• 0 Posts
  • 14 Comments
Joined 4 years ago
cake
Cake day: May 30th, 2021

help-circle





  • I’ve tried different approaches with fail2ban, crowdsec, VPNs, etc. What I settled on is to divide the data of my services in two categories: confidential and “I can live with it leaking”.

    The ones that host confidential data is behind a VPN and has some basic monitoring on them.

    The ones that are out in the public are behind a WAF from cloudflare with pretty restrictive rules.

    Yes, cloudflare suck etc., but the value of stopping potential attacks before they reach your services is hard to match.

    Just keep in mind: you need layers of different security measures to protect your services (such as backups, control of network traffic, monitoring and detection, and so on).


  • I like this thread :-)

    I have just checked off a long standing item in my backlog: implementing OIDC on at least two apps. I’ve used a remote keycloak instance for authention for my household and so far so good. Now I’ll try to understand the configurations a little better before take on other items on my backlog.








  • I was a pocketcast user for years, switched to antennapod a few months ago. Here’s what’s bothering me:

    • Antennapod has a weird separation between new episodes (inbox) and what you’re listening to now (queue). PC has that abstracted away where you only have to check one place for your podcasts.
    • There is no simple service to sync your subscriptions and listen progress. Gpoddersync is basically abandoned and the protocol lacks features. Hopefully this will change with openpodcastAPI, but they haven’t managed to secure funding yet.
    • I’ve been spoilt by having a server doing the heavy lifting of refreshing my podcasts. It’s a minor annoyance that I need to wait approx. 1.5 second per feed to refresh. It’s just the way it is.

    There are also things that antennapod does better:

    • chapters actually works in AP.
    • episode pictures also works in AP, PC only showed the static image of the feed.
    • search is just as good as PC.
    • its FOSS and hopefully resistant to enshittification (unless all producers go into a closed ecosystem like Spotify tried with their recent purchases of pod-studios).

    Best of luck from another pod-nerd.