• 0 Posts
  • 41 Comments
Joined 2 years ago
cake
Cake day: June 18th, 2023

help-circle




  • NaibofTabr@infosec.pubtoSelfhosted@lemmy.worldAm I being held back by using casaos?
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    2 months ago

    I second this - virtualization is the easiest way to branch out and try new things. You can keep the working system you already have, and also experiment with other systems.

    A further advantage is that you can run services in separate VMs, which helps if you need isolated contexts for security, privacy, or stability reasons. And, if you break something while you’re learning you can just delete that VM and start over without affecting your other working services.





  • however, i know nothing about self hosting. My knowledge is absolutely zero […] I dont understand nothing

    This is going to be a problem, unfortunately. You’ll need to define your use case first:

    • How much music do you want to have access to? Hundreds, thousands, millions of files? How large is your collection?
    • Do you have downloaded copies of all the music you want to listen to? Are they all in one place, well organized and tagged? If you just have downloads in the Spotify app, you won’t be able to use those files, you don’t actually own that music. You’ll need DRM-free audio files.
    • Where and how do you want to be able to access them? Just from one device like your phone? Many devices? Is having access at home good enough, or do you want to be able to access your collection while you’re away from home?
    • Will you be the only user?
    • What kind of budget do you have to work with?

    An old PC might be enough to act as a server, but there’s more involved and the answer to what you need depends on what exactly you want to do. You will not be able to build a personal version of Spotify with just an old PC, for instance.




  • Metronet will be supplying an Optical Network Terminal, probably like this one:

    This is basically the equivalent of a modem for cable networks. It does not provide routing functions. You’re probably stuck with the ONT they supply, but it shouldn’t matter much, definitely not for anything internal.

    It looks like Metronet normally supplies Eero WiFi mesh devices for home networking - are the ones you currently have supplied by Metronet? They might just replace the modem with the ONT and leave the existing Eero gear, or they might upgrade the Eero gear to support the higher speed available on the fiber network.

    In any case, if you are using ISP-supplied network devices then you don’t control the router, which means you can’t set up things like port forwarding to access your home network from outside, or configure VLANs to segregate devices on your network, or control things like DHCP.

    Technically there’s no reason you have to use the Eero devices from Metronet, you should be able to plug any router into the ONT WAN port and have internet service. If you don’t want to get too deep into network config, then any modern consumer WiFi router will work (but not a modem/router AIO device). If you want to have a bit more control, look for one that supports OpenWRT.


  • You’re welcome. I tried to do basically the same thing a few years back (run a WordPress site from a RPi on my home network - and also a Minecraft server) and so I tried to write up the problems I ran into - I probably forgot some, but those are the major hurdles. I learned a lot along the way.

    I should also point out that if you rent hosting space (from linode or inmotion or digitalocean or many other options) then problems 1 & 4 become much easier, and 2 & 3 go away entirely (most people don’t host public websites on their home networks because of these and other issues).

    Happy to help. If you’re interested in learning networking more thoroughly, I want to point you to Professor Messer especially the Network+ content. He has far more complete explanations than I could write (and it’s free!). Even if you’re not interested in getting any certs, the explanations will be helpful.


  • So your goal is to host a publicly accessible static website from a computer in your home. There are a few problems you need to overcome before even worrying about configuring any software. You need some more basic networking knowledge first.

    1. Basic Networking Theory - you should read a brief explanation of the OSI 7-layer network model. You don’t have to try to memorize this and you won’t really understand it until you start actually doing stuff, but you should read it for some basic terminology and to understand that there are distinct steps through which communication between computers happens.

      When you start running into problems (“why can’t I access the server? I did all the tutorial steps”), figuring out which layer the problem is in will help guide you to the solution:

      • is there a bad cable? -> 1. Physical
      • do I have the right IP address? -> 3. Network
      • is the firewall port closed? -> 4. Transport

    1. Privacy/Security/Safety - don’t host a publicly accessible website from your personal computer. Just don’t. To make this happen you will have to open a hole in your network security that makes your computer accessible from the public internet. Don’t do this on your daily driver computer. Don’t do this with any device that has any files on it that you care about or any access to any personal information. Don’t.

      Set up your web server/learning environment on a clean, dedicated system. This could be an old laptop or a Raspberry Pi (an older 3B model will work just fine for this) or whatever cheap computer hardware you have, as long as it can run Linux and has a physical network port (using WiFi will give you extra headaches for getting this working). If you think you might want to expand your projects in the future, you can get a used Dell server for very little money, and add more hard drives as needed. Wipe the hard drive and install Debian or Ubuntu server as a base, there’s lots of resources out there for setting up web services on either.


    1. Restricted Ports - you are most likely on a residential internet connection. Most residential ISPs close ports for security reasons, especially 80. For example, here is Cox’s list of restricted ports. You will need to find your ISP’s equivalent list and understand what you can and can’t do with your connection.

      There are workarounds, primarily through port forwarding. You will need admin access to your router to set this up. I recommend that you read that entire article because it probably applies directly to your situation.


    1. Dynamic IP Address - most people still find it easier to work with IPv4 addresses - I won’t go into IPv6 right now, but you should read a little about it just for awareness. Your residential internet most likely has a dynamic IPv4 address, which means you can’t rely on that address staying the same forever (or even until next week), which means that you can’t configure your Cloudflare domain name to point to a single IPv4 address.

      Dynamic DNS is the solution for this, and again you’ll need admin access to your router to set it up.


    1. HTTPS/TLS/SSL - if you get through all those issues then you probably have a working website, but now you’re seeing something like this when you try to view it in your browser:

      This doesn’t mean that you can’t get to your website - it just means that you can only do it via HTTP and not HTTPS, which the browser is warning you (and anyone else trying to view your website) is not secure. You can either just accept that this alert will always come up, and that you have to click through it, or you can learn about TLS and getting an SSL/TLS certificate. This is a later topic - it doesn’t matter and probably won’t make sense until after you’ve got your web server online.





  • OK, but I’m not arguing for the sake of argument. What I take issue with is the overly negative point of view that isn’t justified by the reality of the current technology market. It’s limited, depressive and ultimately self-destructive.

    Perspective matters. Money isn’t the only measure of success. Internet infrastructure is basically Linux, nginx and Apache - seriously, apart from user endpoints it’s pretty much all open source - and the most common endpoint OS is Android so also open source. The idea that open systems aren’t as successful as proprietary ones doesn’t reflect reality, it’s a projection of a limited point of view onto reality (it only seems true if large portions of the current technology market are ignored).


  • The economic model we’re in has been around for hundreds, arguably thousands of years in most ways. What about it?

    And open source came into being inside of that model, and has grown and thrived since. So obviously, it’s not impossible.

    The norms we are discussing here is that under capitalism, the norm tends to be trending away from free and open systems.

    Right, this isn’t true. While certainly there are some businesses that try to restrict it, open systems grow and spread anyway. Open source is bigger and stronger than ever today. Open source software is so widespread that it’s a security concern for governments (look at the log4j fiasco). You interact with open platforms every day, even if you don’t see their names in commercials or on billboards (many of them don’t have to advertise).