foster

joined 2 weeks ago
[–] [email protected] 3 points 23 hours ago* (last edited 22 hours ago)

I wonder sometimes if the advice against pointing DNS records to your own residential IP amounts to a big scare. Like you say, if it’s just a static page served on an up to date and minimal web server, there’s less leverage for an attacker to abuse.

That advice is a bit old-fashioned in my opinion. There are many tools nowadays that will get you a very secure setup without much effort:

  • Using a reverse proxy with automatic SSL certs like Caddy.
  • Sandboxing services with Podman.
  • Mitigating DoS attacks by using a WAF such as Bunkerweb.

And of course, besides all these tools, the simplest way of securing public services is to keep them updated.

I’ve found that ISPs too often block port 80 and 443. Did you luck out with a decent one?

Rogers has been my ISP for several years and have no issue receiving HTTP/S traffic. The only issue, like with most providers, is that they block port 25 (SMTP). It's the only thing keeping me from self-hosting my own email server and have to rely on a VPS.

[–] [email protected] 3 points 1 day ago

I'm running RetroPie on a Debian laptop and I'm able to map all the buttons of my 8BitDo Pro 2 controller; no issues at all. I was also able to connect and configure an Xbox 360 controller just fine.

You might want to try getting help on the RetroPie forums if you don't get any luck here.

[–] [email protected] 7 points 1 day ago (8 children)

If you want a similar editor on Linux, then I suggest Kate. If Vim and Emacs didn't exist, I'd be using Kate.

[–] [email protected] 6 points 1 day ago* (last edited 1 day ago) (15 children)

Notepad++ is a fabulous software program that had no complete alternatives on Linux. I used it for scripting, text manipulation, note taking, dumping and editing thoughts. Scintilla-based equivalents Geany, SciTE exist, but do not come close.

Really? No alternatives on Linux? Have you tried Emacs? I think Emacs with Org mode blows Notepad++ out of the water in all the uses you just mentioned.

[–] [email protected] 13 points 1 day ago (2 children)

I self-host everything from my home network including my website. I like to keep all my data local. 😁

It's a simple setup: just a static site made with Lume, and served with Caddy. The attack surface is pretty small since it's just HTML and CSS files (no JavaScript).

[–] [email protected] 3 points 1 day ago* (last edited 1 day ago) (8 children)

First of all, doesn't Navidrome have authentication? So, I don't see why exposing it to the public is a problem.

Second, some reverse proxies support basic auth. This way, you can password-protect some services and is useful if the service does not have its own authentication. Here as an example snippet for Caddy:

example.com {
	basic_auth {
		# Username "Bob", password "hiccup"
		Bob $2a$14$Zkx19XLiW6VYouLHR5NmfOFU0z2GTNmpkT/5qqR7hx4IjWJPDhjvG
	}
	reverse_proxy myservice:8000
}

You'll have to look up the docs for other reverse proxies.

[–] [email protected] 18 points 1 week ago (2 children)

That would be nice but what other alternatives are there? It's either Chrome, Edge, Firefox, Safari, or clones of these browsers.

[–] [email protected] 4 points 2 weeks ago

Probably or probably not. The only way to find out is to try. I've installed RetroPie on a number of old laptops; the oldest one being a 2002 Toshiba laptop. I got to play GBA games just fine with it.

[–] [email protected] 8 points 2 weeks ago (2 children)

You can try turning it into a retro gaming station by installing RetroPie. Some have got it working on as little as a Pi Zero. Of course, that laptop won't be able to run the more demanding emulators.

[–] [email protected] 3 points 2 weeks ago

If you need S3-compliant storage for testing and development, you can use an S3 mock server. I've tried the following for use in web development and CI environments, they are lightweight and configurable:

There is also Localstack. I found this one to be a bit more complex than the ones above and ended up not sticking with it.