• 2 Posts
  • 89 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle
  • I’m not an expert but have at least a basic enough understanding. I’m sure someone will come correct me /expand on plenty of things.

    Think of systemd like a service manager. It’s software that orchestrates other software that is running. Like systemd will start to your ssh server service for you when the OS boots up, but it knows to wait until the main networking services are running first since ssh won’t work without networking anyway. That kind of thing. For systemd specifically, some people don’t like it because (and I may get this wrong) they don’t like one piece of software being so in control of how a system operates. They think it’s too overpowering, and prefer alternatives. I don’t understand enough about the alternatives and personally have only ever used systemd and it works perfectly fine for me.

    As you say, Debian is a Linux distribution. People can fork (make a copy and edit it separately) Debian to make other distributions. This is what Ubuntu does. They’ll use Debian as a base, and make tweaks to it, and basically just made enough tweaks it was worth calling it something different. Other distributions like Mint take Ubuntu as their base and edit it into a whole new thing. Kind of makes Mint the grandchild of Debian in a way. The other main Linux base distros you’ll see are Arch and Fedora (there are others but they’re less common).

    Devuan is just a fork of Debian (just like how Ubuntu is), but they decided to make their main edit be the removal of systemd, keeping most of the other things the same. (This is my first time hearing if Devuan, so there may be other significant changes I’m overlooking).

    A lot of people don’t like Ubuntu because of the inclusions of specific systems. The one I see the most would be snap. It’s something that was made for end users to have things be easier, but it’s not the most efficient way to install programs so some people don’t like it.

    As far as Debian vs Devuan, unless you have something against systemd, I would just stick with a Debian base since that’s one of the most common you’ll find, so there will be a lot more help available out there when you’re searching for things.

    Hope that breaks it down well enough to get the basics of it at least!


  • Invisible walls. And I’m not saying the ones that are like way up out of the way that you have to nearly use glitches to get to. I’m talking the “walking down a city street and then you’re stopped in the middle of the road for no reason” kind. Like, you put area there that I can see, I want to go there. If you don’t want me to go there at least put something there to indicate it’s the edge of the map.


  • I know there may be some which are better for various reasons, but look into nginx proxy manager to get those resources behind some URLs with SSL. I like it because it’s got a pretty easy to use web interface, but I know similar things can be accomplished with traefik and like a 3 line per service yaml file. I use NPM and a pihole for DNS to point to the NPM server, and it’s great for me, including automatic cert rotation with LetsEncrypt.




  • If you’re looking to actually do Fail2ban, look into crowdsec first. It’s a similar concept but instead of creating your own block lists by people hammering against your system until they’re banned, it uses community-populated lists to pre-ban known bad actors.

    I know a lot of people shit on it from a decentralization perspective, but I use Cloudflare to expose all my services. Then anyone who hits my sites has to go through Cloudflare’s detections first. I have all my services behind a reverse proxy (nginx proxy manager) running locally, and that’s the only though exposed to the Internet through my router, also that ONLY allows connections at all from Cloudflare IPs or my local network. My home IP is obfuscated, my services can only be accessed using the ports I define, and things are happy. I also block as much as possible on my router, and have automatic updates on all my server VMs/LXCs.

    You could also set up a Cloudflare tunnel to go to the reverse proxy and avoid needing to expose anything to the direct Internet.

    Just turn off caching for any media servers domains/subdomains if you go with Cloudflare, or else it will try to cache any media on their servers and it’s technically a ToS violation so people get their accounts banned. It’s a simple setup to disable cache though.











  • I haven’t really used adguard or nextdns before so I can’t compare apples to apples. I can say that Rethink is a FOSS local-VPN-based adblocker that doesn’t need root. I used to use a different VPN based one before that I forgot the name of, but because it was a VPN I couldn’t also connect to my home Wireguard VPN at the same time, so I was swapping VPNs all the time. I like it because I can be connected to my home VPN, and then if that connection fails it automatically uses the on-device DNS blocklists, which can be customized which lists to use. It can also set different DNS rules / bypass filtering on a per-app basis instead of being forced to being system wide. It’s been useful to allowlist certain domains for specific apps only to let them work.