• 0 Posts
  • 42 Comments
Joined 2 years ago
cake
Cake day: August 19th, 2023

help-circle




  • Some self hosted services refuse to work if you use a self signed certificate with your public facing IP. They only allow self signed certificates when using one of the handful of private addresses.

    Some apps on mobile devices for the service you use won’t work unless a trusted certificate is used. A self signed certificate behind the scenes creates an error that isn’t handled and you can’t connect.

    You lose the ability to have a proxy in front to handle abuse so your server is spared the headache. You need a domain to do this.










  • icedterminal@lemmy.worldtoMemes@lemmy.mlGogle
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 months ago

    By being ripped out and sandboxed the same way other apps are, Google services isn’t free to siphon battery. This means you can restrict battery use and cut the constant communication down. Thus saving battery. If you allow it, yes it is not different than if it was preloaded.





  • You always will. Welcome to the Internet. The difference is whether or not you’ve taken steps to secure your stuff. You need to understand what this malware is looking for. It’s explicitly looking for unsecured services. Such as WordPress, SQL, etc. There are inexperienced users out there that inadvertently expose themselves. I see this type of probing at work and at home. Don’t overly stress it. My home server has been running for a decade without issues. Just keep it updated and read before you make any changes if you don’t fully understand the implications.

    My home based server is behind a pfsense firewall. Runs Arch. Everything is in a non-root docker container. SELinux is enforced. All domains are routed through Cloudflare. Some use Cloudflare Zero Trust.


  • Oh my. You’re doing it wrong. Exposing the unencrypted connection without the proper security measures is putting yourself at risk. Regardless of how strong you set the password, the connection can still be abused in all manner of ways. If you read the jellyfin documentation, you’d see the developers clearly state you should never do this. You need to put Jellyfin behind server software. Specifically a reverse proxy. I use NGINX. You can setup your connection to be secure this way. You can now also use Cloudflare if you have cache turned off. And if you really wanna go the extra mile, route it behind a VPN. Though this makes it harder for those you share it with or some devices that don’t support VPN.

    Please revise your connection. If you need help, feel free to reach out.


  • Office doesn’t have native Linux binaries. You either have to use a VM or Wine. You’ll find most people recommend a VM. There are Office web apps, but they’re not as robust as the Windows native offerings. Microsoft doesn’t really want to offer Office on Linux. Stick with Windows for the remainder of your education. Once you’ve finished, you can sink time into learning Linux.