Proton cyberwolfie • 6 days ago • 100%

I've been using the web clients of Proton Mail and Drive for a long time in Librewolf. Today it suddenly is stuck on the "Loading Proton Mail..." screen, getting no where. Still works in regular Firefox. Tried disabling both uBlock Origin and NoScript for the tab in case some settings there suddenly were changed, but did not help. This is very frustrating. EDIT: After a second reboot it now works again. Unsure why it took two reboots, I'm glad it works.

Godot cyberwolfie • 3 weeks ago • 100%

I am running Godot 4.3 on Linux on a laptop with an NVIDIA RTX3050 Ti latop that I can enable through NVIDIA prime-select. When I have this enabled (not on-demand mode), Blender and games launched through Steam have no issue using the NVIDIA card, but Godot still uses the integrated Intel chip. Is there an easy way to force Godot to switch device? EDIT: I didn't get the Flatpak working, but instead running the executable downloaded from godotengine.org, it now works.

Linux cyberwolfie • 2 months ago • 96%

I want to mirgrate my Nextcloud instance from a VPS to server in my home. I run the Nextcloud AIO Docker container, which uses Borg backup. The backup repo is about ~70 GB. How would I best go about transferring it? Is using scp a good solution here (in combination with nohup so that I don't have to keep my ssh session active)? Or is there some other best practice way of doing this?

Linux cyberwolfie • 2 months ago • 97%

I switched to Linux about 1.5 years ago now when replacing my old Macbook Pro with a Tuxedo Infinity Book. I am super happy with the transition, and for the most part my digital life has severely improved as a result of it. There's one thing in particular though that I haven't fully grasped or understood despite all the talk about it, and that really has mostly caused confusion on my part, and that is Xorg/X11 (I don't know the difference...) vs. Wayland. I started out with Tuxedo OS 1 and 2 running KDE Plasma 5.x.x, and thus have been on X11 for the most part since switching to Linux. I never dared switching to Wayland myself. However, they somewhat recently started offering optional upgrades to Tuxedo OS 3 running KDE Plasma 6 where Wayland is the default, and I took the plunge. The only real difference I noticed was small annoyances that I had to fix. Glitching windows running on XWayland and having to configure some `.desktop`-files to force apps to launch natively in Wayland. Apps not showing the correct desktop icons but the generic Wayland logo instead, making Alt+Tabbing a bit more difficult because it is harder to tell applications apart. Annoying smooth scrolling (I don't want scrolling to have as much friction as polished ice) activated in all kinds of applications that I seem to have to turn off individually. Nothing breaking (though I haven't dared booting with my Nvidia dGPU yet in fear of breaking something irreversibly...), but I haven't noticed any improvements either, and I find it a bit frustrating not knowing where to make the necessary changes and always having to search for it seemingly on a case by case basis. Now for instance I was updating FreeTube to a new version, and the flags I previously added to the ́.desktop'-file suddenly doesn't work anymore (`--enable-features=UseOzonePlatform,WaylandWindowDecorations --ozone-platform-hint=auto`). The application won't launch unless I remove them, but then it launches under XWayland instead. Not that I have any issues so far running it like that, but I guess I would prefer to run everything natively in Wayland if I can.

Privacy cyberwolfie • 4 months ago • 85%

I am currently in the process of finally getting rid of my Meta-account. In the process I have requested data extraction. The media stuff was made available pretty quickly, but the data logs are still being processed. Does anyone know what data they actually contain, and whether there's any point in waiting for it? The reason I ask is that I also recently got a notification saying that will soon train their AI-model on my data which they will use the "legitimate interest" bullshit to do. I want to have my account deleted by the time this will be phased in (towards the end of June). So now I am in the dilemma of waiting for the data logs to complete (which I don't know how long will take) or just delete my account in hopes that it will be purged before the AI-stuff goes into effect. I am unable to find out exactly what these data logs consists of and whether there is any point in keeping onto them for whatever reason. Now, whether I can trust that they actually delete the data is another matter, but at least I would've done what I can, and they would break the law if the retain the data after my deletion request (under GDPR).

