Spyke

Posts

privacy·Privacybytrilobite

Whatsapp stored my wifes data

What a surprise when i discovered that you don't seem to need to backup Whatsapp messages any more. They apper to be stored on Meta servers. I'm sure it was not like this in the past? My wife left her GrapheneOS phone on the roof of the car and drove off. I managed to recover it but it had been ridden over by i car. So boight another pixel and installed Whatsapp again. She can't live without it as all her clients are on there. When i setup Whatsapp on new phone, all messages appered again, just like that. Spooky ... I think in the past it wasn't like that?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Gramps web ... looks cool if only I could import my data

Hi, installed the gramps web container using the default installation with this docker file where the only thing I changed was the port number. Having read this it woudl appear that I need not do anything unless I want to build a multi-tree environment (not my case for now).

When I import the *gramps file I have from the desktop version, it says database is locked. I get internal server error if I try setting a Home Person under "Family Tree" which looks pretty empty at the moment.

There seems to be an option to unlock the database here but this stuff seems to be related to the desktop app rather than the web app. Any thoughts?

EDIT; Makes no difference whether I'm doing the above as administrator or contributor user.

EDI2: not sure if this made a difference but changed the GRAMPSWEB_TREE: to match the tree name I have in the desktop app and now it did import. Must be the fact that it is configured as single tree and it expects the tree name that is being imported to match the tree name that is registered in the yaml file.

View original on lemmy.ml
privacy·Privacybytrilobite

Privacy focused alternative to Doodle Poll

Hi, a long time ago, when I was less informed on privacy risks on the internet, I used to use Doodle Poll. Using my work account (only used for work and no personal resons), I accessed it again after many years as need to arrange a work meeting. It has become a lot less useful that it was as they have clamped down on free tier features.

So my question is: Is there an alternative, that is equally simple to use, and possibly privacy friendly?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Going nuts with networking of VMs on Proxmox (SOLVED)

Hi, so I have a little Proxmox box with two VMs: VM1 and VM2 which is a clone of VM1. I change the mac of VM2 to avoid conflict and I reset the machine ID of VM1. I then have a seperate pfSense machine machine that that acts as router, firewall and DHCP server. Proxmox is on the 192.168.20.1/24 domain. In the DHCP server, Proxmox get IP 192.168.20.8 explicitly assigned. All good to this point. I've set VMs on pfSense to get the 192.168.20.9X addresses assigned. VM1 gets 192.168.20.91 assigned, while VM2 should be getting 192.168.20.92.

But this is what actually happens:

  • VM1 gets 192.168.20.106 assigned, despite telling pfSense to assign it 192.168.20.91. This happens even with VM2 shutdown. The DHCP Lease table is showing 91 up and running and does not list 106. Yet, the ARP table shows 106 assigned and no 91 assigned. This is even with me deleting the 106 entry from the ARP table several times and rebooting both the VM and the Proxmox server.

  • The VM is definately getting 106 assigned as I can log into it with 106 IP but 91 doesn't respond (no route to host).

Is this something to do with the bridge configuration on Proxmox? Iv'e added a screenshot of what I see. It doesn't seem to be that complicated to setup a bridge?

I can't get my head around this so tips are welcome.

EDIT: I've just run 'sudo ip' on the VM and i see the ens18 interface with the MAC I assigned to it and the 106 IP assigned to this interface. There are then seven of 'vethXXX' interfaces. Not sure what these are. There are also four 'brXXXX' interfaces, one 'loXXXX' interface and one 'docker0' interface, the latter probably used by the docker subsystem running on the VM. I imagine the 'brXXXX' interfaces are the docker containers themselves (I think I have four running). But what are the 'vethXXXX' interfaces? Sounds like its something to do with "virtual interface". Why so many and what is creating these?

View original on lemmy.ml
privacy·Privacybytrilobite

A secure, privacy and GDPR compliant alternative to Google Forms

Hi, my employer is sponsoring an academic research on parenting and flexible working. A lot of sensitive questions are asked and the university researcher has circulated these questions on Google Forms to all employees. I am really anti-Google when it comes to privacy (got rid of every Google link years ago and currently use GOS, etc.) so I raised this concern with the HR team. They were sympathetic with my view and have encouraged me to send my view to the university. However, I don't want to go down the rant, and want to provide constructive feedback. So, first thought I would to consult with privacy focused members of this list. Here are my questions:

a) are there independent research papers out there that demonstrate (rather than speculate) that Google Forms is not fully respecting privacy and is not fully GDPR compliant?

b) are there more robust, privacy and GDPR compliant alternatives I could recommend? I've done quick searches on the web and alternatives like JotForm and AidaForm seem to be more privaci and GDPR focused. Anyone used these before?

