[-] bigDottee@geekroom.tech 2 points 1 day ago* (last edited 1 day ago)

Wouldn’t be surprised

[-] bigDottee@geekroom.tech 6 points 1 day ago

Man I’m lame.

Used to be {env}-function##

Now it’s {env}-{vlanlocation}-function##

VLAN location such as DMZ, Infra, Jump for jump boxes, IOTSec or IOTInsec, Etc

[-] bigDottee@geekroom.tech 9 points 2 days ago

I seem to be out of the loop in regards to proton controversy and I haven’t found anything outstanding against them…

Can you help me understand what you’re specifically referring to? I’m a proton user… so kinda want to know lol

1
submitted 2 days ago* (last edited 1 day ago) by bigDottee@geekroom.tech to c/GeekRoomMeta@geekroom.tech

Administration, moderation, and federation policy for GeekRoom.Tech

This post aims to lay out the rules and principles for how administrators, moderators, and users of GeekRoom.Tech should behave while use the GeekRoom.Tech name, address, and reputation. This is a set of formal rules that all users, admins, and mods must abide by.

Instance rules

This instance (like most others) has a set of rules which are always visible on the sidebar of the front page. All users of this instance are expected to follow these rules in all of their activities, including:

  • Community moderation
  • Posting
  • Commenting

⚠️ Our rules apply even when you’re posting in a community on another instance. For example, this means that you’re not allowed to post advertisement spam using your GeekRoom.Tech account on any other instance (even if that other instance has no rules).

Each community hosted on GeekRoom.Tech is free to have additional rules in addition to our instance wide rules, but instance rules supercede any community rules and must always be enforced.


Responsibilities

Admins

Moderators

  • Ensure that posts and comments in their communities don’t break rules
  • Ban users from their communities for consistently breaking rules
  • Ensure that they only provide accurate and clear reasons for mod actions

Users

  • Downvote low quality content
  • Report rule violations
  • Behave in a respectable manner

⚠️ Admins are not responsible for censoring content from other instances.

In exceptional cases (illegal or extremely disturbing content), admins will step in and purge the content from GeekRoom.Tech servers, but in general it is understood that our instance rules do not apply to external users on other instances, and censoring and curating external instances for our users is not a general goal for GeekRoom.Tech admins.

Federation Policy

You can see our federation policy here.

What should I do if I see content I don’t like on another instance?

  • If it’s low quality content, you should always down vote ⬇️
  • If you think it breaks local rules for the community or instance, then report it and local admins/mods will deal with it
    • Your reports will also reach GeekRoom.Tech admins, so if it’s about illegal content, then we can purge it from GeekRoom.Tech servers
  • If it’s just some user being a prick, then you can block that specific user (GeekRoom.Tech admins will not take action in case of external users posting on external communities)
  • If it’s a community dedicated to being awful in some way, then you can block that specific community
2

GeekRoom.Tech Federation Policy

As GeekRoom.Tech is a new lemmy instance, we have not seen any de-federation drama yet, but I want to make a point to address the policy of federation and de-federation in one place, prior to any drama that may eventually happen.

I am the head admin of GeekRoom.Tech. I have opened this instance to be a safe haven for all individuals that have a passion for technology, technology-related topics, and even those that just need a safe space to migrate from other websites such as Reddit without fear of shareholders forcing changes due to the need to make company profits.

This policy seeks to address how GeekRoom.Tech approaches de-federation and how we will handle discussions about de-federating from specific instances.

GeekRoom.Tech Statement of Federation

GeekRoom.Tech administration will treat de-federation as an absolute last resort and will not use it as a general purpose method of curating content for GeekRoom.Tech users. Administration will continue to federate with any willing instance.