Privacy cyberwolfie • 5 months ago • 96%

I have a specific issue I want to solve right now, but the topic is phrased more generally as I would love the answer to this as well. But this might be an XY-problem because of this, so here's the actual problem I want to solve: I am using LibreWolf as my main browser, and it has WebGL disabled by default to avoid fingerprinting. I would like to keep it this way, but I am currently also making some internal tools for myself that requires WebGL (map renders with Plotly in Dash). Is there a way to tell LibreWolf to enable WebGL only for specific sites, so that I don't have to manually toggle this when I want to look at my maps? My initial thought was that this could be solved with a site-specific about:config.

Open Source cyberwolfie • 6 months ago • 93%

I have previously written a lot of code that is hosted on a public repo on GitHub, but it never had a license. It was written as part of my work while working for a non-commercial academic entity, and I would like to add a license before the link to the repo will be included in something that will be made public, potentially attracting one or two visitors. This leaves me with a couple of questions: 1) Can I just add a license after the fact and it will be valid for all prior work? 2) Do I have to make sure the license is included in all branches of the repo, or does this not matter? There are for instance a couple of branches that are used to freeze the state of code at a certain time for reproducibility's sake (I know this could be solved in a better way, but that's how it is). 3) I have myself reused some of the code in my current work for a commercial entity (internal analysis work, only distributed within the organization). Should this influence the type of license I choose? I am considering a GPL-license, but should I go with (what I believe to be) a more permissive license like MIT because of this?

Linux cyberwolfie • 6 months ago • 90%

I've been having some issues with my network card on my new Minisforum UM690S. The issue is related to both WiFi and Bluetooth, but seeing as I have now a cabled connection for internet (and it will stay that way), I am really just in need of solving this for the Bluetooth-issue. I've been trying to figure out how to solve this using `iwconfig` and `hciconfig`, but so far I am coming up empty with a concrete solution. The problem: The Bluetooth signal strength seems to be very poor. The computer is in a cupboard under my TV, with a wooden panel blocking the line of sight (this will need to stay closed). I use a Bluetooth keyboard with mousepad, and otherwise I connect game controllers when I want to play games. If I am close enough to the machine, especially the controllers work just fine while the keyboard is a bit wonky, but when I am in my couch (about 3 m / 10 ft away), the keyboard stops working and the game controllers are behaving mad. There will be many lines in `dmesg` reporting from the controller that says something like "compensating for 27 dropped IMU reports". This is a big problem for me, because the computer's main function is as an entertainment station where I will spend 99% of my time using the computer in the couch. The keyboard has been used with no problems with a previous computer at the same distance, never had any issues with it then. I also had a similar issue with my WiFi - when the computer was temporarily placed in a room further from my WiFi hotspot, the dl/ul speeds were extremely slow. Moving the computer much closer to the hotspot fixed this issue. I suspect the root of the issue is the low transmitting power, which for WiFi is reported to be 3 dBm (output from `iwconfig`). My laptop outputs 22 dBm, and the previous computer would output the same (if not 20 dBm). I don't understand the output that `hciconfig inqtpl` yields, but the number following "TX bytes" is significantly lower than on my laptop. I think I need to change this, but I am not entirely sure how and to what, and if it is even a good idea to mess around with this. Some relevant (?) output: Let me know if there are other output that can be helpful in diagnosing / fixing the problem. ``` $ inxi -Fxpmrz ... Network: Device-2: MEDIATEK MT7921 802.11ax PCI Express Wireless Network Adapter. driver: mt7921e v: kernel bus-ID: 03:00.0 ... Bluetooth: Device-1: MediaTek Wireless_Device type: USB driver: btusb v: 0.8 bus-ID: 5-3:2 Report: hciconfig ID: hci0 rfk-id: 0 state: up address: <filter> bt-v: 3.0 lmp-v: 5.2 ``` ``` $ hciconfig inqtpl hci0: Type: Primary Bus: USB BD Address: XX:XX:XX:XX:XX:XX ACL MTU: 1021:6 SCO MTU: 240:8 UP RUNNING PSCAN RX bytes:12353226 acl:217808 sco:0 events:496 errors:0 TX bytes:10815 acl:145 sco:0 commands:193 errors.0 ``` ``` $ iwconfig wlan0 IEEE 802.11 ESSID:"MyNetwork" Mode:Managed Frequency: 5.5 GHz Access Point: XX:XX:XX:XX:XX:XX Bit Rate=780 Mb/s Tx-Power=3 dBm Retry short limit:7 RTS thr:off Fragment thr:off Power Management:off Link Quality=70/70 Signal level=-32 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0 ```

