vsis

I want a centralized way to manage keys and secrets. And some service users with little privileges over a subset of the secrets. Ideally, a service user only should be able to read its own subset of secrets. So, let's say, if a container gets pwned it will only read its secrets and no more. It should be FOSS and self-hostable.

And a beautiful nice-to-have feature would be access log, to know who read what and when.

My only experience with something similar is Hashicorp Vault, but I don't want to be near any Hashicorp stuff ever again.

Do you know a FOSS alternative to Vault?

Estos wnes están así 🤏 de hacerme comprar una laptop risc-v.

Había abandonado el RISC-V-posting.

Lo único malo de esa laptop, es que no estoy viendo la manera fácil de no usarla con Ubuntu.

Quizás hay que esperar a que otros OS le den soporte o al menos publiquen una imagen booteble.

I have no idea how to do full-disk-encryption with NetBSD in UEFI systems.

Closest thing I can do is plain-text rootfs and encrypted /home, /var, /usr and swap. So, it's secure enough if my laptop get lost or stolen.

I wrote a post about how I do that.

If anyone can guide me to a rootfs on CGD or LVM, I'd appreciate that.

cross-posted from: https://infinitychuu.xyz/objects/6cd4b73e-bad5-4384-a529-448070a434de

Gracias @kde por las empanadas. Estaban muy buenas.

Sauce: https://fedidb.org/popular-fediverse-accounts?page=1

Hello. Let's say I want to selfhost an email server (smtp + imap) that only will be used to receive email.

I only will send email internally (from my domain to my domain) and receive from 3rd parties.

Should I setup DKIM, DMARC, SPF and reverse IP lookup?

To be honest, I'm having a bit of hard time understanding the madness of email authentication. So I can't figure it out by myself if those mechanisms are needed in my case.

I haven't deployed anything, but probably will use Stalwart. It looks like it's easy to deploy. Is there any other beginner-friendly email service I should read about?

Thanks!

So this year I grew some tomatoes for the first time. They were small but tasty.

In November they began to die, so I cut all dry/dead parts and they got better. But they still look very unhealthy.

Do tomatoes survive the winter? Does it make sense to keep watering them? Like once a week, when it doesn't rain.

Or maybe I should let them die and seed again next spring?

(Ignore the dog. She refuses to let me alone in the balcony lol)

cross-posted from: https://feddit.cl/post/807710

tl;dr: It has been two weeks using the Pi 400 as my personal computer. It's good enough for what I do, but when I need performance y connect it to my old laptop.

So, last year I bought a Raspberry Pi 400 and I did what I always do: absolutely nothing. It was kept inside its box getting covered by dust.

About two weeks ago I decided to clean the mess out of my desk. This desk is very small and I've got my work laptop, my personal laptop, a monitor and a lot of cables and stuff. So I put my personal laptop below the router connected by ethernet and put the Pi 400 on the desk.

It is way slower than my laptop, obviously. So when I need performance I make an ssh tunnel for vnc and pipewire, and got my laptop DE back.

I used fscrypt for the /home partition, because I'm too paranoid to go unencrypted and it doesn't support full disk encryption. Also added a USB stick for more local storage, ciphered with the same tool.

I don't play video games any more :sad-pepe: so I don't miss a graphics card in the Pi.

I bought it with the official Raspberry mouse included. But I have no idea where it ended lost.

So now this is my "setup" lol.