Pros of federation

  • Federation is the strongest feature of Lemmy, Mastodon, Kbin, Mbin, and similar instances. While there is often confusion about what the "Fediverse" and what "federation" is and what it means for individual people trying to migrate or start anew, federation offers significant decentralization over sites like Facebook, Reddit, X, Instagram, and similar.
  • If a single instance goes down, it does not meaningfully affect the rest of the Fediverse. Users are able to choose to sign up for a new account on another instance, subscribe to their favorite communities again, and continue almost like nothing happened.
  • The maximum impact that a single instance administration team can have is limited to their own instance. An admin of an instance can only ban users from their own instance, they cannot have a significant impact on any other instance, besides de-federating from another instance, again, limiting their impact to their own instance. We can ban our own users from our instance, we can ban remote users from our instance, but those actions would only impact our own instance.
  • Federation offers significant privacy compared to centralized sites like Reddit and Facebook, because personalized details such as IP addresses or e-mail accounts are not shared between instances. If a user is extremely privacy-conscious and does not want to put trust in existing instances, they are more than welcome to self host their own instance.
  • Lemmy and similar types of instances are essentially the infrastructure of the Fediverse. Each branch of infrastructure offers multiple opportunities to get involved in communities.

Cons of de-federation

  • Every time an instance de-federates from the Fediverse, then it drives users to find other instances which may cause a higher level of centralization.
  • Lemmy and similar types of instances are essentially the infrastructure of the Fediverse. Each branch of infrastructure offers multiple opportunities to get involved in communities, however, the larger the instances become, the more centralized that particular branch becomes. This does unfortunately negate the positives of federation and can cause an impact for a larger number of users.
  • Collateral damage can be significant. If we de-federate from another instance at the demand of one, a dozen, or maybe even a few hundred users (when we get there), then all of those users that weren't involved in any drama or discussion will also be affected.
  • It is incredibly easy for malicious actors to abuse this. If someone goes on to another instance and starts posting spam or generally malicious content and then approaches the admins of the instance with "evidence" of why that other instance should be de-federated, then it's easy to be manipulated and make admins think they have no other choice than to de-federate from that other instance.
  • When instances de-federate from others, it means that users may end up requiring multiple accounts in order to be able to participate in discussions between instances, causing a very fragmented experience for them.

Alternatives to de-federation?

There are options that moderators and administrators of instances have, such as banning a user from a community and even from entire instances. If an entire community is used for hate, spam, or similar then those entire communities can be removed. Most issues can be resolved by simply communicating with other instance owners and either issuing bans for specific users or discussing how to handle those misbehaving users.

If GeekRoom.Tech de-federates over every single misbehaving user, we would likely not be federated with any other instances, which is something we seek to avoid.

Most individual clients have the option to block individual users and entire communities without involving instance admins. This leaves most of the decision up to the end-user rather than requesting involvement from admins.

When is de-federation the only option?

This is not a set-in-stone rule, but if an instance is abusing the Lemmy infrastrucutre by generating spam, posting illegal content - deliberately or not - then we may decide that de-federation is the appropriate last resort.

Conclusion

Most of what is written here is subjective, and for that I can only apologize. I will do my best to operate GeekRoom.Tech with the highest level of professionalism, maturity, and decisiveness to deliver the best experience for users across GeekRoom.Tech and throughout the Fediverse.

If you have questions or concerns, please feel free to share your thoughts in the comments so that we can have a public discussion on how federation and de-federation can be approached.

[-] bigDottee@geekroom.tech 1 points 2 days ago

I wouldn't say you're doing it wrong, but a reverse proxy allows you to not only have a specific domain to use and multiple backends, etc... but it also can translate to not needing to have a port open for every single service you run on the backend.

RP's can certianly be a load balancer, but usually for home lab / selfhosted purposes, we don't need a load balancer.

[-] bigDottee@geekroom.tech 2 points 2 days ago

I use both WireGuard and OpenVPN to vpn into my home network.

However, it doesn’t matter whether you use a domain or just up… if you get blocked from accessing either / both … you’re screwed. 🤷🏼‍♂️

5
submitted 3 days ago* (last edited 3 days ago) by bigDottee@geekroom.tech to c/new_here@geekroom.tech

Hello! Just wanted to introduce myself a bit.

I’m a system administrator during the day working with some PITA IBM products, Linux, and related projects as smaller duties.

I’m an avid HomeLabber trying to expand my own skill set but also provide a way for people to engage and have meaningful conversations. During my free time I’m usually tinkering with existing self hosted services or trying to setup new ones to enhance my family’s experience or to make life easier in some fashion.

I have a passion for basically everything technology and learning as much as I can. I realize that as I get older, I’m not picking up on things as fast as I would previously, but I’m going to attribute that to attempting to introduce significantly more complex systems that require more effort, critical thinking, and time to implement.