Linux cyberwolfie • 7 months ago • 92%

I am trying to set up KDE Connect between a machine running Linux Mint and my Android-device. It does not show up, and it turns out I don't receive any response if I ping it, and I have the same issue trying to ping the machine from my Android device (from Termux). I've tried two different Android devices, but no luck. This is not an issue with two other machines I have. Both have KDE Connect setup and I can ping the phone just fine, and I can also ping from the phone. They're all connected to the same VLAN. I can also ping from this machine to the other machines. ufw is disabled. What could be the issue here? EDIT: Connection established suddenly after installing and running iptraf.

Linux cyberwolfie • 7 months ago • 97%

I'm trying to connect my Wiimote via Bluetooth to a new Minisforum UM690S running Linux Mint 21.3. I'm using [this post](https://wiki.archlinux.org/title/XWiimote) from the ArchWiki as a reference, and I am fully able to do this successfully on my laptop (running Tuxedo OS 2) and another mini-PC running Pop_OS! I use the Bluetooth Devices-menu in Linux Mint to do this. The Wiimote is discoverable, and I get a message saying it is connected. However, the four, blue LEDs keep flashing (although they keep doing so which indicates that there is some kind of connection), and it does not show up in the device list in e.g. Dolphin Emulator. I've installed `xwiimote`, but it is not listed when running `xwiishow list`. On my other machines, it instantly shows up here. I have tried this both with or without running `sudo modprobe hid-wiimote` prior to connection attempt. On my other machines, it is paired immediately after trying to connect. Then only the first light is turned on, and is permanent. If I try to right-click and click "Pair", I sometimes get a prompt to authorize the device with a PIN. This results in a line in the dmesg-output that reads `Bluetooth: hci0: ACL packet for unknown connection handle 3837`. The ArchWiki-article says that this would indicate that the wiimote-plugin is not included in BlueZ, but I have confirmed that it is by running `grep wiimote /usr/lib/bluetooth/bluetoothd` which yields the output `grep: /usr/lib/bluetooth/bluetoothd: binary file matches`. I am not sure where to continue troubleshooting now. Any ideas?

Technology cyberwolfie • 8 months ago • 64%

I just ordered a barebones [Minisforum UM690S](https://store.minisforum.de/en/products/um690s) and am currently trying to find some RAM-chips and an SSD to put in it, but apparently these RAM-chips were a bit more complicated than I had imagined. It runs an AMD Ryzen 9 6900HX, which on [its site](https://www.amd.com/en/products/apu/amd-ryzen-9-6900hx) says it supports DDR5-RAM up to 4800 MHz. On the Minisforum spec page, it also says that it uses the SODIMM form factor. So my questions: 1) Am I bound to 4800 MHz? Could I go for 5600 MHz and accept that I won't get to utilize the full power? Minisforum sales rep says I should get 4800 MHz, but I've also read that higher is OK, it is just wasted. In my case, I can get 5600 MHz cheaper. 2) The sales rep also specifically stated CL40. I can't see that elsewhere, neither on the AMD-site nor Minisforums spec page. From my preferred retailer, I can either get 4800 MHz with CL38, or 5600 MHz with CL40. But not the stated combo of 4800 MHz and CL40. What are my choices here? The specific chips I am considering are the Kingston FURY Impact-chips: - Kingston FURY Impact DDR5 4800MHz 32GB, CL38 (38-38-38) - Kingston FURY Impact DDR5 5600MHz 32GB , CL40 I am lost 🫠

Linux cyberwolfie • 9 months ago • 91%

I have a Python-package that calls Inkscape as part of a conversion process. I have it installed, but through Flatpak. This means that calling `inkscape` does not work in the terminal, but rather `flatpak run org.inkscape.Inkscape`. I need the package to be able to call it as `inkscape`. What is the best way to go about this?

