Spyke

Replies

Comment on

Why do so many people use NGINX?

Honest question: why not use nginx?

I have run it in so many different scenarios, both professionally and personally, its crazy. Nginx has never failed me, literally. My homeserver is quite limited but nginx has a very small footprint, it performs beautifully well and it satisfies all my hosting, proxying, redirecting and streaming needs.

It works for modern and legacy applications, custom code, webhosting, supports all the modern features and its configuration is very easy with literal thousandsof examples available online.

Apache probably can do all that but I hate how unintuitive its configuration is to me personally. HAproxy cant do half the stuff nginx does.

As for caddy Ive heard of it but never really used it. What does it offer that nginx doesnt?

memes

Comment on

An alternate timeline

I really liked it. It looks very clean and friendly. I can identify the ui elements with a glance. I know it is not modern and sleek and it doesnt look "gamer" at all, but function wise I think this is great.

Comment on

Simpler alternative to prometheus-alertmanager and/or graphana?

Have you played around with Grafana? It really is quite simple if you have prometheus already working.

For a home lab environment you dont even need to use prometheus-alertmanager. Grafana can handle alerts as well.

Grafana also has hundreds of pre-made dashboards you can import. Node monitoring is quite straightforward.

Assuming you have prometheus good to go, all you need to do is go to Grafana - Datasources, create a new datasource, point to your prometheus instance.

Then you can import the dashboards you want.

Now you can setup your alerts - you can use SMTP, telegram, slack among others for your notifications.

imageai

Comment on

[Community Challenge 43] Is This A Meme?

Not a very recognizable meme, so I hope you guys at least find out what it is.

Prompt: "A human norse male wearing an iron helmet stands in a stone and wood city, lookong towards the camera. The helmet fully covers his face and its shadow hides his eyes. A yellowish cloth wraps his neck and covers his sholder."

Workflow: created using Bing AI.

rant

Comment on

The super-rich are disappointingly boring.

Thanks for the rant, loved reading through it.

It is an interesting thought to think that a poor person is given desire but those ultra rich seem to have converted all of theirs into "more, more, more". Almost like a dragon hiding in their cave hoarding all their treasures.

Comment on

Help me harden my home server

Reply in thread

Been there, done that lol, my ISP doesnt change my IP half as much as I should like, and I renew my certs half as often as they deserve.

Seriously though, I had certs expire twice until I finally decided to get this setup properly.

Comment on

Help me harden my home server

Reply in thread

That was a great answer, thank you so much!

Yes I didnt even notice the family photos and docs dont need to be on that same server. Initially I just put them there to act as a local file share. But you are absolutely right, moving them from the public server is the best thing I can do to protect them.

I will look into setting up a second server for the private stuff that is not publicluly accessible

privacy

Comment on

is forwardemail a scam?

Reply in thread

I'm with you on that one. Currently paying for tuta (1$) and addy (1$) and forwardemail (3$). Forwardemail is actually more expensive

But neither proton nor tuta support IMAP, SMTP, at least not without the bridge thing.

Comment on

Help me harden my home server

Reply in thread

Thanks for your reply!

Suggestion 1 definetely does make a lot of sense and I will be doing exactly that asap. Its something I didnt think through before but that would make me much more in peace.

Suggestions 2-4 sound very reasonable, I have indeed searched for a way to self host a waf but didnt find much info. My only only concern with your points is... Cloudflare. From my understanding that would indeed add a lot of security to the whole setup but they would then be able to see everything going through my network, is that right?