airgapped

joined 3 months ago
[–] airgapped@piefed.social 2 points 2 days ago

It is complete overkill for most home server tasks but I would look to run something like this for next 10 years at least so I can see it making sense if you cost it out like that.

[–] airgapped@piefed.social 12 points 3 days ago* (last edited 3 days ago)

Depends on your personal use case of course but for comparison I have a (relatively) piddly Intel N305 processor mini PC with 16GB of memory and currently run a 25-30 container load, including Plex and a torrent server. My setup currently idles at around 20% CPU and 25% memory utilisation, so I can quite confidently say the linked N5 ought to give more than enough headroom to handle a typical homelab/self hosted load.

[–] airgapped@piefed.social 2 points 3 days ago

Death death to the IDF

[–] airgapped@piefed.social 7 points 4 days ago

Don't mean to outright negate the article but I have experienced literally none of the problems mentioned with Wayland through three separate installs over more than 2 years. I happen to be running a nightmare of a setup too (nvidia/AMD GPUs in a laptop)

[–] airgapped@piefed.social 1 points 1 month ago* (last edited 1 month ago) (1 children)

Having only perused the readme quickly, it seems Cerbos provides (and expands on) authorisation/permission part of LDAP but not the user login part.

[–] airgapped@piefed.social 7 points 1 month ago* (last edited 1 month ago)

I tried many different keyboards but honestly nothing matched up to SwiftKey, now sadly owned by Microsoft, so I locked its internet access using RethinkDNS (or NetGuard)

[–] airgapped@piefed.social 2 points 1 month ago

It is always the ones you least suspect.

[–] airgapped@piefed.social 3 points 2 months ago

My impression in general is that the business press is more open, more free, often more critical, less constrained by external power and external influences - Chomsky

I got the same impression when I used to watch televised business news.

[–] airgapped@piefed.social 7 points 2 months ago

Nice tips! Personally will use SSH aliases and canonicalised hostnames.

Other topics covered in post:

  • Forward Yubikey Agent
  • Reuse connections
  • SSH straight into tmux
  • Alias commonly used hosts
  • Do not add testing stuff to ~/.ssh/known_hosts
  • Make connections last longer
  • Canonicalize hostnames
  • Yubikey and GitHub, without touching it every time