Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)X

xinayder

@ xinayder @infosec.pub

Posts
4
Comments
60
Joined
3 yr. ago

  • From reddit selfhosted: What do you wish you knew from the start

    Jump

  • I have a k3s cluster for fun and I can admit that k8s is way too complicated.

    I don't want to dig hours through documentation to find what I'm looking for. The docs sometimes feel like they were written for software devs and you should figure part of the solution yourself.

    I have a ExternalName service that keeps fucking up my cluster everytime it restarts, bringing down my ingresses, because for some reason it doesn't work and I have no idea where to look at to figure out why it doesn't work - I just end up killing the service and reapplying the yaml file and it works.

    I had to diagnose why my SSL certificates would get stuck in "issuing" in cert-manager, had to dig through 4 or 5 different resources until I got to an actual, descriptive error message telling me that I configured my ClusterIssuer wrongly.

    I wanted a k3s cluster to learn but every time I have issues with it I realize it's a terrible idea.

    I wish I had podman + compose but it does seem like a docker-compose is more complicated. Also, I wish I could do ansible but I have no idea where to start (nor how it works).

    EDIT: oh yeah I also lost IPv6 support because k3s by default doesn't enable v6 and I was planning on using Hetzner CCM to have a 2 node cluster until I realized Hetzner Networks don't support v6.

  • Basic Security for your Website | Loudwhisper

    Jump

  • Can you use CrowdSec to track logs from a k8s pod? Say I have my website and some other services hosted on a k3s cluster, do I need to spin up a new pod for CrowdSec or should it be installed on the host?

  • Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

    Jump

  • They kinda already do this. Any .exe you download outside the Microsoft Store requires double confirmation before you can execute it, unless it's from Microsoft.

  • Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

    Jump

  • As much as I despise MS and think they are equally incompetent, I don't think it's a good idea to lock down Windows. They will stop providing kernel access to 3rd parties at first, then a few months later you will only be able to download software from the Microsoft Store.

    Yes, it's a security issue but them being allowed to close down their OS sets a dangerous precedent that will make Windows even more shittier and enshittified than it already is.

  • Cheap, OpenWrt compatible routers with WiFi 6?

    Jump

  • where?

  • Cheap, OpenWrt compatible routers with WiFi 6?

    Jump

  • I guess Wifi 6 doesn't work in 5GHz band?

  • Cheap, OpenWrt compatible routers with WiFi 6?

    Jump

  • The VPN bandwidth doesn't need to be that good, I was checking the GL iNet models and 200 Mbps on WireGuard is enough for me.

  • OpenSUSE is the best

    Jump

  • The default config for sudo is to ask for root password. I too was annoyed by this and had to change the setting to ask for the user password, not root, every time I used sudo.

  • [SOLVED] Temporarily hosting on Oracle Free tier.

    Jump

  • I tried 5 different credit cards to setup my account and none of them worked for the free tier. Contacted customer support, they simply said "well we can't do anything about it, it's clearly a problem in your end and not ours even though you tried 5 different credit cards to pay for the service".

  • Never Again

    Jump

  • My issues with Samsung nowadays is that they offer a very low TBW warranty compared to other brands like Kingston.

    I wanted to buy a 1TB storage for my games and I couldn't decide between Samsung and Kingston. Samsung had a 600TBW warranty for the 1TB model, Kingston had 800. I ended up choosing the KC3000 from Kingston.

  • Are there any active forks of Eternity/Infinity, or should we keep waiting for an update?

    Jump

  • That's usually what happens with FOSS. The problem as I see it is that the dev doesn't have time to update the app and there's almost no one stepping up to hel fix longstanding issues. I'm pretty sure the dev will be more than happy to see people submitting PRs to fix some issues with the app :)

  • CS2 on KDE plasma goes black for a few seconds

    Jump

  • For the panels issue, you can launch CS2, press Alt+F3 to open the window settings, go to configure special app settings, then set an option for the app so that it always launches in fullscreen mode.

    I also added a shortcut to make games fullscreen by pressing Ctrl+Enter.

    I believe this is a bug with KDE and should be reported to them. The same issue is reported on Valve's repository but nothing has been done from Valve's side to fix this issue.

    EDIT: link for relevant issue: https://github.com/ValveSoftware/csgo-osx-linux/issues/3274

    the workaround is written in one of the comments:

    1. Open CS2
    2. Press Alt+F3
    3. Click on "More actions"
    4. Click on "Configure special applications settings"
    5. Add a property
    6. Select "Fullscreen" (click on the "+")
    7. Select "Force" and "yes" for the "Fullscreen" parameter
    8. Click on "Ok" (apply and close)

  • PSA: Update your docker installation. Leaky Vessels flaws allow hackers to escape Docker, runc containers

    Jump

  • It's still not an excuse to just ignore the security update because you might not be a target for hackers.

    Just check your logs, there's probably a dozen or more requests trying to access wordpress pages on your server, or login via SSH. They want to take over your server so it can be part of a botnet.

  • After 1.5 years of learning selfhosting, this is where I'm at

    Jump

  • I think so, but if you check the official image you can definitely find out how to include custom plugins in it. I think the documentation might mention a thing or two about it too.

  • After 1.5 years of learning selfhosting, this is where I'm at

    Jump

  • You can install the log transformer plugin for Caddy and have it produce a readable log format for fail2ban: https://github.com/caddyserver/transform-encoder

    I had this setup on my VPS before I moved to a k3s setup. I will take a look at how to migrate my fail2ban setup to the new server.

  • Follow-up to installing Arch

    Jump

  • I had a similar issue with my laptop, where Arch wouldn't be recognized as a bootable system on my NVMe drive unless I disabled RST with Optane on the BIOS, setting it to AHCI mode.

    I do remember seeing a similar issue a while ago as well, but I don't remember if the user managed to fix it.

    I could suggest removing the Windows drive, installing Arch and checking if everything works, then plugging the Windows drive back in. Windows loves to delete non-Windoes bootloaders from every drive it can.

  • Firefox not taking focus when opening links from (EDIT) some apps but not others on Wayland (KDE)

    Jump

  • The same issue happens to me when opening links from any app on Wayland. For example, every time I click a link on a Discord chat, I have to manually click on the Firefox window because the focus is not automatic.

  • Wayland really breaks things… Just for now?

    Jump

  • I run Wayland and it's definitely worse than X11, but it's getting better day by day. I always struggle with Wayland and I literally did nothing different than installing KDE Wayland. For example, ever since I moved to Wayland, Firefox will randomly freeze and crash when I'm using my PC - this happens at least once per gaming session.

    Also, Wayland is still not feature complete and assuming it's the system fault for poor compatibility is wrong.

    Just give arewewaylandyet.com a read.

  • Anyone knows a good lightweight self-hosted alternative to GitHub?

    Jump