Security through what now?

Well, I guess it is obscure… Though only because the number of people who have a full grasp on how the code works is highly limited.

Hey there. I don’t have anything to say which is actually helpful. I’m just here to say that you are throwing yourself into the deep end a bit since authentication / access control is actually one of the more advanced topics there is.

Once you do get it figured out, you’ll look back and it’ll make sense. I don’t use Cloudflare services for my projects, so I can’t actually help you. Auth/access control settings vary highly depending on what you chose to use (cloudflare, tailscale, netbird, etc),

Having skimmed over the other guy’s PDF, I’ll say that where Cloudflare provides instructions, follow those over his steps 1 and 5 (since if anything will be outdated and not work/no longer recommended, those would be it), but I otherwise don’t have complaints. As with everything computers, everyone has their own way of doing things which they insist is the correct way. I’d do things very differently, but I also won’t say there’s anything wrong with their way.

Mine is publicly exposed using the standard nextcloud:stable-apache docker container, with nginx (past) / traefik (present) handling TLS termination, but not otherwise adding additional security measures.

It’s been this way for several years and I’m yet to have issues, but it’s certainly not bulletproof since a critical vuln in Nextcloud could pwn it. That just hasn’t happened.

I don’t have hard numbers, but my understanding is that in general, Proton is more receptive to hacks which get stuff working, or working faster, but that aren’t proper solutions. WINE has a greater preference toward correctness, so compatibility is a bit worse, as is performance.

You could flip the breaker off for the well to find out.

Once there’s no more pressure from the well, if the irrigation system keeps pressure, you know wherever that water comes from, it’s not your hole.

For some reason, there’s a weird 8TB 5640 RPM Blue that’s CMR. I have one.

Dunno about the rest for sure but I think they’re all SMR (except maybe 1TB).

In my experience, all that truly matters is that the drive is on the right recording technology (CMR, SMR, and maybe someday HAMR will be in the hands of us consumer plebs).

There are two reasons to care:

1. SMR has horrible write speeds. Data can read off the drive at the same speed as a CMR drive, but writes will be unbelievably slow.
2. More importantly, for some reason or another (I assume the write speed), SMR drives might get rejected by ZFS. There was some pretty loud talk about it several years ago, but I haven’t heard much since and do not know if this is still true (I assume it is).

If your use case involves only ever writing a small amount of data, point 1 doesn’t matter very much. If you’re using software which doesn’t care about CMR/SMR, point 2 doesn’t matter very much.

If either point 1 or 2 matter to you, then you should go with CMR drives. If neither matter, you may go with SMR drives if you so chose.

PS: Both WD Blues and Seagate Barracudas are (often) CMR. Seagate consult this page: https://www.seagate.com/products/cmr-smr-list/. WD lists SMR/CMR on their website when you look up the part number.

In my home NAS, I use ZFS and have ran all sorts of drives through it. It’s ran old consumer drives I’ve pulled out of scrap hardware, it’s ran NAS-grade drives, and it’s ran enterprise-grade drives… And since they’re all CMR, I can’t say there was much if any difference at all.

The only difference between the tiers that I find interesting/useful is the number of metrics you can pull off the drive. The fancier ones spit more metrics which could help you detect signs of failure earlier, but that requires knowing what to look for.

So at the end of the day, as long as the drive’s recording technology works with your software, you’re fine.

RE: External drives (seen in a comment)

External drives can be a great way to get disks for cheap, however they are loot boxes. What drive you get inside of them depends on the capacity, the manufacturer, and pure luck. You can generally look up the model number and see what people have said is inside, then hope you get whatever they got. (Generally, manufacturers don’t often change what they put in there, but they do change over time.)

I used to use them, but found that since I’m only hosting for myself, I just don’t benefit much (if at all) from their services. The only thing that was actually doing any amount of work was Tunnel (similar to you, I can’t forward ports).

Their service decrypts/snoops on your traffic by nature, and while my traffic is mostly just updating todo lists, taking notes, and backing up photos, I also sync my keepass database and in general just don’t want my data snooped on.

I’ve since rolled my own Tunnel equivalent with frp on a VPS and have completely dropped CF.

You’re good in that there are no immediate problems with that setup. I run a largely similar setup, have run it for years, and have never had issues.

You can always add more security layers if desired, but from my personal experience and with my risk tolerance, I haven’t personally found it necessary.

You know Google drive? You know how it doesn’t work when the internet is out? You know how we live in rural USA so the internet is out every other day?

Yeah that computer in the corner is my own Google drive that still works when the internet is out.

Only needs some hammering and zip ties and it’ll be good as new.

Last I checked, EVs also have tires, so probably not the former. :P

The 2 is a bit dubious, but it looks just like jpegificaion to me.

They’re okay for tasks which are reasonably a single file. I use them for simple Python scripts since they generally spit out something very similar to what I’d write, just faster. However there is a tipping point where a task becomes too complex and they fall on their face and it becomes faster to write the code yourself.

I’m never going to pay for AI, so I’m really just burning the AI company’s money as I do it, too.

I can sometimes tell what county (not country) I am in from differences in the design of street signs (mostly the street name signs at stop lights), changes to the look of highway overpasses, and whether or not Flock cameras outnumber people.

I ran a Tor relay on one of my spare servers for a while, and my god did that thing get port scanned. Even two years after I stopped hosting the relay, it was still getting pinged every 5-10 seconds (while my other servers tend to get pinged “only” once ever 20-30 seconds).

It even seems to have a floor that isn’t worthless! Fuck yeah!

I work with/in (giggity) indie devs. One dev I work with has a slack bot spamming out sales data daily which contains breakdowns by platform.

For his indie game, across the last 7 days it’s roughly 94.3% Windows, 2.0% Mac, and 3.7% Linux. The game has native builds for all 3 platforms, including Mac’s ARM chips.

I use Nextcloud, but as you said it’s a bit big, and with each update it’s slowly turning into more of the entire G-Suite.

I’ve used filebrowser, but be aware that until just a few days ago, it gave out access to a shell. Even with that turned off, I’d be very weary of allowing access from out of the VPN. I had a server pwned with filebrowser appearing to be the vector, and to my memory console access was disabled for the account most likely breached.

Lemmy only. No other social media, be it Twitter, Instagram, or any federated/FOSS alternative.

I still read some Reddit, but only signed out and I certainly don’t post.