Anecdotal… we drove through rural Ohio a few weeks ago. In several hours of travel we only saw ONE trump sign. The same place in 2016 or 2020 would have been full of them. Regardless of the impact of this, the enthusiasm is dead. There might be “maga guys” on Twitter but they’re largely disengaged in real life.
- 1 Post
- 48 Comments
Joined 2 years ago
Cake day: June 9th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Not sure how to do that in docker, I’ve run mine as a plain old PHP-FPM site for years and years. It might be something that can be tweaked using config files or environment variables, or might require building a custom image.
ClamAV is slow and doesn’t catch the nastiest of malware. Its entire approach is stuck in 2008. It’s better than nothing for screening emails, but for a private file store it won’t help much considering that you’ll already have the files on your system somewhere. And most importantly, it slows down file uploads 10x and increases CPU load substantially. The only good reason to use ClamAV for nextcloud is if you will be sued if you don’t!
It needs some tweaks to be snappy. The defaults are really bad.
- change database from SQLite to a proper database like MySQL or Postgres, and configure the database server to use your memory fully
- increase the PHP memory limit from the default (128M on many distros) to >1G, the more the better
- install APCu in-memory cache for PHP
- add Redis as additional cache
- turn off the antivirus extension, if installed (ClamAV is useless)
- use http/2 on Apache/nginx to increase performance with multiple connections
This was my setup from about four years ago. Other than moving suricata elsewhere, it’s largely the same. Worth a shot if it’s something you’re into!
https://nbailey.ca/post/linux-firewall-ids/
OpenBSD is also great, I’m just more familiar with the Linux tools. All the required tools are in the base image, and they have a great official guide:
Yep. Firewall, routing, dhcp, dns, everything you’d expect from a gateway device. Plain Debian (or really any distro) can do it all. With a 1gbps bi-directional connection fully saturated it will run at about 10% cpu on my very crappy low power Celeron CPU.
Plus, there’s no web UI full of janky and insecure CGI scripts to exploit, and software updates are forever (well, until x64 is deprecated, so basically forever).
For about a year I was running a full out of band IPS on my network. My core switch was set up with port mirroring to spit out a copy of all traffic on one port so that my Suricata server could analyze it. Then, this was fed into ElasticSearch and a bunch of big data crap looked for anomalies.
It was cool. Basically useless because all it did was complain about the same IP crawler bots as my nginx logs. But fun to setup and ultimately good for my career lol.
The biggest reason they’ve been tightly coupled historically has been event notifications and invitations. It’s a lot easier for one email client to both create the event in the calendar, and send the event metadata (.ics file) to the invitees.
Nowadays, it’s honestly much simpler to have them entirely separate, at least for personal use. My partner and I use a shared NextCloud calendar which works well on both iOS and Android using CalDAV. Much simpler than Google/microsoft/icloud’s sharing options.
You can use pretty much any camera with ZoneMinder as long as it supports ONVIF or RTSP and has the right connectivity and power inputs for you. I did something similar with some cheap TP-link cameras with pretty good results. With motion activated recording, I have just shy of 12 month of recordings stored on a 500G SSD.
“Gentlemen, you can’t fight in here, this is the war room!”
Set up google search console for that domain, then it will tell you why it’s blocked. It might be a false positive you can flag, or it might be that a host or service has been compromised or contains something harmful. Google’s blocklist is quite aggressive and often blocks entire domains if one of their subdomains has a violation.
It’s not perfect, but the new (2019+) mazda system is very nice. It’s all controlled by buttons and dials, zero requirement to ever touch a screen. It all feels quite thoughtfully done, especially when you compare it to fords or teslas with a big dumb laggy iPad stuck to the dash.