Two of my most recent successes in my self hosting journey have been getting this Lemmy instance up and running, and also getting VLANs fully functioning in my home network. I have too many pieces to a puzzle that caused most people to be unable to help me successfully.. it took me just about a year of off and on again searching through forums, asking AI and critical thinking on how to get VLANs working properly in my homelab. Well… home production … since there are family members and myself using these things in the regular.

Edit: as I read this post back I found a bunch of errors. iOS autocorrect has screwed me so many times, it’s frustrating. Why iOS doesn’t know “Lemmy” after I’ve saved it as a word so many times is baffling.

[-] bigDottee@geekroom.tech 2 points 3 days ago

You are looking for a disaster recovery plan. I believe you are going down the right path, but it’s something that will take time.

I backup important files to my local NAS or directly store them on the local NAS.

This NAS then backs up to an off site cloud backup provider BackBlaze B2 storage.

Finally, I have a virtual machine that has all the same directories mounted and backs up to a different cloud provider.

It’s not quite 3-2-1… but it works.

I only backup important files. I do not do full system backups for my windows clients. I do technically backup full Linux vms from within Proxmox to my NAS…but that’s because I’m lazy and didn’t write a backup script to back up specific files and such. The idea of being able to pull a full system image quickly from a cloud provider will bite you in the ass.

In theory, when backing up containers, you want to backup the configurations, data, and the databases… but you shouldn’t worry about backing up the container image. That can usually be pulled when necessary. I don’t store any of my docker container data in volumes… I use the folder mapping from host to directory in docker container… so I can just backup directories on the host instead of trying to figure out the best way to backup a randomly named docker volume. This way I know what I’m backing up for sure.

Any questions, just ask!

[-] bigDottee@geekroom.tech 2 points 3 days ago

Somehow, I have never seen this list… and easily over half of those projects I’ve never heard of but could add some great functionality to my home. Thanks for posting it!

[-] bigDottee@geekroom.tech 1 points 3 days ago

I’ll pitch in here.. so website dns (porkbun) is configured to point to your home in, great!

2 things need to happen.

  1. Your router needs to expose ports 80 and/or 443 for HTTP and HTTPS access. If you are only doing HTTPS then 80 isn’t really necessary. These ports need forwarded to a reverse proxy, such as NGINX or Apache.
  2. You need to have a reverse proxy setup that can translate the domain name that is being sent to a local IP address:port. You should be able to find some relatively simple/easy reverse proxy configuration generators online to help you get that setup. You’ll want to setup SSL certificates while you’re at this too. Look up “nginx certbot lets encrypt” and that should get you pointed in the right direction.

Once those are done, in theory, you should be able to access your website outside of your home network using your domain name.

[-] bigDottee@geekroom.tech 3 points 3 days ago

I’ve just started to delve into Wazuh… but I’m super new to vulnerability management on a home lab level. I don’t do it for work so 🤷🏼‍♂️

Anyways, best suggestion is to keep all your containers, vms, and hosts updated best you can to remediate vulnerabilities that are discovered by others.

Otherwise, Wazuh is a good place to start, but there’s a learning curve for sure.

[-] bigDottee@geekroom.tech 1 points 3 days ago

So you definitely still need a local DNS running. AdGuard Home, PiHole, Technitium, Hell your router probably has a local dns server you can enable and add some entries to it.

But once you setup a dns server, you’ll need to point all network clients to the dns server address so it can start resolving the web address to the ip in question.

[-] bigDottee@geekroom.tech 1 points 3 days ago* (last edited 3 days ago)

I cover most of what services I’m running in my own post looking for assistance recently.

https://geekroom.tech/post/242

5
Lemmy Formatting help (geekroom.tech)
submitted 4 days ago* (last edited 3 days ago) by bigDottee@geekroom.tech to c/FAQs@geekroom.tech

Borrowing from @chaorace@lemmy.sdf.org's post and @pH3ra@lemmy.ml's post:

For anyone interested, here’s the Lemmy markdown configuration. As you can see, Lemmy’s website UI supports the full commonmark spec (tutorial / official spec), plus a bunch of extensions. I don’t think anyone’s fully documented these yet, so I’ll try doing so below. Apologies in advance to mobile users, this is probably gonna get ugly (see included image links for how it should look):

