Essentially you need a load balancer hosted somewhere that the traffic hits before getting routed to one of the 2 servers. That could be a VPS running Traefik if you prefer that.
Alternatively you could both run something like IPFS and run the static site on that, but anyone accessing the site would either need IPFS installed, or use a gateway hosted somewhere (Cloudflare has a public for example).
It’s kind of depressing how fragmented the Matrix ecosystem is, a bunch of clients but none seem to support everything together, servers that are slow and bloated, and don’t support super basic maintenance tasks like cleaning up old stuff, etc…
Maybe? Do those folders have anything you need in them?
It can be anything you want.
How you change it depends on the specific server you’re using, I use SFTPGo for a webdav server and when I create a new user it just asks where the data should go.
Software RAID is generally better in every way, also no hardware to fail.
Keep multiple reliable (and tested) backups, if something fails restore a backup.
Don’t rely on any storage, RAID or anything else to be recoverable when something goes wrong.
Backrest is also great, just a nice webUI for Restic.
Sure:
Proxmox backs up all my VMs/CTs nightly to the proxmox backup server I run as a VM with an external HDD attached to it. This keeps around 30 versions with a retention policy so I can go back pretty far if needed. These are full bootable images and include everything.
Restic (using Backrest to manage it), runs on any VMs/CTs with critical data, and backs up to Backblaze B2 every night as well, this is a more limited choice of the critical files that I’d need. Similar retention policy as the proxmox backup.
With both I try and do some full restores every month or two and test things out.
I use watchtower to auto update everything.
Anything that needs a specific version (Postgres mostly) is pinned to the major release.
Stuff occasionally breaks, but I have backups for that reason (if you don’t, set that up now before anything else, they should be running daily at least and you should have 2 types of backup minimum).
FolderSync is a good alternative, more battery friendly too!
Outgoing should already allow everything, so no need to specifically allow it.
Make sure you’re creating a block rule specifically on outgoing in that case.
Is wireguard incoming or outgoing from the machine you’re trying to block it on?
Do you have something listening on port 52038 that will respond to a port scan? If not it will report as closed.
Annoying that it doesn’t give more details!
I think you might need to add your site to google search console to see more details on specifically why it was listed as unsafe.
Some info here: https://web.dev/articles/use-search-console
Probably due to their status as a privacy friendly way to have a domain they get a lot more fraud and scams using their services, they’re probably dealing with tons of this stuff daily. Being flagged by google safe browsing most of the time means something isn’t right, but I’m not sure what they would really be able to investigate on their end.
Have you figured out why you were flagged? I’ve seen similar stuff from self hosters before where they have a compromised service exposed to the internet and didn’t realize it.
Does it transcode the uploads for better remote viewing like Peertube does? I can’t tell from the github page. This looks a lot simpler to run than peertube since all I really do is share clips with friends.
I don’t think sharing 100Mbps+ 3440x1440 files from shadowplay is going to go well when sharing to friends that have more limited internet speeds.
How would find out about anything if no one posted their projects anywhere?
Tunnel just DNS over wireguard in that case, instead of using it as a default gateway and tunneling all traffic.
Why so angry?
This lets you share photos without directly exposing Immich to the internet.
I don’t see the point in getting so worked up over someones project they made and decided to share, it’s not like you’re being forced to use it.