Self Hosted - Self-hosting your services. cyberwolfie • 10 months ago • 100%

I am currently hosting Nextcloud on Linode using the AIO Docker container. I am very happy with how this works, but the running costs is more than I would like to spend on this. I am running a 4 GB Linode (anything less would cause severe lag in the Web UI), with 2x100GB block storage (one for data and one for the Borg backup). In addition, I pay to maintain backup images of the server itself. So I've been meaning to self-host this on a server at home instead, especially as I am looking to upgrade my media station to something more gaming friendly, freeing up a perfectly good mini-PC to host Nextcloud and other services. I've told myself that I am waiting for the Linux client of Proton Drive to arrive, so that I can utilize my 500 GB storage there to keep a synced copy of the Borg backup repo. I am not sure I am willing to wait for this anymore (who knows when that will be ready?), and thought that maybe something like [filen.io](https://www.filen.io) could be used in the mean-time, as I could get 200 GB there for €2/month. But I am open to other solutions as well. So here's the actual question: how would I best make sure I keep the backup repo safe so that I could restore it later if something went wrong? What would the ideal setup look like, including local and remote copies?

Android cyberwolfie • 10 months ago • 93%

I'm running Calyx OS (which for my device is on Android 13 at the moment). I would like to have better control over which Bluetooth-connections my phones attempts to connect to when enabled and which it does not. Right now, it seems to try to connect to whatever it was connected to last, even though it is no where near me. I have to wait for the connection to fail before I can start another connection. This eats up about 10-15 seconds every time I want to connect to a Bluetooth-speaker if it wasn't that last device I connected to. Is there any way of getting better control over this? Best case for me would be to define some devices it should always try to connect to and other devices that should require manual connection.

ObsidianMD cyberwolfie • 10 months ago • 100%

I'm in the process of changing my note taking from Standard Notes to Obsidian, and I am trying to figure out how I can sync notes between my laptop and Android device with the notes encrypted. I thought I had the solution by encrypting with Cryptomator and syncing the encrypted vault with Syncthing. But I realized that Cryptomator on Android does not work by mounting a new drive like it does on Linux, so Obisidian could not access the unencrypted files. So now I am not sure where to go from here. My requirements: - Notes are synced both ways between laptop and phone - Notes are encrypted at rest - No usage of external cloud services How do you go about syncing?

Linux cyberwolfie • 10 months ago • 90%

I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would've thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended? What I've done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default. Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?

Linux cyberwolfie • 11 months ago • 89%

This is not strictly a Linux-issue as I reproduce this issue under Windows 10 as well (but can not reproduce under Android or macOS), but I will be using Linux for any troubleshooting and I wasn't sure where else to post this. I have a pair of Sony WH1000MX5 that acts like an expensive piece of garbage so far. I will eventually (usually within 2-10 minutes usually) hear crackling noises when using the headset via Bluetooth in high-fidelity mode on my Linux machine (and as mentioned above, this is reproduced on two other machines running Windows 10). The crackling noises are there regardless of whether active noise canceling is active or not. It is not constant, but it is enough to significantly reduce the listening experience, especially for tracks where not too much is going on, such as quiet piano pieces. On my Linux machine, I can choose between three codecs: SBC, SBC-XQ and LDAC. It tends to be less pronounced using the LDAC codec over SBC (right now I've had a longer period with no issue). SBC-XQ also seems better. However, I have experienced it for all choices of codecs before. Also, under Windows (which I must use for work), this does not seem to be a choice at all. But I wonder if the problem lies here? I don't know much about Bluetooth codecs. Ideally, as in addition to these issues, they are not very comfortable, I would like to return them and get a refund (should be possible under local laws), but I am having some issues with the retailer claiming they can't find anything wrong with them after two trips to a repair shop. The first time they factory reset it and updated the firmware, the second time they did nothing. I don't think local Sony support will be of much help, and the local laws relate to to the buyer/seller contract, so for the refund or repair they will anyway refer me to the retailer. So I am trying to get a better understanding of the issue before pursuing this further, and if I fail to get a refund, I would like to fix the issue if possible. So if anyone is familiar with this and could help point me in the right directions to fix these issues, I would be very grateful.