  • URL autolinking (plaintext URLs automatically turn into links)
  • Lemmy autolinking:
    • NOTE: No link will be inserted if the viewer is browsing an instance where the resource is not yet known/blocked
    • Communities: [!fediverse@lemmy.ml](/c/fediverse@lemmy.ml)!fediverse@lemmy.ml (link ref: /c/fediverse@lemmy.ml)
      • Kbin-style is also supported: /m/fediverse@lemmy.ml → /m/fediverse@lemmy.ml
    • Users: /u/chaorace@lemmy.sdf.org → /u/chaorace@lemmy.sdf.org (link ref: /u/chaorace@lemmy.sdf.org)
  • Typography substitutions:
    • (c) → ©
    • (tm) → ™
    • (r) → ®
    • +-→ → ±
    • ... → …
    • --- → —
    • -- → –
    • ???? (>= 4x) → ???
    • !!!! (>= 4x) → !!!
    • horizontal rule (line between paragraphs) ---

  • **bold**bold

  • *italics* OR _italics_italics

  • # Headings → # Headings (1 # for level1 heading, up to 5 #'s; must be at start of new line) [requires space between the #'s and the text]

  • [Link text](https://link.com/)Link text

  • Github-flavor Markdown extensions:

    • Tables
    • Strikethrough: ~~example~~ → ~~example~~
  • Subscript/Superscript:

    • Sub: example~sub~ → example~sub~
    • Super: example^super^ → example^super^
  • Footnotes:

    • Inline part: example[^notename or a number] → example[^1]
    • Bottom part: [^1]: My reference (must be placed at VERY end of post to work.)
  • Ruby Text: {example base text|example ruby text} → {example base text|example ruby text}

    • “Ruby” is an html-ism for special pronunciation aids which frequently appear within young person’s media where the language includes non-phonetic characters (e.g.: Chinese characters)
    • Japanese Furigana example: {凄|すご}い!→ 凄い!
  • Spoilers:

    
visible text hidden part example

visible texthidden part example

  • Code blocks:

`inline code` → inline code

code block:

 ```
 println(“Hello World!”)
 println("Line 2")
 ```

becomes

println(“Hello World!”)
println("Line 2")

OR

4 spaces at beginning of each line to be included in the code block becomes

this is a code block
line 2

Code Block Syntax Highlighting!

When after using the three backticks to start a code block, specify the language.

Rust:

    ``` rust
    // This is the main function
    fn main() {
        // Print text to the console
        println!("Hello World!");
    }
    ```

becomes:

// This is the main function
fn main() {
    // Print text to the console
    println!("Hello World!");
}

No language specified, defaults to "C" language:

// This is the main function
fn main() {
    // Print text to the console
    println!("Hello World!");
}

Text:

    ``` text
    // This is the main function
    fn main() {
        // Print text to the console
        println!("Hello World!");
    }
    ```

becomes:

// This is the main function
fn main() {
    // Print text to the console
    println!("Hello World!");
}

Python:

    ``` python
    // This is the main function
    fn main() {
        // Print text to the console
        println!("Hello World!");
    }
    ```

becomes:

// This is the main function
fn main() {
    // Print text to the console
    println!("Hello World!");
}

Finally:

If I want to write a character that will normally be interpreted as any of the above, I can escape the character with a backslash → \ ... So you can write something like \^this → ^this

[^1]: To make this footnote, I used the formatting defined above, preceding this text with "[^1]:"

4

Hello! I want to personally welcome you to GeekRoom.Tech. I seek to make this Lemmy instance a fantastic place for anyone and everyone that enjoys technologies of many different kinds.

GeekRoom.Tech is meant to provide a safe haven for individuals to have discussions without fear of censorship and fear of being banned for asking what others believe to be silly questions.

Everyone starts somewhere in their technology journey. I want to be sure that everyone is respectful in their discussions and understands that others may not have the easiest time understanding advanced topics as easily as you.

If you have any questions, please reach out to myself or any other mods or admins for assistance. We seek to enrich your brains and find ways to help you achieve your technological goals!

