• 0 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: July 30th, 2023

help-circle





  • I’m coming back to linux as a main desktop, finally ditching windows (again). I tried out fedora workstation and the fedora KDE spin. KdE looks so good now, before i atteibuted it to a windows wanna-be knock off. This was back in the windows xp days… now it looks so polished. I probably prefer it to gnome because I’ve been a windows user for so long but gnome is nice with its minimal approach, looks nice and clean. Can’t get away from how nice KDE looks though, I’m going to stick with that I think.



  • I used to dabble in coding. Never done it professionally. To be a full time developer would probably kill me, I remember constantly thinking of how to build this or that function, or how to do a certain thing, or why something keeps failing. I’d constantly be thinking these things, in the shower, while brushing my teeth, while driving, it was making me insane. Don’t think I could do it professionally.






  • I like the “1 liter PCs/home servers” for this kind of stuff. I have a 3 node proxmox cluster running on hp elitebook mini 800 g4’s. I got them for around $120 each on ebay (prices vary). Other big manufacturers have their own mini modules (hp, lenovo, dell) Generally these have a lower price tag than something like a similar generation intel nuc because it’s less of a niche market, these are used in business office environments and usually sold used pretty cheap when hardware is refreshed or businesses are closed. You can find replacement parts easily also. Just make sure they include a power adapter if you do search for one.

    Mine are running i5-8500t processor which supports Intel quicksync and performs very well for video transcoding in plex. Should easily be able to do a couple of 4k transcodes easily. If you’re not interested in running proxmox, this would run OMV easily and have plenty of power to run lots of containers.



  • I use nginx proxy manager with dns challenge to get a *.example.com cert that I then use to host services internally. I just checked, it supports dns challenge for porkbun, you may want to give it a try again. Also, you shouldn’t really need to forward dns to duckdns. You can have public dns records point to an internal ip.

    This is what I do, I have example.com (dns registered with cloudflare but should work the same with porkbun) I then create an a record for portainer.example.com to 192.168.0.5.

    Internally my nginxproxymanager is running at 192.168.0.5 and portainer is running at https://192.168.0.6:9443

    Then in nginxproxymanager I create a dns challenge (you’ll have to look up some videos on how to do this, it’s not very difficult it usually just takes a api key and secret key) then I create a new proxy host for portainer.example.com pointing to https://192.168.0.6:9443 and you select the *.example.com as your ssl cert for the proxy host

    Now internally go to https://portainer.example.com and it should work.






  • I get it for personal or even business use on a small scale is great. I use Linux daily, I’m a sysadmin and manage windows and Linux servers. My main desktop is windows. I’m considering switching my home pc over to Linux again since generally (from what I hear) gaming works mostly and that was what used to always bring me back to windows. Now I don’t really game that much anymore anyway so it may not even really matter that much for me.

    But for a business that has hundreds or thousands of user devices that they need to secure, configure, meet compliance, etc, how would they do that with a Linux distribution? Microsoft has active directory and group policy to manage this kind of thing (and now moving toward AAD and intune to manage device configuration) but I have yet to see any kind of Linux desktop distribution that has a central configuration management, patch management and security management. Sure you can configure it to auto update and send it out hoping for the best, but what happens when a device stops checking in, or the VPN client breaks, or there is some software we need to push out to all our users immediately? What choice do we have?