Just created my own zero trust network!
-
What security problems?
Bots randomly attack stuff, and if you leave something insecure, they'll install a bot net node.
-
Bots randomly attack stuff, and if you leave something insecure, they'll install a bot net node.
Define "insecure".
-
Finally caught it! It was Jellyfin stupid ass deleting my media!
Wtf why?
-
Define "insecure".
Default passwords, old insecure versions of apps and system packages, etc. "Just getting it working" usually leaves things insecure, and you usually need to take things a step further to secure your publicly accessible services.
-
Default passwords, old insecure versions of apps and system packages, etc. "Just getting it working" usually leaves things insecure, and you usually need to take things a step further to secure your publicly accessible services.
Not just old insecure, but current insecure too. Plenty of stuff runs fully current but still vulnerable code. Put it behind a firewall.
-
Wtf why?
Apparently is a known bug
-
Not just old insecure, but current insecure too. Plenty of stuff runs fully current but still vulnerable code. Put it behind a firewall.
Sure. My point is that self-hosters tend to let services sit without updates for months if not years at a time. That's fine if you don't expose anything to the internet, so keep that surface area as limited as possible.
-
No awards are needed, just wanted to share my excitement that while my Jellyfin server still keeps loosing my entire library every 24 hours at least now it has a domain and ssl cert!
That is all. Happy Friday everyone
What did you use for zero trust?
-
Not even on reboot, it just get's deleted somehow, been happening for the past couple of months and I haven't been able to figure out why yet. I posted all about it here (https://lemmy.world/post/32756942) if you are interested in reading about it.
Any de dupe tasks running and removing them since it sees them in a backup?
-
Apparently is a known bug
Link to bug?
-
Apparently is a known bug
Jesus that is not a small bug lol
-
What did you use for zero trust?
Why do you want to know? Huh?
-
Link to bug?
Maybe this
Although it looks like the nasty docker bug link in that thread is fixed.
So maybe ro mounts can mitigate the problem.
-
Can you spin up a VM or a docker image?
I've done this when services misbehave, and just migrate the DB over (Syncthing in particular).
Curious to how syncthing misbehaved. Care to elaborate?
-
You didn't expose it to the internet right?
If you want remote access setup client certs
wrote last edited by [email protected]Why would you expose anything to the internet when you have Tailscale?
-
Any de dupe tasks running and removing them since it sees them in a backup?
There where no tasks running outside whatever is setup out of the box when installing jellyfin. I have recently discovered that jellyfin can delete your media if it thinks the media has been removed...
Wierdest logic by the devs.
-
Why do you want to know? Huh?
Its certainly not B/C I'm part of an alphabet agency looking for citizen networks to exploit.
