• 0 Posts
  • 9 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • The other poster gave you a lot. If that’s too much at once, the really low hanging fruit you want to start with is:

    • Choose an active, secure distro. There’s a lot of flavors of Linux out there and they can be fun to try but if you’re putting something up publicly it should be running on one that’s well maintained and known for security. CentOS and Debian are excellent easy choices for example.

    • Similarly, pick well maintained software with a track record. Nginx and Apache have been around forever and have excellent track records, for example, both for being secure and fixing flaws quickly.

    • If you use Docker, once again keep an eye out for things that are actively maintained. If you decide to use Nginx, there will be five million containers to choose from. DockerHub gives you the tools to make this determination: Download number is a decent proxy for “how many people are using this” and the list of updates tells you how often and how recently it’s being updated.

    • Finally, definitely do look at the other poster’s notes about SSH. 5 seconds after you put up an SSH server, you’ll be getting hit with rogue login attempts.

    • Definitely get a password manager, and it’s not just one password per server but one password per service. Your login password to the computer is different from your login to any other things your server is running.

    The rest requires research, but these steps will protect you from the most common threats pretty effectively. The world is full of bots poking at every service they can find, so keeping them out is crucial. You won’t be protected from a dedicated, knowledgeable attacker until you do the rest of what the other poster said, and then some, so try not to make too many enemies.



  • You are correct that a reboot will trigger a full rescan. I’m always on the lookout for better sync. I just don’t think it’s out there right now for easy bidirectional sync.

    Basically, if you want to set and forget, Syncthing is the best option. If you want more control, you’ll need to look into setting up rsync scripts or similar, which will at least better let you control how often to sync.


  • For me, the worst part of setting up some new distro or service is when it’s done and everything works. Then it just… Sits there. Working. Usually at some task I don’t need very often. Very anticlimactic and boring. Then I have to find some other new thing to try, which is why my HTPC has been through like 4 distros in the past year.



  • It’s so difficult to try and have this nuanced take with people. I’m NOT trivializing or saying you should "just suck it up " I’m suggesting that you treat mental illness like an illness: Seek treatment, follow professional advice, and be honest with yourself and the professionals you’re seeing. If I broke my leg, but refused to get a cast because I felt it was really a problem with my arm, while lying to every doctor I meet about what happened, people would get very sick of my nonsense in short order.



  • I just switched my gaming PC to Linux yesterday. Well, switch is strong, I still have Windows in case I need to go back.

    It’s come a long way, though. I started using Linux desktop around 2000, and it was not a fun experience. I tried again in 2019 with a System76 laptop, and it’s been just fine. My home theater/gaming PC was the last holdout.

    So far, it works great. Steam Link works, my games all seem to work, RetroArch is going strong. The only downside is Oculus support doesn’t seem to exist at all, so I might need to keep my Windows drive a bit longer just for VR.