just curious on everyone’s thoughts.

A federated internet archive, I’m wondering whether I should build it myself. With so many journalists being banned for reporting the gaza genocide we need more ways to combat censorship.

title: “Internet centralization and the original sin of NAT”

that hard drive prices return to normal and think about all the things i can build.

I’ve always used X-plore but am now searching for a FOSS alternative.