Illecors

It really is!

I do run wireguard on my router, but the main reason is ad blocking, not hiding services. Most services are publicly exposed.

Not sure if irregular booting is still an issue, but that sounds a lot like device names changing between boots. If I could hazard a guess - you’ve got something like /dev/sda in your fstab, where ideally you’d have UUID=1234-ABC. You can get the uuid by running

blkid | grep sda

Is this at a webserver level?

It would work just fine within TOR. Reaching out would be a massive pain as the software is not ready.

I’ve set up the “old” UI - no javascript - on TOR on lemmy.cafe. It works well, but that’s not a real hidden service, as such.

Network? That’s a small bit. DB is struggling with IO at times, but network usage is fairly low, at least on my end.

Gentoo/Arch guy checking in. It’s more about having fewer codepaths to go wrong after some update. At least in my case.

Lemmy UI shows you all the other posts it’s aware of once you paste the title; or apply a suggested title after pasting the link.

The crawler probably went down and did not record anything

Huh TIL. Thought it was cock.

Inatances self report these stats. All you have to do is a single db query and all of a sudden you have 100 million MAU.

Filled in the survey. A few notes:

• Some of my answers make no sense on the surface - like the “experiment with new technology” block (4 questions). I’ve answered “Agree” to all of them, because I have taken time into account, which is not represented on the questions. Long story short - I do love experimenting with new tech, I’m almost always the first one to try something among my peers, but at the same I never blindly jump in (I’m hesitant) as most of the “new technology” is just
  • Someone repackaging foss and relabeling it
  • Some LLM bullshit
  • An inferior product to what already exists

There are also scenarios where I have already found something that’s the best solution for my case, so I won’t even bother looking at something new, even if it might be the best thing since sliced bread for someone else.

• TIme and effort setting up/maintaining (4 questions). It doesn’t take much time nor effort to set anything up now, but it did when I was starting out initially. I knew very little and a bunch of concepts hadn’t clicked, yet, so it took me days to set up Nextcloud and about half a year (on and off. Probably a week or so if it were all squeezed together) for email.

• The performance and intent to use in the future questions are weird - they feel like the same question, just leveling off in intensity. I’ve selected the same answer for all of them. They probably should’ve been a single question with agree/disagree options swapped for intensity levels.

Good luck with your PhD!

Mostly agree. Audiobooks are not my thing, but of it were - I’d look for a way to resume where I left off, maybe some recommendation on what to listen to next.

In general - once you’re into hosting stuff and past the initial barrier of setting everything up - adding another service is dead simple.

Can I be unreasonable? I’m gonna be unreasonable.

Gentoo.

.dev domains are required to only be reachable via https. You’ve not mentioned that in the post, so I’m guessing port 443 is not serving or even listening.

I’d delete the screenshot with your IP visible. You never know…

If you’re dead set to run lemmy - then just do it! If soam becomes a problem - turn on registration verification. Spam usually comes in waves, so you don’t even have to keep that barrier on all the time. Having said that - if you want some sort of nationality verification - application process could enable it.

If you’re not set on lemmy - give piefed a shot. That’s what I would run if I were setting up from scratch. Same format social media, but, at least from what I’m hearing - better software.

Setting up is easy, but keeping it up to date is often troublesome. Releases are far and few between and as such, whenever there is one, it includes a lot of changes. That leads to some instances having trouble pretty much every time; I’ve been on the unlucky side enough times to be wary.

Lemmy.cafe runs on 2 dual vcore 4gb ram VMs on digitalocean - one for db, another for lemmy itself.

Lemmy prides itself in being written in rust, but it leaks memory like a sieve - I’ve had split up the containers into smaller tasks (there’s an official flag you can pass to it), double them up and set memory limits. That way when something gets killed by the kernel it’s not really noticable to the end user.

Running a public instance of anything is a security concern, let alone alpha-beta software like lemmy. If you do run it on your homelab at home - at least get the cheapest vm in the cloud to hide your home IPs. You’d probably need to set up a wireguard tunnel to ensure outgoing federation does not reveal the IPs to other instances.

Instance level moderation is up to you. Don’t be too dreamy - nobody will join your instance just because you have it running. Other than spammers and voting bots, that is. Moderation tools are just not there, so you’ll have to fiddle in the db directly.

Having said all that - if all you want is a personal inatance - go for it! With sign ups disabled it’s a much less stressful experience!

Welcome aboard!

Majority of openrc/hardened/selinux binhost setup is done, need to figure out the small things.

Lemmy was also giving a bit of a headache, fiddled with limits some more.

I’m fairly certain there’s been an attempt to play with some opnsense config, but there was only time to install the updates. Or maybe this was last week 🤔

Whole path has to be accessible, not just the file itself. All dirs above the file need to have the executable bit set that affects the user accessing the file.