I am still very much a novice in the self-hosting space, Linux etc. having fairly recently switched from using macOS as my daily driver and not tinkering much at all. One of the things that often confuses me is networking and making sure my setup is secure. This is currently holding me back from hosting more stuff locally that I would require access to from outside my home, as I am afraid I am doing something that could severely compromise my data. It can sometimes be difficult to follow explanations from more advanced users due to the many different components of networking and security, and different layers of abstraction, which prevents me from following completely. I might understand one particular case, but then be unable to make connections to another one. So I would want to research this more intensively, and ideally I would end up being able to easily understand the data flows - the paths the data takes (e.g. I make a HTTPS request to some server from my laptop, how is that traffic routed correctly through my local area network and later the wide area network), in what forms (i.e. different protocols, encryption layers etc.). In communities like this, I see there are a lot of very knowledgeable people who maybe could recommended any resources that cover this from the basics and onto more advanced stuff? Maybe a textbook from a university course on ICT that is considered particularly good? A YouTube channel with great explanations and visualizations? I am looking both at home LAN and internet in general. Enterprise level networks are not very interesting to me (at the moment).

homeassistant cyberwolfie • 11 months ago • 100%

I ran across [this post on the Home Assistant forum](https://community.home-assistant.io/t/perfect-and-free-synchronous-multiroom-audio-with-snapcast/386871), which shows something very similar to what I want to achieve. However, there is something that is unclear to me: with Snapdroid, will I able to stream all audio from my Android device to the Snapcast server so that it doesn't matter which app I use, or is this just some control device? I couldn't make that clearly out from [the GitHub repo of Snapdroid](https://github.com/badaix/snapdroid). My desired use case is to use this in the same way I would with AirPlay on an iPhone, and be able to use my music player connected to my Jellyfin server, my podcast application or my YouTube frontend application to play audio that is cast to the Snapcast server.

I've been using a sound bar from Sonos with my TV for several years now, but in an effort to ditch the last appliances that unnecessarily require accounts and internet access, I am looking to ditch it in favor of something that is entirely contained within my own network. What I think are my requirements: - No microphone - Ability to directly play audio from my Android (running Calyx OS), something I cannot do with the Sonos. - HDMI ARC-connection to TV so that it can be controlled by my remote - Sound must not be abysmal, but I am no audiophile. Preferably stand-alone without subwoofer - Maximum 90 cm in length so that it fits under my TV, preferably in black / dark grey with a clean look So far I've found something like this, which I believe gives me enough flexibility with HDMI ARC, Bluetooth and 3.5mm, even though it comes with a subwoofer: https://www.tcl.com/eu/en/soundbar/p733w In terms of software, I have long been considering something like balenaSound to replace the Sonos functionality, but I'll soon be setting up Home Assistant to run my lights, and I see that there is a Snapcast integration that might work for me here? Are there anyone here who have done something similar and have found setups that work well or that I should stay away from?

Jellyfin: The Free Software Media System cyberwolfie • 11 months ago • 100%

I am in love with my Jellyfin server (running in a Docker container) - it feels so nice to take back control over my media consumption again, after more than a decade in the land of streaming. So much, that I want to share this with my family. So I was thinking of setting up a reverse proxy (Nginx Proxy Manager is what I have used before) and expose my Jellyfin-instance through that. However, I've seen several people be skeptical about this solution, instead opting for access through a VPN (I don't think that would be a good solution for some of my family members). What are the potential pitfalls of setting it up this way, that makes people skeptical? Where could I go wrong, and what dangers would I expose myself to? As I understand it, this would only expose one port to the internet, direct all that traffic to the Nginx Proxy Manager, which then forwards traffic to specific ports internally on my home network, which sounds safe in my mind. Is it misconfiguration of the proxy manager I should be wary of? Or some exploits in the proxy manager?

