• 13 Posts
  • 409 Comments
Joined 2 years ago
cake
Cake day: December 28th, 2023

help-circle
  • None… I tried with my Dad and even add some cool tools in additions (youtube dlp frontend). 2 days later he just reinstalled Windows on top because: “My USB audio dongle didn’t worked”.

    Guess what? I didn’t either on Windows and was an external peripheral issue, not an OS/driver issue.

    But he also said:" Too complicated for me" 🤦‍♂️

    Linux mint debian edition.
















  • This seems cool and is not off topic at all :) It does seem to answer to my “question” and seems a nice thing to have :) However, someone suggested Terraform but after some reading it’s not the tool I was looking for… Ansible seems more the like I guess ! But coolify seems also very interesting ! Different and more similar to my current setup.

    I think Terraform, Ansible, Tofu are the next generation tool to solve my current issue… They are declarative tools ! But I don’t want to rush things and have another dead setup lying arround !

    Thanks for your reply !

    Edit: There’s also an alternative https://github.com/Dokploy/dokploy in case you didn’t know :) If you know, can you tell me why you choose on over the other?



    1. Yeah I guess I have made it more complex. But what hard links allow me to achieve is to save disk space while still working on the file without changing the original one. Imagine I have to copy my files to sonarr, have a copy in my torrent directory and also a backup on an external disk… That’s alot of space ! This may be a simpler solution, but only If you have money to spare on disk space. Yes, it’s “cheap” when you have a bank account and money lying around, but that’s not the case for everyone :/. I think the ARR* stack works similarly and works with hard links !

    2. Oh… never heard of Terraform, will have a look, thanks for the pointer !

    Hard links are files…

    I guess so, but files are just links pointing to inodes ? :) Sorry If I’m wrong here, and please give me the proper knowledge If you are willing to share :)

    Edit: After some reading, I think Ansible seems a better fitting. Terraform is more for creating infrastructures while Ansible to manage them and configure them?


  • (Thanks to darkan15 for explaining that).

    I have to look at his answer to have a better understanding :P

    The diagram would be useful. Considering that rn I’m losing my mind between man pages.

    I’m working on it right now :) I’m a bit overwhelmed with my own LAN setup, and trying to get some feedback from other users :P

    As for the book… I can’t accept. Just give me the name/ISBN and I’ll provide myself. Still. Thanks for the offer.

    Good. If you have the money to spare please pay for it otherwise you know the drill :) (Myself I’m not able to pay the author so it’s kinda hypocrite on my end… But doing some publicity is also some kind of help I guess?)

    Demystifying Cryptography with OpenSSL 3 . 0 by Alexei Khlebnikov <packt>

    ISBN: 978-1-80056-034-5

    It’s very well written, even as a non-native it was easy to follow :). However, let me give you something along the road, something that will save you hours of looking around the web :) !


    Part 5, Chapter 12: Running a mini-CA is the part you’re interested in and that’s the part I used to create my server certificates.

    HOWEVER: When he generates the private keys, he uses the ED448 algorithm, which is not going to work for SSL certificates because not a single browser accepts them right now (same thing goes for Curve25519). Long story short, If you don’t want to depend on NIST curves (NSA) fall back to RSA in your homelab ! If you are interested in that story go to p123:

    Brainpool curves are proposed by the Brainpool workgroup, a group of cryptographers that were dissatisfied with NIST curves because **NIST curves were not verifiably randomly generated, so they may have intentionally or accidentally weak security. **

    Here is a working example for your certificates:

    Book:

    $ mkdir private
    $ chmod 0700 private
    $ openssl genpkey \
        -algorithm ED448 \
        -out private/root_keypair.pem
    

    But should be:

    $ mkdir private
    $ chmod 0700 private
    $ openssl genpkey \
        -algorithm RSA \
        -out private/root_keypair.pem
    

    You have to use RSA or whatever curve you prefer but accepted by your browser for EVERY key you generate !


    Other than that, it’s a great reading book :) And good study material for cryptography introduction !