Nyfure

joined 1 year ago
[–] [email protected] 10 points 9 months ago

Hetzner Storagebox is $3.5/M for 1TB

[–] [email protected] 3 points 9 months ago* (last edited 9 months ago)

As far as i understood tailscale funnel its just a TCP-tunnel.
So you handle TLS on your own system, which makes sure tailscale cannot really interfere.

If you already trust them this far, might aswell do the same with a VPS and gain much more flexibility and independence (you can easily switch VPS provider, you cannot really switch tailscale funnel provider, you vendor-locked yourself in that regard)

I'd connect the VPS and your home system via VPN (you can probably also use tailscale for this) and then you can use a tcp-tunnel (e.g. haproxy), or straight up forward the whole traffic via firewall-rules (a bit more tricky, but more flexible.. though not that easy with tailscale.. probably best to use TCP-tunnel with PROXY-Protocol).
This way you can use all ports, all protocols, incoming and outgoing traffic with the IP-Address of the VPS.

Tailscale might even already have something that can configure this for you.. but i dont really know tailscale, so idk..

And as you terminate TLS on your home-system, traffic flowing through the VPS is always encrypted.

If you want to go overboard, you can block attackers on the server before it even hits your home-system (i think crowdsec can do it, the detector runs on your home-system and detects attacks and can issue bans which blocks the attacker on the VPS)

And yes, its a bit paranoid.. but its your choice.
My internet connection here isnt good enough to do major stuff like what i am doing (handling media, backups and other data) so i rent some dedicated machines (okay, i guess a bit more secure than a VPS, but in the end its not 100% in your control either)

[–] [email protected] 1 points 9 months ago* (last edited 9 months ago) (2 children)

Many systems dont support subpaths as it can cause some really weird problems.
As you use tailscale funnels, you really want incoming traffic from the internet. I am not sure thats a good idea for e.g. homeassistant that is limited in access anyways.
Might aswell use tailscale and access the system over VPN.

And for anything serious i wouldnt use something like funnel anyways. Rent a VPS and use that as your reverse-proxy, you can then also do some caching or host some services there. Much simpler to deal with and full support for such things as you then have an actual public IPv4/IPv6 address to use.
Heck, dont even have to pay for it with the Oracle Always-Free system.

[–] [email protected] 2 points 9 months ago

5 years ago.. so probably not a very fair comparison, condiering all other prices went up too..

[–] [email protected] 4 points 9 months ago (4 children)

3-4000€ what did that person do??
I paid like 2000€ because i needed to take a few more hours. perfect parking in the exam though :)

[–] [email protected] 3 points 9 months ago

WebCord is a beast! Maybe runs better for you.
Basically Discord desktop client experience, but privacy (well.. as much as you can have with discord) from the browser-version. (minus discord desktop client exclusive features of course)

[–] [email protected] 23 points 9 months ago (1 children)

afaik they also alias common linux/gnu commands like curl.. but the syntax isnt like curl at all

[–] [email protected] 13 points 9 months ago

To be fair, you can check the code they run or just use the API.
The hash is calculated locally, cut-off and then send, the server returns all hashes it found which start with your one and then you can check if yours in in the list locally.

[–] [email protected] 5 points 9 months ago* (last edited 9 months ago)

We sometimes get weird scam-sms, but thats about it.
(We is my family, other people dont really talk about it with others that much)

[–] [email protected] 9 points 9 months ago* (last edited 9 months ago)

smartctl

But 10.000 seems on the low side, i have 4 datacenter toshiba 10tb disks with 40k hours and expect them to do at least 80k, but you can have bad luck and one fails prematurely.
If its within warranty, you can get it replaced, if not, tough luck.

Always have stuff protected in raid/zfs and backed up if you value the data or dont want a weekend ruined because you now have to reinstall.
And with big disks, consider having more disks as redundancy as another might get a bit-error while restoring the failed one. (check the statistical averages of the disk in the datasheet)

[–] [email protected] 25 points 9 months ago (12 children)

Async is good because threads are expensive, might aswell do something else when you need to wait for something anyways.
But only having async and no other thread when you need some computation is obviously awful.. (or when starting anothe rthread is not easily manageable)

Thats why i like go, you just tell it you want to run something in parallel and he will manage the rest.. computational work, shift current work to new thread.. just waiting for IO, async.

[–] [email protected] 18 points 9 months ago

afaik it flipped over at landing and the rovers where released about 5m above ground.
Honestly pretty awesome it could automatically compensate against loosing almost 50% of thrust, stay perfectly on trajectory and land successfully.
The Chinese lander, i think last year, didnt have compensation-features built-in and crashed.

view more: ‹ prev next ›