Hardware cyberwolfie • 11 months ago • 90%

I have a fairly new laptop where the audio has become increasingly janky - it can work fine for a while, and then suddenly descend into white noise before being completely gone until I bend the laptop ever so slightly for it to come back. Obviously a physical problem. I contacted the vendor (until my dialogue with them is concluded, I will not name them), and was told that from my description, this sounded like an issue with a subboard where the audio port and sound chip is located. They wanted me to send it in, but this would require sending it out of the country for a 48 hour repair (+ shipping time) which I was not too keen to do, and especially as I am quite dependent on the laptop in my daily life, I wouldn't want to be without it for that long. However, the problem has since gotten worse, and I recently contacted them again in preparation for finally sending it in, in fear of this become ever worse. However, now it has been more than 6 months since my purchase and they won't prioritize the repair anymore, bumping the repair time up to 2-3 weeks. This is way too long for me to consider at this point, so I am now looking at options to have it replaced locally instead, in case we cannot find a suitable solution. However, I don't really know how to proceed with this, as I am quite clueless about hardware. Would such a repair be possible by someone not having the proper schematics? Would it be easy to identify the correct subboard to order if I am unable to get the information from the vendor? It was also difficult to assess the quality of the local repair shops - some of them give the impression that they are quite competent, but rather seem like they might specialize in helping grandmothers set up their e-mail client. How would I determine if I can trust them with my device?

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ cyberwolfie • 11 months ago • 96%

I am using ProtonVPN, and have (or so I thought) set up qBittorrent to bind to the network interface that ProtonVPN is using (tun0). The connection symbol turns red if I turn off the VPN, and downloads will stop. However, when checking the torrent address on ipleak.net, it seems that this bind is not working properly - my real IP shows up after I have disconnected my VPN. I thought that there shouldn't be any connections made when traffic is not via the tun0 interface, so that my real IP should never be known by the detection tool. Am I wrong? I have not configured the kill switch, but perhaps I should do so?

Linux cyberwolfie • 12 months ago • 97%

I am running Pop_OS! and want to set up an old WiiMote I have lying around as a mouse. I have a USB-sensor bar, and I don't have any issues connecting the remote to the computer, and the inputs seems to register just fine when running `xwiishow 1` after the remote is connected. I am also able to use it perfectly fine as a WiiMote in the Dolphin emulator. Now, I want it to function as a mouse, and being a fairly new Linux user, this is where I get confused. I am not entirely sure what I need to have happen in order to make this work, but I realize there must be some translation of the IR-sensor data and some way for Pop_OS! to understand that this should be a mouse. When searching for it, a lot of different names are thrown around, so I am not entirely sure what I should be looking for. However, from the ArchWiki (https://wiki.archlinux.org/title/Wiimote) it seems I have three choices: 1) **MoltenGamepad** (https://github.com/jgeumlek/MoltenGamepad), but this seems to only handle button presses? This is also something I would like, i.e. mapping buttons to Pause/Play media. But it is not the only thing I want, and mouse movement + clicks is higher in priority. 2) **An X11 input driver** - this I have tried to install according to the instructions on their GitHub-page (https://github.com/xwiimote/xf86-input-xwiimote), but failed to do so. The last commit to this project was back in 2014. The ArchWiki states: "xf86-input-xwiimote has support for mouse-emulation via IR using the Option "MotionSource" "ir"" ... which is what I want, but then also directly underneath: "There is currently no user-space application that enables mouse-emulation with the IR-sensor. If you need that, you should consider using the no longer supported cwiid approach. However, the xwiimote tools are under heavy development and will soon support IR mouse-emulation, too. " ... which confuses me. 3) **cwiid** is also listed as an approach on the ArchWiki, but they also say that it should not be used since it is discontinued. I'm sure the main issue here is a knowledge gap on my part, so if there is a solution that seems obvious to any of you, I would greatly appreciate the help in both getting this to work and in understanding my system better.

I recently started giving plain text accounting a go. For a long time I did not do any accounting, as my income was high enough to get by perfectly fine, but recently I wanted to get a lot more control over my personal finance in order to easier achieve more long term financial goals. I've only been at it for about a month now, and I started out with ledger. So far I am enjoying the concept, but have not made much out of reporting yet. But I like the idea of also building my own reporting in Python on top of existing reports, and checking out the ecosystem around this (I understand BeanCount has a large Python ecosystem, so I will probably check this out once I have some months of data). Are there anyone here doing this? I would love to hear some perspectives about this, both good and bad, from people having used this for a long time.