Am I being too anal about this ...?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Today at 50+ I feel like a little kid ... what a homelab ...

I wanted to shared my enthusiasm, which makes me feel like a little boy (despite me being 50+) fascinated by how such complex systems can be managed so easily by novices. I started using Proxmox recently. I had a machine running one VM with various docker images installed. But NVMe was tiny. So I setup another node and got it to share the same NFS share on the NAS, where I had saved full backups of the VM. Once added the NFS share to the new node (with a bigger ZFS local partition) I simply restored the VM from the NFS share that had been backed up from the original node. It seemlessly imported and started. Then I cloned on the new node so that I could get it on the new ZFS partition. Now the next task is to get a bigger NVMe on the original machine, install Proxmox from scratch, and add to cluster so that it shared the backup NFS share. I just then need to understand how to get HA up and running so that VMs are always synced flawlessly. Proxmox is super brilliant. I feel like I have a data center at home :-) I could not imagine this system was so flexible and relatively easy to use. The people that deliver and contribute to this stuf are super cool. A couple of proxmox nodes, a Truenas scale NAS and a good backup strategy and your data is really safe and rock solid ... I hope :-)

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Moving a Proxmoc 256 MB NVMe install to larger NVMe

Finally managed to get my hands on 2x1TB NVMe's. Budgets are tight these days ... :-) They are Crucial P310 ... hope they are reliable, although I suspect nowhere near Samsung stuff.

I have a little Proxmox installation running a VM on a 256GB NVMe, which as you can imagine is tight. Is there a way of cloning this installing on one of the new NVMes?

Reason why I have 2x new NVMe is that I want to eventually get myself to Proxmox HA, so that the two machines (two little Optiplex 5070, one of which has the 256GB install) provide me with redundancy.

First thing is to clone the 256GB install to the larger NVMe. Would it be an idea to go this way: a) install 1TB new NVMe on spare Optiplex b) install Proxmox on this new machine c) find a way to replicate the whole 256GB install on the second machine (need to read the docs to see if/how this can happen) d) once second machine is up and running as a clone, remove machine with 256GB (current machine) and install the 1TB NVMe. e) do the same above process the other way around.

Do you think this will work or am I going to hit a wall? Is there a simpler way of doing this?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Proxmox NFS shares for Docker

So here is my dilemma. I have a Truenas server that basically acts as a file server. I also have a little machine running Proxmox. I have an NFS share on the Proxmox machine for saving VM backups so that they are secure. On the Proxmox VM, I want to install docker instances. Some of them require large data repositories so I can't have the data stored on the VM. I'm thinking of creating an "apps" dataset on the Truenas machine, then exporting it via NFS and mounting on the VM. Then I redirect all the Docker volumes on this NFS share. Say I have Docker_App1 on the Proxmox VM, then I would create a folder in the /mnt/Truenas_share/Docker_App1. Do you think this will work? The alternative is to create an individual dataset on the Truenas machine for each Docker_App but this feels overkill and a nightmare to setup and maintain. How are you managing Docker volumes over NFS?

View original on lemmy.ml

Thinkpad T14s without OS

I think I've read in Lemmy somewhere that the T14 notebooks should be avoided is they come with letters after the T14. I'm thinking of buying a T14s G5. It has to be new as we get tax deduction (will be at the reception of small local museum). What do people this of this notebook. I'll end up installing Linux on it. I was thinking of going DELL as I've been running various latitudes over the years without major problems but looks like people are not fond of DELL + Linux. Any thoughts?

View original on lemmy.ml
privacy·Privacybytrilobite

Citizens Lab enquiry: how can we fight against this surveilance

This read is interesting and makes me wonder how can we fight back. I don't undrstand much of this but what i have figured out is that its based on tracking phone IMEI. Presumably OSs like GrapheneOS cannot spoof the IMEI because its used to route traffic to your phone isn't it? I know it can use a different MAC for different eifi connections, trace reducing the footprints you leave behind but i guess it can't do this for IMEI?

Citizens Lab enquiry: how can we fight against this surveilancehttps://citizenlab.ca/research/uncovering-global-telecom-exploitation-by-covert-surveillance-actors/Open linkView original on lemmy.ml
europe·Europebytrilobite

Digital indepedence

I've heard of some interesting discussions going on on Reddit regarding the panic that is starting to spread in Europe in relation to depedency on US cliud computing and software (think of all the pcs that run Microsoft). Should we really be concerned and is it not time for Europe to become.digitally sovreign?

