• 1 Post
  • 23 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle




  • The trickier part here his connecting your domain to your raspberry pi and allowing the big internet to access it. You have a few options:

    • Set up dynamic DNS to direct your domain name to your (presumably dynamic) home IP address. Assign the rpi a static IP address on your home network. Forward ports 80 and 443 to that address. The world knows your home IP address, and you’re dependent on your router for security. No spam or DDOS protection.
    • Use a service such as cloudflare tunnel. You’re dependent on cloudflare or whoever, but it’s an easier config, you don’t need to open ports in your firewall, and your home IP address is not public. (I recommend this option.)

    Either way, don’t forget to set up HTTPS. If you aren’t dead-set on using nginx, caddyserver does this entirely automatically.



  • I have 113k images going back two decades. The screenshot above doesn’t include RAW files, with those included I’m around 2 terabytes of total storage.

    • Immich is in fact a photo album, and a damn good one at that.
    • Immich keeps google’s grubby paws off my photos. I don’t need or want anyone datamining every precious memory I have in order to modify my behavior to their benefit.
    • Immich shares photos between my wife and my phones.
    • Immich ensures that if I lose my phone, my photos aren’t lost.
    • Immich lets me easily re edit and re-export RAW files without creating duplicates or losing metadata
    • Immich lets me conveniently share photos with friends and family without requiring them to have an account anywhere.

    Mostly I self-host things when I want data synchronized between multiple devices, or I don’t want to lose it in the event I lose the device it was created on.

    Also, like, phone screens are tiny and typing on them is terrible? Why would you want to do everything on your phone?








  • Ok but is there room for the idea that your intuitions are incorrect? Plenty of things in the world are counter-intuitive. ‘docker-compose up -d’ works the same whether it’s one container or fifty.

    Computer resources are measured in bits and clock cycles, not the number of containers and volumes. It’s entirely possible (even likely) that an all-in-one container will be more resource-heavy than the same services split across multiple containers. Logging from an all-in-one will be a jumbled mess, troubleshooting issues or making changes will be annoying, it’s worse in every way except the length of output from ‘docker ps’



  • I disagree with pretty much all of this, you are trading maintainability and security for easy setup. Providing a docker-compose file accomplishes the same thing without the sacrifice

    • separate volumes for configuration, data, and cache because I might want to put them in different places and use different backup strategies. Config and db on SSD, large data on spinning rust, for example.
    • separate container for the database because the official database images are guaranteed to be better maintained than whatever every random project includes in their image
    • separate networks because putting your reverse proxy on a different network from your database is just prudent




  • traches@sh.itjust.workstoSelfhosted@lemmy.worldCloud storage/backup
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    6 months ago

    So there’s a storage protocol called “S3” (I wanna say it stands for simple scalable storage?), first created by Amazon for AWS. Many types of software, including backup programs, have been designed to use it as a storage backend. There are now many S3 compatible providers, last I looked the best value was backblaze B2.

    You need a backup program with end-to-end encryption, S3 compatibility, and whatever other features you like. I use restic but it’s CLI only, there’s also borg backup and many others.

    If you encrypt locally with a good key, you don’t have to trust the remote storage provider. They just see a bunch of meaningless noise. Just don’t lose the key or your backup is useless.