Privacy cyberwolfie • 1 year ago • 98%

For some time now I have been trying to clean up my digital footprint by requesting deletion of accounts and associated data for unused accounts, and being critical about which accounts I actually benefit from keeping. This turned out to be far more time consuming than I imagined beforehand. I've been using a password manager for about a decade, so I have a fairly good overview of a lot of the accounts I've opened over the years. However, while privacy has always been important to me, I was more concerned with increasing governmental surveillance rather than corporate surveillance for many years. So over the years I've signed up uncritically to a large number of services. Most of these do not have much data about me, but my username has generally been reused, along with e-mail and sometimes phone number and other more sensitive data. This of course doesn't take into account all those minor services I've signed up for with e-mail + reused password. I have no control over those... Now GDPR thankfully makes the job of cleaning up the accounts I do have control over a lot easier, because I doubt many of these services would even let me delete my account if not for it. However, it does not regulate enough how easy this process should be, and there are so many different ways companies implement this. From extremely convenient and easy ways of exporting all data and deleting the account, such as implemented by Strava (kudos to these companies!), to the worst offender of them all: British Airways... Until recently you would have to send an actual letter to their data protection offer with a copy of your passport (yeah right...). Sometime this year they've changed this, so now you just have to upload a picture of a letter to their document's portal, but since that is borked, I can't even access it to complete the deletion request. Apple also rejected my deletion request for an unknown reason, and I had to spend 45 minutes on the phone with them to understand that a cancelled, but still active subscription (a 1-year subscription that had not expired yet) from the app store, was blocking the deletion. Most are in between these two extremes, and either require that I actively follow up that I get a reply when I send an e-mail to their data protection officer with my request, or have processes that take up to a month to complete. Of course, cleaning up 10-15 years of uncritical online presence would take a long time anyway, but companies making it hard on purpose to delete your account and data is infuriating, and a testament to a status quo that should burn in hell. On the plus side: I no longer have accounts with Microsoft and Twitter, accounts with Apple and Amazon should soon be closed. My goal is to have completely phased out Meta and Google by the end of this year, although the communication lock-in of Meta and the fact that my primary e-mail was Gmail for 15 years (I've switched two years ago to Proton), makes these transitions a bit more difficult. If nothing else, this process has made me very conscious about platform lock-in and the "joys" of ecosystems...

Self Hosted - Self-hosting your services. cyberwolfie • 1 year ago • 100%

This is a question mostly for the sake of trying to learn more about how self-hosting works, and it is not vital that I resolve this. But if anyone wants to help me understand this, I would greatly appreciate it. I have a media server running at home with certain Docker containers (Jellyfin, Navidrome and Audiobookshelf currently). I have not exposed these services to the internet, so they are currently only accessible on my home network, which is all I need for the time being. The server itself is connected to an external VPN provider as there may or may not be some torrenting involved at some point. Let's say the name of the server is mediaserver. From my laptop connected to the same network, I can access all these services through `http://mediaserver.local:` or `http://:`, while connected via the same VPN provider on the laptop also. On my cell phone (running CalyxOS), I am unable to do so. I need to disable VPN in order to access the services. What is the difference between my laptop connected via VPN and my phone doing the same thing, both connected to my home network. I didn't actually think the VPN would come in to play before making requests outside my home network, but that's probably just me being ignorant.

