overview for jax

[-] jax@lemmy.cloudhub.social 1 points 1 week ago

Currently using Nextcloud AIO and it's pretty decent, though I've got 16 vCPU and 32 GB of RAM allocated to it right now, though it's only using 10% CPU and ~7 GB of RAM at the moment.

I think it takes a while to warm up once you start adding data to it, especially depending on the plug-ins you add and amount of data.

Teachings from years of HomeLab in c/homelab@lemmy.cloudhub.social

[-] jax@lemmy.cloudhub.social 2 points 1 week ago

Yeah it very adds some extra complexity and it’s more important for if you are hosting in public clouds anyways IMO.

Teachings from years of HomeLab in c/homelab@lemmy.cloudhub.social

[-] jax@lemmy.cloudhub.social 2 points 1 week ago

That makes sense!

Have you played with anything like Istio to secure in-cluster communications? I think Hashicorp Consul can do something similar to encrypt service to service communications.

Teachings from years of HomeLab in c/homelab@lemmy.ml

[-] jax@lemmy.cloudhub.social 3 points 1 week ago* (last edited 1 week ago)

Yeah for sure! I like to post about both the positive and negative experiences. I find things like that to be a valuable learning tool.

From a security perspective, it’s important to understand the systems you’ve implemented and test that they are working as expected. I think in that example if I had tested user sign-up sooner I could have caught the configuration issue.

It's also important to have good observability into your system, both metrics and logs. Metrics to help detect if something weird is happening (increased resource usage could point to ransomware or crypto mining) and logging to track down what happened and see what systems are impacted.

From a technical controls standpoint, it's good practice to segregate your applications from other systems and control planes like IPMI and switching/routing admin interfaces. It's also good to try to limit holes in your firewall. In this cluster, I have Cloudflare Tunnels setup so that I don't have to open ports to access web servers, and I get access to their WAF tooling. You could do something similar with a VPS running WireGuard, CrowdSec, and a reverse proxy.

Teachings from years of HomeLab in c/homelab@lemmy.ml

[-] jax@lemmy.cloudhub.social 3 points 1 week ago* (last edited 1 week ago)

Not at all! I agree, and COVID didn't help at all. I do want to try and be accurate though :p

Teachings from years of HomeLab in c/homelab@lemmy.ml

[-] jax@lemmy.cloudhub.social 4 points 1 week ago* (last edited 1 week ago)

Its possible that I estimated the timeline wrong 😅

I’ve added a note to the blog, thanks!

Fediverse Apps on Kubernetes? in c/selfhosted@lemmy.world

[-] jax@lemmy.cloudhub.social 1 points 1 week ago

I should look into how to do that on my instance probably. Pictrs always seemed like a bit of a security nightmare.

Teachings from years of HomeLab in c/homelab@lemmy.cloudhub.social

[-] jax@lemmy.cloudhub.social 2 points 1 week ago

Ah okay that makes sense, you’re using the internal cluster domain to route to services

Teachings from years of HomeLab in c/homelab@lemmy.ml

[-] jax@lemmy.cloudhub.social 5 points 1 week ago

Glad I could provide some insight! It’s not something I see talked about too much even on Reddit. Let me know if you have any questions or things I could flesh out more in the article!

I’m still relatively new to ActivityPub and Federated systems in general, though I’ve had my Lemmy and Mastodon instances for 8+ months now I don’t use them as much as I was expecting, sadly. Running your own instance can be very isolating and any content you put directly on your instance probably won’t gain much traction (at least on Mastodon, Lemmy seems to fair a bit better).

It’s one of a handful of blogs that I’ve run over the last couple of years, the other one that’s still online is HomeLab.Blog. I actually meant to run a federated blog platform like WriteFreely, but they don’t have a production docket image, and I saw that Ghost is planning on adding ActivityPub support.

This article might be more appropriate on that blog and an article about my experience with Federated systems might be more on-topic on this one. Oops.

43

Teachings from years of HomeLab (blog.cloudhub.social)

submitted 1 week ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.ml

9 comments fedilink

A slightly less technical post - these are some things I've learned from having a HomeLab for over a decade.

Teachings from years of HomeLab in c/homelab@lemmy.cloudhub.social

[-] jax@lemmy.cloudhub.social 2 points 1 week ago

Oh, dev namespaces are a good idea. Do you have a dev domain then too?

Teachings from years of HomeLab in c/homelab@lemmy.cloudhub.social

[-] jax@lemmy.cloudhub.social 2 points 1 week ago

Thanks! I find most of the issues occur during upgrades to services, but that is to be expected.

My internet service is usually more of an issue than most services I run. Though some things take longer to get tweaked and running well and that can cause issues.

Stealing cookies: Researchers describe how to bypass modern authentication in c/cybersecurity@sh.itjust.works

[-] jax@lemmy.cloudhub.social 4 points 1 week ago

Yeah, this seems like old news - cookies can be stolen, and FIDO doesn't change that unless you are prompting the hardware token for validation with every request (which isn't feasible for most things, though might be a good idea for sensitive actions).

