• 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle








  • I backup my ESXi VMs and NAS file shares to local server storage using an encrypted Veeam job and have a copy job to a local NAS with iSCSI storage presented.

    From there I have another host VM accessing that same iSCSI share uploading the encrypted backup to Backblaze. Unlimited “local” storage for $70\y? Yes please! (iSCSI appears local to Backblaze. They know and have already started they don’t care.)

    I’m backing up about 4TB to them currently using this method.



  • I learned about this title too late to back the Kickstarter but absolutely loved The Messenger and SoS demo. I am very miffed that LRG distributed the KS but other physicals are being released by iam8bit. I’m currently waiting on Eastward CE that I purchased last July through iam8bit and they keep pushing the release back. They are claiming an early Q1 2024 release for this title but I’m VERY sceptical of that date.





  • My nephew whom is mainly an FPS player and said that BG3 was not for him has recently picked it up and is loving multiplayer with his friends.

    As a previous player of the BG series and others like it, BG3 is a far cry from any of its predecessors. I’m not stating your opinion isn’t fair, but wanted to also give another account of players that don’t consider this their type of game and are surprised to like it.





  • I have Nextcloud hosted internally in a podman container environment. To answer some of your more security related questions, here’s how I have my environment set up:

    1. Cloudflare free tier with my own domain to proxy outside connections to the public domain name, and hide my external IP.

    2. A DMZ proxy server with a local traefik container with only ports required to talk to the internal Nextcloud server allowed, and inbound 443 only allowed from the internet (cloudflare).

    3. An Authelia container tied to the Nextcloud container using “Two-factor TOTP” app addon. Authelia is configured to point to a free DUO account for MFA. The TOTP addon also allows other methods of you want to bypass Authelia and use a simply Google auth or other app. I’ll be honest, this setup was a pain but it works beautifully when finally working.

    Note: Using Authelia removes Nextcloud from the authentication process. If you login through Authelia, if set up correctly it will pass the user information to Nextcloud and present thier account. There is a way to have “quadruple” authentication of you really want it, where you log in through Authelia, Authelia MFA, then Nextcloud and Nextcloud MFA, but who would want that? Lol.

    Another Note: If Authelia goes down for whatever reason, you can still log in through Nextcloud directly.

    1. I have all of my containers set to automatically pull updates with the latest tag. This bites me sometimes of major changes happen, but it’s typically due to traefik or mariadb changes and not Nextcloud or Authelia.

    2. I have my host operating system set to auto update and reboot once a week in the early morning.

    3. My data is shared through an NFS connection from my NAS that only allows specific IPs to connect. I’d like to say I’m using least privileged permissions in the share, but it’s a wide open share as my NFS permissions are not my strong suite.

    Hope the above helps!