View original on lemmy.ml
selfhost·Self Hosted - Self-hosting your services.bytrilobite

Traefik (and eventually Vaultwarden when I get there)

I've tried unsuccessfully to get Valutwarden working without a proxy. See here. Any request with https leads me to the SSL_ERROR_RX_RECORD_TOO_LONG error, while via http I get the "Loading wheel" running indefinitely.

Despite the top of the page here suggests you can run Valutwarden without internally without proxy, my experience suggest that this is not the case and have tried on different VMs getting the same error. So seems like the only way is going via proxy. From what I've read, people seem to suggest that Traefik is the way to go. So I'm thinking of setting it up on my same VM as Valutwarden.

Note that my network is behind a pfsense install on another hardware machine. DNS forwarding is enabled with unbound. Will installing Traefik require changes to pfSense config? Looks like it may be the case from here. For now all I want is getting Vaultwarden going; later down the line I'll learn how Traefik can benefit the rest of my homelab.

I'm trying to work out the simplest way of getting Vaultwarden going using a minimalistic proxy, as there seems to be no alternative to not having a proxy going. Thoughts?

View original on lemmy.ml
selfhost·Self Hosted - Self-hosting your services.bytrilobite

Running docker compose the right way

I'm having some problems installing Vaultwarden and I wonder if it because I'm running docker compose in the wrong way and there are user permission issues.

What is the right way of installing docker compose (on a linux VM)? In in the past I would create a docker folder /home/user/docker. In there I would create the folder firefly or whatever and then I would run docker compose as user. So, when installing firefly, I would be in the /home/user/docker/firefly and run docker compose from within. Not as root (using sudo) but as a the normal user user. Firefly service would just run without problmes. Shoudl I be installing containers this way of shoudl I be using root (sudo)?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Getting the right setup for Vaultwarden compose.yaml

I thought that Vaultwarden install was going to be a little simpler but after having consulted a few guides here and there its maybe less straightforward than I thought.

My use-case is to use it on may internal LAN only with not access from outside whatsoever. In theory, http should be fine, but as this tool will contain quite a bit of sensitive data, I can see why it may be a good idea to go https. Are most of you internal users only setting up https?

My network is behind a pfSense setup that uses unbound to resolve all DNS. Locally, all my DNS requests are being forwarded on the subnet I will have Vaultwarden installed.

  • First question is whether for internal network use only, I need to go https.
  • Second question is whether I need to follow this guide?
View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Why would i abbandon KeepassDX?

I use KeepassDX on family mobiles with Syncthing for copies between laptop and phones. What would i gain moving to Vaultwarden, knowing that i would never open my network to the outside world? It would be easier to manage for sure, as im having to setup phones and laotops myself in the family and worry that they do silly things like turn off syncthing. But what about offline access to passwords? Does Bitwarden mobile client keep a local copy of database until it can sync?

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Linkwarden downloaded the whole flipping Internet ...

It was a surprise when I installed Linkwarden last night, imported over 4000 bookmarks collected over >20 years and then discovered this morning that there were (and growing) 12 GB of data on my Truenas. This explains why my VM crashed last night and ran out of space. It looks like the default setting creats and image, a PDF and an HTML version of every single page 12GB/4000=3MB each sounds about right, although we'll see when/where this stops. So this was the first thing that put me off. Here are a few others:

a) unless I've missed it, there is nothing to capture duplicate links

b) nothing to capture/report dead links.

c) the two droid apps (LinkDroid, LinkGuardian) either don't connect to my server (the latter) or simply seem too simple to be of good use on the phone. LinkDroid is proposing all the "collections"/folders in a drop down menu and I have many folders in the 4000 bookmarks so it difficult to scroll on a screen when saving a link.

d) The linkwarden firefox extension only allows you to capture links rather than integrate with the browser and substitute the browsers link management process.

Ultimately, it looks more like Wallabag, that i've been using for some time now. Whereas, I was expecting more a tool to actually manage the huge link repository I have.

View original on lemmy.ml
selfhosted·Selfhostedbytrilobite

Getting Linkwarden docker storage right

I'm trying to install Linkwarden and I want to make sure I get the storage right so that if I have to move the data to another VM, it is easy to do. If I use the default compose file, will it simply create a ./data ./pgdata and ./meili_data folders in the same folder where the docker compose file is? Which of course is very handy as then I have the compose, the .env and the data all in one place. Is this a good way of managing docker volumes? The install docs here say that I can also set a STORAGE_FOLDER variable in the .env file which by default is /data. But does this mean that the default is in the root directory of the host?

View original on lemmy.ml