• 10 Posts
  • 198 Comments
Joined 1 year ago
cake
Cake day: February 8th, 2025

help-circle



  • I host my own SearXNG via docker compose, reverse proxied it via Traefik, added a few security headers, restricted access to my country to help prevent abuse.

    Use it daily, the only complaint I really have is it occasionally doesn’t search when you type in the address bar of a browser. What I mean is I’ll type a search query and instead of redirecting to the query (searx.yourdomain.tld/search?q=test) it’ll just redirect to the homepage of my SearXNG instance (searx.yourdomain.tld) forcing me to retype my query. Annoying but not the end of the world.


  • Some specific drivers are a little fiddly if you have nvidia graphics

    Nit-picking here but Nvidia drivers for Debian are ridiculously easy to install? Doc page

    • Prerequisites
    deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
    deb http://security.debian.org/debian-security/ trixie-security contrib non-free main non-free-firmware
    sudo apt update
    
    • Install the driver (Trixie)
    sudo apt install nvidia-kernel-dkms nvidia-driver
    
    • Have an RTX capable GPU?
    sudo apt install libnvoptix1
    

    Edit: For an Nvidia Optimus Laptop just install envycontrol and set your Nvidia GPU as your primary GPU.

    sudo envycontrol -s nvidia --force-comp --coolbits 24
    

    Done, easy peasy.



  • I don’t use Home Assistant personally as I also use Apple products, if you read into Homebridge it’s a piece of software that turns smart devices that are not HomeKit enabled devices into HomeKit enabled devices, and enables new functionality to devices that are already HomeKit enabled. Definitely worth considering.

    This was significantly cheaper than converting all my Apple products into android products.


    To quickly spin it up I would suggest reading into Docker and Docker compose, docker takes applications and containerizes them and lets them run over your network with little configuration.








  • This was a while ago so the details are fuzzy, I gave it Traefiks docker labels on port :5380 but that didn’t seem to work then I read an a bug report saying give Traefik :8053 so I tried that and again didn’t work so I went back to :5380 and all of a sudden it reverse proxied but my login wouldn’t work even though it worked when going to the LAN IP+Port didn’t find much in terms of troubleshooting and documentation so I eventually gave up on it.

    I have had terrible experiences with recursive DNS resolvers, PiHole+Unbound worked for maybe an hour then would completely kill my internet access, the same essentially went with OpenSense, I had hope for Technitium but alas didn’t feel the need to spend hours troubleshooting something that PiHole alone did with ease.






  • Why is this a surprise? IP Logging is pretty normal for any service.

    2.5 IP logging: by default, we do not keep permanent IP logs in relation with your Account. However, IP logs may be kept temporarily to combat abuse and fraud, and your IP address may be retained permanently if you are engaged in activities that breach our Terms of Service (e.g. spamming, DDoS attacks against our infrastructure, brute force attacks). The legal basis of this processing is our legitimate interest to protect our service against non-compliant or fraudulent activities. If you enable authentication logging for your Account or voluntarily participate in Proton’s advanced security program, the record of your login IP addresses is kept for as long as the feature is enabled. This feature is off by default, and all the records are deleted upon deactivation of the feature. The legal basis of this processing is consent, and you are free to opt in or opt out of that processing at any time in the security panel of your Account. The authentication logs feature records login attempts to your Account and does not track product-specific activity, such as VPN activity.

    Source: Their privacy policy.



  • Pro-Tip: You can reverse proxy any service on your network but if the IP of your reverse proxy does not match the IP of your A record, aka your server is behind a VPN, the public will not be able to access your server.

    Http/s is neat that way, if the IP’s don’t match then it’s technically considered an insecure or misconfigured setup but it works great to prevent unauthorized access to one’s server.

    I must agree with other users here, hosting a public file hosting server is a bad idea, at the bare minimum Authentik or Keycloak should be in front of it but I digress, https://catbox.moe/ already endures this pain for us.


    Not sure what reverse proxy you’re using but alternatively Traefik’s middleware IPAllowList works great for blacklisting all IP’s and only whitelisting the known few.