smiletolerantly

joined 1 year ago
[–] smiletolerantly@awful.systems 5 points 1 month ago (2 children)

DNS over TLS and similar are only encrypted to the first (local) DNS provider, and of course that provider knows the query as well.

It protects against 3rd-party eavesdroppers between you and your primary DNS provider, but does nothing for privacy beyond that.

Also getting rid of my T1 Diabetes and re-doing my transition, but yeah! Hedonism as well!

[–] smiletolerantly@awful.systems 26 points 1 month ago (1 children)

They blamed it on the communist party, yes. There were 8 parties represented in the Reichstag at the time though.

[–] smiletolerantly@awful.systems 1 points 1 month ago (2 children)

I am a bit confused tbh 😅

The link you send links to docker projects, the link I sent is the second one of those. Seems pretty straightforward?

But to be fair, I have never used docker for any of this. In my nix config, it's literally just:

    services.prowlarr.enable = true;
    services.prowlarr.openFirewall = true;

There's not really anything you need to configure host-side. Prowlarr needs to be able to communicate with sonarr and radarr (same as jackett), but otherwise it's basically stateless.

Yeaaaaaaahh the auth thing is really, really complicated to selfhost. There's a docker project out there that apparently makes it possible, but.... No idea. FOr the time being I still use FF's auth - that's still an improvement though: Mozilla knows that I am logging in / from what kind of device, but not the content or amount of what I sync.

[–] smiletolerantly@awful.systems 6 points 1 month ago (2 children)

Spend the rest of my life on a Culture orbital or GSV? FUCK YEAH

[–] smiletolerantly@awful.systems 5 points 1 month ago* (last edited 1 month ago)

If you feel like everybody else is crazy.... I got news for you Buddy!

Yep, this is the answer. Set it, forget it, accidentally have your hard drive destroyed irrecoverably, and re-set everything up to the exact working state you were used to in under 15min.

It's a fair bit of initial setup and learning, but afterwards, the word "stable" takes on a new meaning.

Probably... I mean, I'd at least start it in a systemd service, but sure, you don't need a domain.

But of course your mobile won't be able to access that domain outside your network

[–] smiletolerantly@awful.systems 4 points 1 month ago (2 children)

No idea - this is my firefox sync NixOS config, in its entirety:

  age.secrets.ffsync.rekeyFile = secrets.ffsync;
  services.firefox-syncserver = {
    enable = true;
    secrets = config.age.secrets.ffsync.path;
    settings.hostname = "localhost";

    singleNode = {
      enable = true;
      hostname = "0.0.0.0";
      capacity = 2;
    };
  };
[–] smiletolerantly@awful.systems 17 points 1 month ago (7 children)

You can self-host Firefox sync

view more: ‹ prev next ›