Self Hosted - Self-hosting your services. cyberwolfie • 1 year ago • 97%

I've been self-hosting Nextcloud for sometime on Linode. At some point in the not too distant future, I plan on hosting it locally on a server in my home as I would like to save on the money I spend on hosting. I find the use of Nextcloud to suit my needs perfectly, and would like to continue using the service. However, I am not so knowledgeable when it comes to security, and I'm not too sure whether I have done sufficient to secure my instance against potential attacks, and what additional things I should consider when moving the hosting from a VPS to my own server. So that's where I am hoping from some input from this community. Wherever it shines through that I have no idea what I'm talking about, please let me know. I have no reason to believe that I am being specifically targeted, but I do store sensitive things there that could potentially compromise my security elsewhere. Here is the basic gist of my setup: - My Linode account has a strong password (>20 characters, randomly generated) and I have 2FA enabled. It required security questions to set up 2FA, but the answers are all random answers that has no relation to the question themselves. - I've disabled ssh login for root. I have instead a new user that is in the sudo usergroup with a custom name. This is also protected by a different, strong password. I imagine this makes automated brute-force attacks a lot more difficult. - I have set up fail2ban for sshd. Default settings. - I update the system at the latest bi-weekly. - Nextcloud is installed with the AIO Docker container. It gets a security rating A from the Nextcloud scan, and fails on not being on the latest patch level as these are released slower for the AIO container. However, updates for the container is applied automatically, and maintaining the container is a breeze (except for a couple of problems I had early on). - I have server-side encryption enabled. Not client-side as my impression is that the module is not working properly. - I have daily backups with borg. These are encrypted. - Images of the server are also daily backed up on Linode. - It is served by an Apache web server that is exposed to outside traffic with HTTPS with DNS records handled by Cloudflare. - I would've wanted to use a reverse proxy, but I did not figure out how to use it together with the Apache server. I have previously set up Nginx Reverse Proxy on a test server, but then I used a regular Docker image for Nextcloud, and not the AIO. - I don't use the server to host anything else.

Linux cyberwolfie • 1 year ago • 97%

I'm still a fairly new Linux-user (on Tuxedo OS), and I just ran into an issue that is new to me. If I try to update my system, either via command line or Discover, the apt update command fails. This is the output: ``` E: Could not get lock /var/lib/apt/lists/lock. It is held by process 1635 (apt-get) N: Be aware that removing the lock file is not a solution and may break your system. E: Unable to lock directory /var/lib/apt/lists/ ``` Process 1635 is `apt-get update` run by root, and persists through restart. I am tempted to try to kill it (`kill 1635`), but I'm not sure if anything could break from that, so I thought I'd try to ask for help first before I do something stupid. **EDIT:** I have managed to update my system by killing the process, which releases the lock, and then going on to do normal `sudo apt update` and `sudo apt upgrade`. For the sake of troubleshooting, I tried to add back my third-party repos one by one, and none of them caused any problem. However, when rebooting the same issue as described above happens again. Software updates is set to "Manually" in the System settings. In addition, everytime I ran `sudo apt upgrade`, at the end some update related to `initramfs` fails. My disk is encrypted using `cryptsetup`, and as I’ve come to understand, I should be very careful doing anything related to `initramfs` when that is the case. Here is the output: ``` Processing triggers for initramfs-tools (0.140ubuntu13.2) ... update-initramfs: Generating /boot/initrd.img-6.2.0-10018-tuxedo I: The initramfs will attempt to resume from /dev/dm-2 I: (/dev/mapper/system-swap) I: Set the RESUME variable to override this. zstd: error 25 : Write error : No space left on device (cannot write compressed block) E: mkinitramfs failure zstd -q -1 -T0 25 update-initramfs: failed for /boot/initrd.img-6.2.0-10018-tuxedo with 1. dpkg: error processing package initramfs-tools (--configure): installed initramfs-tools package post-installation script subprocess returned error exit status 1 Errors were encountered while processing: initramfs-tools E: Sub-process /usr/bin/dpkg returned an error code (1) ``` **EDIT 2:** The issue seems to have been narrowed down to a failure of Tuxedo's driver configuration service that runs at boot. It is this process that calls `apt-get` (and something I should've seen earlier...), and systemctl status reveals some errors: ``` aug. 08 15:33:56 laptop systemd[1]: Starting Tomte-daemon, finishes tasks that could not be accomplished before... aug. 08 15:34:06 laptop tuxedo-tomte[1393]: no network found!! some fixes might not be applied correctly aug. 08 15:34:06 laptop tuxedo-tomte[1393]: systemctlCmd: systemd-run --on-active="30sec" tuxedo-tomte configure all >/dev/null 2>&amp;1 ``` I really appreciate the help from everyone so far. It's a good experience asking for help here, and I've learned a lot from your answers. Makes being a Linux newbie a lot easier. So thank you :) Since this seems to be a very specific issue related to Tuxedo's own services, I will contact their support to get their input on what to do next.