Calculator Manipulator
Majority of openrc/hardened/selinux binhost setup is done, need to figure out the small things.
Lemmy was also giving a bit of a headache, fiddled with limits some more.
I’m fairly certain there’s been an attempt to play with some opnsense config, but there was only time to install the updates. Or maybe this was last week 🤔
What’s the movie?
An ebuild is a definition - a recipe, if you will - of how a package is built from some source by portage, a Gentoo package manager.
Very few things are trully impossible in linux land, but having multiple package managers on a single system is just asking for trouble.
You could try setting up a gentoo prefix and get the benefits of portage that way, but I’ve not beem able to accomplish that the single time that I tried.
I realise I’m late to the party and you’ve alreadu gone the systemd unit way, but had your script trapped sigterm to begin with?
I just want to say I’m sorry I left that asshole unbanned for 3 hours. Life tends to get in a way.
I’ve not read all of it, but if you’re referring to the stuff at the beginning - none of those limitations apply to 5700xt.
If you mean something else - then, naturally, I would ask if it actually affects your media in the first place. It might, but I wouldn’t expect that.
I mean if you’re keeping the GPU - you can just set jellyfin to use VAAPI and utilise the gpu that way.
in case you want to tell me what I have is fine and I don’t need an upgrade
What you have is fine and you don’t need an upgrade 😁
But we’re not looking for fine, are we? :)
I would keep the gpu and get as many cpu cores and ram as my budget allows. Once you cross into “stupid amount of RAM” territory you can start utilising tmpfs for transient things such as jellyfin transcode directory to:
Walrii!
No, comercial IPs are fine. You’ll have trouble with some of them - Digital Ocean is a notorious example - where the provider itself blocks outbound port 25 and there’s nothing you can do. I think DO only does that for new accounts.
I myself am running it on Linode - it did get purchased by Akamai a couple of years ago, so I can no longer blindly recommend it - but so far it’s been working fine. One thing I did recently discover was the ability to request a /56 block on Linode - my pre-assigned IPv6 got blacklisted somewhere as at least the whole /64 and simply generating another IP from the same /64 did not help. Getting a fresh block solved it for me, though, and now I know that if this /56 gets blacklisted - it’s my fault. Unless, of course, I get caught up in a /48… 😳
You won’t be able to host email on a residential IP - all of them are on a permanent blacklist. I understand the money argument - and it’s a real argument - but host your own email is just so cool!
I have questions
That won’t really work. Had an exact thing in an unofficial capacity - more along the lines of “answer the questions to see what party you align with most”. The result - the biggest lying traitor shitbags were the match.
Declared views != actual views.
I’m still excited. I’ve probably used it long enough to simply not miss autocorrect. And it does multilingual bit very well!
FWIW - starting a reply allows you to copy the original text.
I’m a syaadmin now, but self hosting nextcloud is what got me my first IT job. I now host a bunch of stuff (even email!), lemmy included.
how did you decide that you would like to self-host? I wanted my friends to play a cs1.6 map I had created.
dire problems, including those that accumulate over time
That’s not a thing. You create problems over time by experimening in what is, effectively, production load. If all you ever did was install any distro and kept it up to date - not much can break. Granted - shit happens, but it’s incredibly rare.
As an example - I’ve set up my mail server in May 2019. Chose archlinux, because I never wanted to go through a big upgrade. The only exta software installed there is mail-server related. Direct from the repos. I’ve become confident enough that now there’s a nightly cronjob to update the system with a hook to reboot if kernel or init gets updated.
In all those 5 a bit years I’ve had one issue where I hqd to revert a kernel update.
Another example is tang on an ubuntu server. This was at a previous workplace, but essentially it’s a piece of software from the repos. Originally installed on 16.04, has gone without reprovisioning all the way to 22.04. I’ve now left the company, but I hear it’s still running.
Upgrading an ubuntu desktop fleet with a myriad of custom software, on the other hand… let’s just not talk about it.
I’m not the best person to query about backups, but in your situation I would do the following, assuming both server and desktop run on BTRFS:
Have a script on the desktop that starts btrfs-receive and then notifies the server that it should start btrfs-send.
You can also do rsync if BTRFS is not a thing you use, but It would either be expensive storage wise, or you would only ever have 1 backup - latest.
As comment in another post said - this is for modules only. There’s still a ton of binary fluff that is the main cause of issues and that is not getting open sourced.
.dev domains are required to only be reachable via https. You’ve not mentioned that in the post, so I’m guessing port 443 is not serving or even listening.
I’d delete the screenshot with your IP visible. You never know…