• 1 Post
  • 35 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle






  • thatsnothowyoudoit@lemmy.catoSelfhosted@lemmy.worldNextcloud zero day security
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    6 months ago

    Nextcloud isn’t exposed, only a WireGuard connection allows for remote access to Nextcloud on my network.

    The whole family has WireGuard on their laptops and phones.

    They love it, because using WireGuard also means they get a by-default ad-free/tracker-free browsing experience.

    Yes, this means I can’t share files securely with outsiders. It’s not a huge problem.





  • I use Nextcloud. But that also means setting up and managing Nextcloud. By the same token you could use google drive.

    For notes and photos you can export them within the app. Notes specifically requires that you print and then hit the share on the print dialogue to save the notes to the file system as a pdf.

    Notes also has another option: if you have a non-Apple mail account on your phone - you can enable notes for that email account and simply move (or copy) your notes from one account to the other. The notes will then become available within that email account mailbox structure on any device or machine where that email account is enabled.

    For voice recordings you can save any voice recording directly to the iOS filesystem.

    The iOS files app also allows you to connect to any other server/desktop via SMB.

    There are lots of options here. None are awesome, but they work.




  • Update: I went and had a look and there’s a Terraform provider for OPNSense under active development - it covers firewall rules, some unbound configuration options and Wireguard, which is definitely more than enough to get started.

    I also found a guide on how to replicate pfBlocker’s functionality on OPNSense that isn’t terribly complicated.

    So much of my original comment below is less-than-accurate.


    OPNSense is for some, like me, not a viable alternative. pfBlockerNG in particular is the killer feature for me that has no equivalent on OPNSense. If it did I’d switch in a heartbeat.

    If I have to go without pfBlockerNG, then I’d likely turn to something that had more “configuration as code” options like VyOS.

    Still, it’s nice to know that a fork of a fork of m0n0wall can keep the lights on, and do right by users.


  • If you backup your config now, you’d be able to apply the config to CE 2.7.x.

    While this would limit you to an x86 type device, you wouldn’t be out of options.

    I am an owner of an SG-3100 as well (we don’t use it anymore), but that device was what soured me on Netgate after using pfSense on a DIY router at our office for years…

    I continued to use pfSense because of the sunk costs involved (time, experience, knowledge). This is likely the turning point.



  • Cluster of Pi4 8GBs. Bought pre-pandemic; love the little things.

    Nomad, Consul, Gluster, w/ TrueNas-backed NFS for the big files.

    They do all sorts of nifty things for us including Nightscout, LanguageTool OSS, monitoring for ubiquiti, Nextdrive, Grafana (which I use for home monitoring - temps/humidity with alerts), Prometheus & Mimir, Postgres, Codeserver.

    Basically I use them to schedule dockerized services I want to run or am interested in playing with/learning.

    Also I use Rapsberry Pi zero 2 w’s with Shairport-sync (https://github.com/mikebrady/shairport-sync ) as Airplay 2 streaming bridges for audio equipment that isn’t networked or doesn’t support AirPlay 2.

    I’m not sure I’d buy a Pi4 today; but they’ve been great so far.



  • I don’t think it will be that cut and dry.

    A huge number of tech companies are still and/or will always be fully remote.

    Over time, the big pay checks that Meta and Google and Apple are offering will be overshadowed by the possibilities of remote work done right (as opposed to simply working as you are in the office but from home).

    There are lots of smart, talented folks out there willing to take a pay cut to gain back the time that office culture can waste, commuting first of all.

    Sure there are challenges to the sense of togetherness that can help build great teams, but plenty of remote-only organizations make the time and space to foster that appropriately.

    Ultimately, I think we’ll find that the eventual competitors to the MAANG-like behemoths emerge out of smart, well designed, remote-first organizations. Though I think Netflix is largely remote - at least for the engineers I know who work there.