SayCyberOnceMore

  • 3 Posts
  • 80 Comments
Joined 3 years ago
Cake day: June 17th, 2023
  • SayCyberOnceMore@feddit.uktoSelfhosted@lemmy.world•What to do after getting a domain name?English
    1·
    1 month ago

    No, I was referring to a separate DMZ host…

    Physically separate firewall connection, with different firewall policies between internet<–> DMZ than DMZ <–> internal network.

    Not a VLAN. VLAN Hopping makes it possible to jump between VLANs, so they should only be consided as an administration tool, not a security mechanism.

    But, I agree with you, putting a device on the internet isn’t something that anyone should do without understanding the technical issues.

  • SayCyberOnceMore@feddit.uktoSelfhosted@lemmy.world•What to do after getting a domain name?English
    12·
    1 month ago

    Kinda overlapping other replies, but to answer your question: A = your external IPv4 address

    The rest could be empty AAAA = an external IPv6 address NS = a DNS server MX = Mail Server

    TXT is just text, but it can be used by, ie Lets Encrypt to prove you own that domain for your SSL certificate

    If you open TCP 80 / 443 on the open internet EVERYONE will probe you, but you want to run a Friendica server, so you kinda need that (disclaimer: I do not know how Friendica is setup)

    So, you’ll need something (firewall, Fail2Ban, etc) to protect your server whilst also allowing it to federate to other servers.

    I’d strongely suggest you put your server on a VPS with a provider that has some level of defense already setup for you.

    I wouldn’t run this in your home network with putting it into a DMZ of some kind.

  • SayCyberOnceMore@feddit.uktoSelfhosted@lemmy.world•Revisiting Rule #3English
    10·
    1 month ago

    TL;DR: I support the change in Rule 3

    I think the only thing I’d start rolling my eyes at would be if the posts ended up being low effort photo posts of racks of equipment…

    Sure, a nice background story might help, but I want to read about something that’ll help me, or help someone understand something I know.

    I’m even half interested in cloud based offsite backups as that’s a (possibly) necessary safetynet for us.

    I think we’re grown up enough to signpost OT posts elsewhere rather than cry to the mod(s).

    (Oh, and thanks btw… I appreciate what you do)

  • SayCyberOnceMore@feddit.uktoSelfhosted@lemmy.world•ContinuwuityEnglish
    4·
    1 month ago

    I can see a lot of opinions & comments on the QR part and, with respect, I’d like to add that I’m reading this post on a device where I’d like to view the site on the same device, so a QR isn’t best for this platform.

    I’d go a little further and say that QRs and really only useful for a mediim where you want the user to use a 2nd device (printed media, BSODs, etc)

    Also putting the URL in the (for my reader) non-clickable alt-text doesn’t help either

    Again, with respect, you’re making it harder for your audience to reach you, not easier.

  • SayCyberOnceMore@feddit.uktoSelfhosted@lemmy.world•Where did the dust settle on Syncthing Fork?English
    2·
    2 months ago

    Yeah, I kinda held on to the old version for a while too TBH, syncthing-fork had a problem where I couldn’t get it to work the way I wanted it, so I’d gone back to syncthing, then with all the kerfuffle, I just stayed there.

    Some time earlier this year I tentatively upgraded 1 phone and a tablet (it’s used as slideshow screensaver…) and it all seems to work ok.

    The GUI isn’t quite as good as the native webUI, but it’s still accessible, so all’s good.

    There was a change in the syncthing “DB” a while ago, so it might take a while to rescan things if you have a lot of small files, but feel confident to change.