I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
Possibly. What i was hearing seemed more like some weird DB/code gremlin thing. But I dunno. Literally never run it.
Also i think the deployment type was invovled. Maybe it was a docker specific thing??
I’ve been seeing them everywhere.
Those self service terminal at autozone? Pi’s.
Multiple threads people have mentioned random crashing, DB issues and nonsense/useless log outputs that don’t help find a cause and just require you to restore from backup.
No way I’d consider it for business use.
After the stability issues I’ve heard. I wouldn’t even consider nextcloud for my family at this point.
I have a router, switch and older access point preconfigured and ready to just plug in.
I have some basic documentation and a short list of folks to call, along with admin creds should anything need untangling.
But mostly it’s a rip and replace network. Ditch plex and get cable.
Google workspace is basically just gmail. You can pay someone to migrate it or abandon.
My job pays for a visual studio dev kit that gets windows server keys. Though I may move to samba 4 And just drop wsus entirely
Straight up wsus with a nightly script to keep it from fucking itself up.
Plex, nzb/sonarr/lidarr/radar/, homeassistant, AD, vpn, teamspeak, lemmy, a blog, wifi controller, cert authority, Pi-hole, mail relay, all data/files etc, backups of email from workspace, zabbix for monitoring, miniflux, windows update cache, quicken server
Probably more.
That’s probably my biggest complain tbh.
My entire library can fit on my phone. No reason to stream. If my home internet has problems I can’t listen to music? Or if I’m out in the sticks (often enough) I suddenly find out what’s actually cached/downloaded and what isn’t solely because it’ll skip entire albums or just fail to start songs etc.
Ive been increasingly considering Jellyfin. I really only use plex for OTA tv/libraries on roku’s 99% of the time
Rarely do I use mobile or others. But plexamp is like 99% mobile too.
Im betting lunch they are losing market to jellyfin and the free finamp.
Plexamp has been kinda stagnant for a while and can be finicky on lossy connections (ie: cell service)
Oooh. Thanks for sharing this one.
Yeah. My goal was to service x number of users for x budget (~50/month) and not solicit donations. My guess was that would be 50-100 at most. But like I said, then the xss stuff happened and I just kinda balked.
50% of the reason I built the instance was to be in control of uptime and updates since others were sporadically down anyhow. I’m more a “take my destiny into my own hands type”
That said, the nice thing of this setup is that you can run your own instance and be just as involved.
It sounds like you were better setup than most that had no idea and had to figure out scale out strategies.
Seems the culture is still for folks to gravitate to massive instances, some of which aren’t equipped to handle the load (this includes kbin too)
As an aside, I did similar and have a couple vps that are like….50 bucks a month but with the vulns I just never opened registration or made a push to onboard users. So I’ll be moving my instance to a nano linode or something. I’m also increasingly happy it’s just me on it.
I need to check out immich it sounds like.
I looked at photoprism. DIdnt really excite me but I have about 20k unsorted photos because of the way dsphoto does uploads and I dont have time to sort them.
I dont even really care about folder structure as much as geo data/time date/event style sorting.
A synology NAS and dsphoto. Its a mess.
I have considered photprism, never set it up though (other things got in the way).
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.