19

Teachings from years of HomeLab (blog.cloudhub.social)

submitted 1 week ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

10 comments fedilink

Starting a new Cloud/HomeLab blog at this domain - let me know if you want a contributor invite!

18

Fediverse Apps on Kubernetes? (lemmy.cloudhub.social)

submitted 2 weeks ago by jax@lemmy.cloudhub.social to c/selfhosted@lemmy.world

25 comments fedilink

cross-posted from: https://lemmy.cloudhub.social/post/347779

I am running a Kubernetes cluster for this domain, and I'm looking at more services to run (right now I have Mastodon and Lemmy).

I was considering WriteFreely and PixelFed, but they don't seem to have an easy solution for running on Kubernetes (WriteFreely doesn't even have a production-ready docker image).

Is anyone else running federated services in their lab? Do you run any of them on Kubernetes?

10

Fediverse Apps on Kubernetes? (lemmy.cloudhub.social)

submitted 2 weeks ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

0 comments fedilink

I am running a Kubernetes cluster for this domain, and I'm looking at more services to run (right now I have Mastodon and Lemmy).

I was considering WriteFreely and PixelFed, but they don't seem to have an easy solution for running on Kubernetes (WriteFreely doesn't even have a production-ready docker image).

Is anyone else running federated services in their lab? Do you run any of them on Kubernetes?

8

Configuring Istio with OIDC authentication (homelab.blog)

submitted 2 weeks ago* (last edited 2 weeks ago) by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

0 comments fedilink

Reposting some of my older popular blog posts. This one is probably out of date, I doubt the configuration examples still work as they did back in 2020.

6

Internal SMTP relay? (lemmy.cloudhub.social)

submitted 8 months ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

2 comments fedilink

I have a need for an internal SMTP relay inside a kubernetes cluster. What is everyone using for docker/kubernetes SMTP relays these days?

Goal is to have all internal services route emails through this relay and it in turn sends the emails out via SendGrid, should be a fairly easy task, just not something I've done for a few years.

3

We're Back! & What's in your homelab August 2023 (lemmy.cloudhub.social)

submitted 9 months ago* (last edited 9 months ago) by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

7 comments fedilink

Hey all! We're back after a couple of weeks of downtime on Lemmy due to some DB migration issues + Kubernetes liveness timeouts, and general lack of time to troubleshoot. For the latest status, you can view the status page for the cluster here: https://cloudhub-social.github.io/Status/

We are also well overdue for a What's in Your Homelab for the month of August, so we'll use this post for that as well!

1

What’s in your homelab? (July 2023) (lemmy.cloudhub.social)

submitted 10 months ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

2 comments fedilink

Since it's been about a month since the last post, it's time for another one!

"What's in your homelab?" (July 2023)!

This could be anything from hardware to software to things your running in the cloud (#cloudlab).

Hardware and diagram pics are always welcome!

12

Accounts blackholed when instance email is not working (lemmy.cloudhub.social)

submitted 11 months ago by jax@lemmy.cloudhub.social to c/lemmy_support@lemmy.ml

33 comments fedilink

When the following is true:

User attempts to create an account
Instance has "require registration application" enabled
Instance's email is not working/unavailable

the application seems to get lost, the user never receives an email (even after email functionality is restored), nor can that email/username be used going forward to re-submit the account creation request.

Additionally, since the user never verifies their email, the instance admin never gets a registration application.

It's not currently an issue for me, however, would it be possible to delete these ghost users? If you lookup the profile/username in the database, you can view it via the web UI, but the only options appear to be either blocking the user or banning them. It might be good to be able to completely delete the accounts, no?

4

Uptime Robot alternatives for status pages and up/down monitoring? (lemmy.cloudhub.social)

submitted 11 months ago* (last edited 11 months ago) by jax@lemmy.cloudhub.social to c/sysadmin@lemmy.ml

9 comments fedilink

cross-posted from: https://lemmy.cloudhub.social/post/14149

What's everyone using for status monitoring and/or status pages either in their lab or at work?

I setup a status page for my fediverse instances using Uptime Robot (have an existing subscription), and the features are kinda lacking. I feel like they haven't really updated anything in the last 5 years which is unfortunate.

1

Uptime Robot alternatives for status pages and up/down monitoring? (lemmy.cloudhub.social)

submitted 11 months ago* (last edited 11 months ago) by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

0 comments fedilink

What's everyone using for status monitoring and/or status pages either in their lab or at work?

I setup a status page for my fediverse instances using Uptime Robot (have an existing subscription), and the features are kinda lacking. I feel like they haven't really updated anything in the last 5 years which is unfortunate.

0

Does anyone have recommendations for dairy alternatives? (lemmy.cloudhub.social)

submitted 11 months ago* (last edited 11 months ago) by jax@lemmy.cloudhub.social to c/espresso@infosec.pub

6 comments fedilink

Title - I'm using lactose free milk right now, but I'm wondering if there are any good milk-free alternatives? I tried using Silk's barista almond milk, but it's sour after being frothed?

Edit: I guess I'll have to try some oat-based alternatives, maybe the problem is with the almond milk.