Lemmy - RazBot

Because why the hell not!

tldr: I'd like to set up a reverse proxy with a domain and an SSL cert so my partner and I can access a few selfhosted services on the internet but I'm not sure what the best/safest way to do it is. Asking my partner to use tailsclae or wireguard is asking too much unfortunately. I was curious to know what you all recommend.

I have some services running on my LAN that I currently access via tailscale. Some of these services would see some benefit from being accessible on the internet (ex. Immich sharing via a link, switching over from Plex to Jellyfin without requiring my family to learn how to use a VPN, homeassistant voice stuff, etc.) but I'm kind of unsure what the best approach is. Hosting services on the internet has risk and I'd like to reduce that risk as much as possible.

1. I know a reverse proxy would be beneficial here so I can put all the services on one box and access them via subdomains but where should I host that proxy? On my LAN using a dynamic DNS service? In the cloud? If in the cloud, should I avoid a plan where you share cpu resources with other users and get a dedicated box?

2. Should I purchase a memorable domain or a domain with a random string of characters so no one could reasonably guess it? Does it matter?

3. What's the best way to geo-restrict access? Fail2ban? Realistically, the only people that I might give access to live within a couple hundred miles of me.

4. Any other tips or info you care to share would be greatly appreciated.

5. Feel free to talk me out of it as well.

Several movie and TV sites have come and go where you can just visit and watch without even creating an account. Quality might not be as good as a paid service and they are no doubt in the grey-to-red zone legally. I don't see the same service for music.

Why do you think is there such a difference in trends?

Automattic will stop contributing to WordPress after reaching 45 hours a week, "aligning" its contributions to those by WP Engine, and because the lawsuit is taking up their resources.

I've made the following backup script for my immich stack to be automatically run every day

# Load variables from the .env file
SCRIPT_DIR="$(dirname "$(readlink -f "$0")")"
set -a
source "$SCRIPT_DIR/../.env"
set +a

# Create a dump of the database and back it up
docker exec -it immich_db pg_dumpall -c -U immich > immich/latest_db_dump.sql
rustic -r $BUCKET_NAME/immich backup immich/latest_db_dump.sql --password=$REPO_PWD

# Backup the library, uploads and profile folders from the upload volume
rustic -r $BUCKET_NAME/immich backup immich/uploads_v/library --password=$REPO_PWD
rustic -r $BUCKET_NAME/immich backup immich/uploads_v/upload --password=$REPO_PWD
rustic -r $BUCKET_NAME/immich backup immich/uploads_v/profile --password=$REPO_PWD

# Apply forget policy
rustic -r $BUCKET_NAME/immich forget $RUSTIC_FORGET_POLICY --password=$REPO_PWD

and when I test it everything works properly, and the created sql dump file is complete and properly backed up.

However, when the execution is triggered automatically by a cronjob (as specified in this crontab line)

"30 3 * * *    root    /home/admin/WinguRepo/scripts/docker_backupper.sh"

(the line is taken from the nixos configuration file, that's why it also contains the user executing the operation)

it seems something breaks in the dumping process, because the script completes successfully but the sql dump file is an empty file (as can be noticed in the following output of rustic -r myrepo snapshots

snapshots for (host [wingu-box], label [], paths [immich/latest_db_dump.sql])
| ID       | Time                | Host      | Label | Tags | Paths                     | Files | Dirs |      Size |
|----------|---------------------|-----------|-------|------|---------------------------|-------|------|-----------|
| 10a32a83 | 2025-01-06 20:56:48 | wingu-box |       |      | immich/latest_db_dump.sql |     1 |    2 | 264.6 MiB |
| 1174bc2e | 2025-01-07 12:50:36 | wingu-box |       |      | immich/latest_db_dump.sql |     1 |    2 | 264.6 MiB |
| 00977334 | 2025-01-08 03:31:24 | wingu-box |       |      | immich/latest_db_dump.sql |     1 |    2 |       0 B |
| 513fffa1 | 2025-01-10 03:31:25 | wingu-box |       |      | immich/latest_db_dump.sql |     1 |    2 |       0 B |
4 snapshot(s)

(the first two snapshots were manually triggered by me executing the script, the latter two instead are triggered automatically by the cronjob)

Any idea about what is causing this behavior?

EDIT: Solution found thank's to @[email protected] comment:

You don’t need -it because you don’t run an interactive session in docker. It might be failing because you ask for a pseudoterminal in an environment where it doesn’t make sense.

It’s hard to imagine a more blatant example of a powerful government official abusing his authority to carry water for a political ally and major GOP donor. The fact that Jordan is doing this while sanctimoniously claiming to be fighting the “weaponization” of government is beyond parody.

Color me surprised. /s

I am about to begin receiving a benefit to the tune of an extra $2k per month that I don't have a need for. I'm fortunate enough that all my needs are met financially and this is truly bonus income. If it didn't exist, my life wouldn't change significantly, and it's not enough to quit my job. Trying to get others thoughts on what would be good uses of this money that would benefit me and my family.

Thoughts:

• ALL_IN_VTSAX - hit FIRE goal earlier than planned
• kiddo's college fund - hit funding goal earlier than planned
• do fun things - vacation fund, memories with family
• fund hobbies - buy things I don't need but "lower-guilt" use of spare funds

Probably a combination of all of the above, but interested to hear the thoughts of others.

I'm also reminded of:

When you have more than you need, build a bigger table.

Curious of ways to help influence things in a bubble larger than my family too.

Dear mods, instead of taking your frustrations on the users, I suggest you something more suitable to your abilities - like sticking your finger into your anus and licking it after.