

Vendors packaging OpenSSH open up even more vulnerabilities that the devs of OpenSSH can’t protect you from. See the recent xz poisoned OpenSSH packages


Vendors packaging OpenSSH open up even more vulnerabilities that the devs of OpenSSH can’t protect you from. See the recent xz poisoned OpenSSH packages


Exposing SSH is not recommended, it’s a hot attack target. Expose a VPN and use that to SSH in.


That’s great, do you put it behind a reverse proxy?


I just pay for ente to host for me so I like the E2EE. If I self hosted I would consider Immich with media stored in an encrypted zfs volume


How does this compare with Ente?


You shouldn’t need to put your VPN IP anywhere in the server, by default I’m pretty sure it listens on all interfaces. Just the client config I imagine is sufficient


Ah man that was just tested. I’ll put that on my todo list.
In its simplest form, without containers, are you able to run the server and connect to localhost using the official launcher? (There’s a setting to swap from stable server to local server)


Update your repo and try the new docker files


If you’re getting that message it’s running, try logging in with the client


IIRC there is a MR to improve it, I just haven’t had the time to finish testing and reviewing it


That is a regular connection check we implemented to pause the server if the server goes offline. That’s likely a warning and not an error, and you can disable it in the worldprops for the server


Would recommend playing on the live multiplayer server rather than self hosting


What issues are you running into?


Pretty much this, make sure it’s Java 11 though
With no security updates to various firmwares?
Use some service like lidarr or beets to tag the music before it goes into jellyfin


My point is, and the author’s point is, it’s not computation that’s keeping the bots away right now. It’s the obscurity and challenge itself getting in the way.


Yes, I manage cloudflare for a massive site that at times gets hit with millions of unique bot visits per hour


It works because it’s a bit of obscurity, not because it’s expensive. Once it’s a big enough problem the scrapers will adapt and then the only option is to make it more obscure/different or crank up the difficulty which will slow down genuine users much more
Who hosts your DNS?