Email Contact: Contact@GeekRoom.Tech

Mastodon: @GeekRoomDotTech@Mastodon.Social

1
submitted 4 days ago* (last edited 17 hours ago) by bigDottee@geekroom.tech to c/HomeLab@geekroom.tech

Over the last year, I have been trying to work through getting VLAN's setup and operational in my Homelab... so that I can not only experiment, but also to start segregating services from PC's and putting things like IOT devices and Guest devices on their own VLANs.

I come to you today, with a working solution for my own homelab. This post is mainly just to discuss the current state of my homelab, but also look for suggestions on how you would make any changes to my layout.

Current Hardware:

1x TP-Link Omada TL-SG2428P (my core switch)

3x TP-Link Omada TL-SG2210P (leaf switches on different floors)

2x HP EliteDesk 800 G4 (i5-8500T 6C6T, 32GB DDR4) aka Hyper2, Hyper3

2x HP ProDesk 800 G4 (i5-7500T 4C4T, 32GB DDR4) aka Hyper5, Hyper6

Whitebox server (i7-4790k, 32GB DDR3) aka Hyper4

TrueNAS whitebox (AMD FX-6350 6C6T, 32GB DDR3 ECC) aka TrueNAS

VLAN's:

50 Infrastructure

51 KVM's

52 VPN's 

53 Jumpboxes

60 Trusted

70 IOT-Secure (No internet access)

71 IOT-Insecure (Internet Access)

99 Guest

1 LAN (default)

All servers are running Proxmox as my hypervisor. Proxmox nodes are NOT configured with VLAN and currently only reside on LAN. Haven't made the move to put those on VLAN ... when one of them hosts the system that controls traffic to those VLAN's... so thinking just leaving them on LAN and limiting access.

VM's & Containers:

Hyper2:

Ubuntu VM (Frigate) VLAN 50

Ubuntu VM (RDT-client) VLAN 50

Hyper3:

Ubuntu desktop VM (crashplan) VLAN 50

Ubuntu VM (Immich, Immich Power Tools, Remmina, Tautulli, Vikunja, Mealie, Paperless-NGX, Linkwarden) VLAN 50

Hyper4:

AdGuardHome LXC VLANs 1, 50, 60, 70, 71, 99,

WireGuard LXC VLAN 50

Windows Server 2022 vm VLAN 1, 50

OPNsense VM (DHCP)

Ubuntu VM (*arr stack, Adguard-Sync, Uptime Kuma, Gitea, Minecraft Bedrock) VLAN 50

Ubuntu VM (NGINX) VLAN 50

Ubuntu VM (OpenVPN) VLAN 50

Hyper5:

MQTT LXC (for home assistant) VLAN 50

Ubuntu VM (Home Assistant focused: MariaDB, Zigbee2MQTT, RTL-433; Nextcloud [app, redis, mariadb]) VLAN 50

Ubuntu VM (Prowlarr, NZBGet, QBittorrent, flaresolverr) VLAN 50

Home Assistant OS VM (HAOS) VLAN 50

Ubuntu VM (Wazuh) VLAN 50

Hyper6:

AdGuardHome LXC VLANs 1, 50, 60, 70, 71, 99,

WireGuard LXC VLAN 50

Windows Server 2022 (AD, DNS) VLAN 1, 50

Ubuntu VM (Omada controller) VLAN 1, 50

Ubuntu VM (nothing running yet) VLAN 50

Ubuntu VM (Plex, ErsatzTV, Maintainerr x2, Immich Machine Learning) VLAN 50

Ubuntu VM (OpenVPN) VLAN 50

This all works pretty well currently. I've been doing some more research and finding that folks have done things a bit different with their server VLAN's... and just trying to get opinions on what would be better. I recognize that currently, my reverse proxy is in the Infra VLAN, which would be fine... but it's the same RP that is used for public access... which has me thinking that it should go in the DMZ OR I should setup a second RP (but introduces an issue with keeping TLS Certs in sync ...

Tear my setup apart... let me have it. What suggestions do you have? What am I doing wrong? What am I doing right (if anything)?

[-] bigDottee@geekroom.tech 75 points 5 days ago

Well... if you don't need to get rid of the files and continue to have space... then great. No matter what, you are applauded for seeding for when the inevitable lone pirate comes sailing by wanting to loot your booty.

view more: next ›

bigDottee

joined 4 days ago
MODERATOR OF