I’m Hunter Perrin. I’m a software engineer.

I wrote an email service: https://port87.com

I write free software: https://github.com/sciactive

  • 6 Posts
  • 217 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle






  • hperrin@lemmy.worldtoSelfhosted@lemmy.worldHTTPS on homelab (just locally)
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    3
    ·
    edit-2
    8 days ago

    Because you have to manage it on your server and all your own machines, and it doesn’t provide any value if your server is hacked. It actually makes you less safe if your server is hacked, because then you can consider every machine that has that CA as compromised. There’s no reason to use HTTPS if you’re running your own CA. If you don’t trust your router, you shouldn’t trust anything you do on your network. Just use HTTP or use a port forward to localhost through ssh if you don’t trust your own network.

    You don’t have to pay anyone to use HTTPS at home. Just use a free subdomain and HTTP validation for certbot.








  • I feel like a lot of the issue is that software engineers used to be subsidized by both investors propping up unsustainable business models and extremely invasive targeted advertising, and both of those things are either phasing out or being legislated away. A lot of the tracking and advertising practices that kept services like Facebook and Gmail free are illegal now (rightfully so), and investors are starting to realize that not everything is going to become profitable just by having an app.

    I think the solution is probably two fold. First, I think the government should invest more into open source software. A lot of the work that keeps the internet running is done by unpaid volunteers. And second, I think we need to go back to paying for services. Giving away services for free because you use them to spy on your users is just an unethical business model. It’s profitable, but so is child labor.






  • My setup is pretty safe. Every day it copies the root file system to its RAID. It copies them into folders named after the day of the week, so I always have 7 days of root fs backups. From there, I manually backup the RAID to a PC at my parents’ house every few days. This is started from the remote PC so that if any sort of malware infects my server, it can’t infect the backups.


  • Yeah, that could work if I could switch to zfs. I’m also using the built in backup feature on Crafty to do backups, and it just makes zip files in a directory. I like it because I can run commands inside the Minecraft server before the backup to tell anyone who’s on the server that a backup is happening, but I’m sure there’s a way to do that from a shell script too. It’s the need for putting in years worth of old backups that makes my use case need something very specific though.

    In the future I’m planning on making this work with S3 as the blob storage rather than the file system, so that’s something else that would make this stand out compared to FS based deduplication strategies (but that’s not built yet, so I can’t say that’s a differentiating feature yet). My ultimate goal is to have all my Minecraft backups deduplicated and stored in something like Backblaze, so I’m not taking up any space on my home server.