Guess I don’t have to, the dev released a new update without analytics, scripts and fonts are internal and created an issue for running as root which someone’s assigned to. This project got some crazy momentum!

Yeah stirling has options to remove though, at least I remember seeing the option since the beginning and disabled it haha. Option to disable that should probably be a 3rd PR then got some work to do lol

More worryingly now looking at loaded JS again it loads an analytics JavaScript file too.

https://github.com/alam00000/bentopdf/blob/main/index.html#L9

Plan to if no one beats me to it… Just gotta find time when I am free and have the energy to program more.

Yeah very exciting project and to be honest a lot of popular services run as root by default. That said this ones harder to change from port 80 without changing the image. Could mount a nginx.conf to override probably though.

I believe you can just do the sha but it would be a similar affect pinning it to that sxact docker image, but doing so without version tag makes it harder for you to know what you are running.

The sha256 is generated by an algorithm based off of the bytes of the image wherr the tag is overwritable and pushed by the developer.

I want to swap to this but also want to do a few PRs but haven’t had the time.

• Dockerfile exposes port 80 and runs as root
• Less concerning, but dislike it, the scripts and CSS use remote cdns rather than being bundled locally

Otherwise I am excited for this. Stirling doesn’t really support replicating even with license and its fat image takes up a bit of my disk space for images.

Its also good practice to include the sha256 digest after the version like

DockerImage:v… @sha256:…

If you pull without digest and say the maintainers get compromised and release an update with the same version tag with malicious stuff in it, then you won’t pull it automatically since the digest does not match.

If public key is denied forgejo is setup, but you have an old connection in your authorized_keys file probably form using gitea. Remove the line, it should prompt you to accept public key on next ssh session. This is a basic ssh functionality probably why you were downvoted I guess.

Gitea and forgejo configs were 100% same at some point, check forgejo news for when the last version that supported gitea migrations. That said it should still be pretty close.

Velero is the backup solution for PVCs and k8s way.

I have tried quite a few and found blocky to be very easy and reliable.

I use multiple DoH servers upstream, it sorts out which ones better response times and uses it more often, but splits them still. I have over 20 devices using it and its been running well.

It also can prefetch common domains and caches them per config. I got A 40% cache rate with running 3 of them for redundancy.

I’d recommend finding a cheap VPS using https://lowendbox.com/. I got a 3GB RAM 3 core plan for $32/year this is slightly overkill, prpbably, but it also had higher bandwidth limits. Add wireguard and setup routing for the vps public IP.

Yeah operators are extremely nice. I used bitnami images before operator in HA setup and it would fail all the time. Using operators I have like 12 postgres DBs and 0 issues for well over a year.

Btw, self hosting communities tend to shy away from k8s due to complexity and generally enterprises use it so less selfhosters use it. I wanted redundancy and to keep me learning tech, less crazy people tend to go with proxmox for clustering in these communities.

Some operators for postgres is free for non commercial use, so its not truly open source even though its source available, one is crunchydata.

pgvecto.rs v0.4.0 I assumed was just not renamed. They have one for vectorchord too

Operators are good ways to support applications in CLI that aren’t easy to setup in a cluster by default. You can make these databases redundant by setting replica higher than 1 and applying it, operator copies the db data and makes a new replica. It also helps with backups and restoring too.

If you are using Kubernetes, I highly recommend investing time into installing an operator. The best open source one with less restrictive licensing is cloudnative pg. VectorChord builds official images for CNPG that includes the extension.

My favorite part is guessing what they do that results in the bug!

I saw sharrr the other day which apparently can be self hosted and uses cryptography / expiracy / single download / multi part downloads to make it hard to find a compete file if an attacker even has host access, it also encrypts the file prior to uploading to the server and only you on the client side have the encryption.

That said, this is all according to the architecture of the service, not sure about security in practice.

If you are using openvpn this env may be a good thing to try. It may need adjusted though.

OPENVPN_MSSFIX=‘1350’

Yeah that makes sense I didn’t mean in any aggressive way I guess codeberg is archived so that answers the question of what one to use for issues and such. I’ll put up a feature request on it. I do appreciate the work and have been watching it progress!

What’s up with changing to github?

I’ve been watching this one since it can support high availability but the biggest thing I see missing is support for indexing / searching documents.

I like the direction this has gone so far and excited to see how it continues!