
Setup reverse proxy authentication for Synology DiskStations.

if I can get it working
It's really as simple as starting one container per chat service, with a config like this:
yaml
services: beeper-<service>: image: ghcr.io/beeper/bridge-manager restart: unless-stopped environment: - MATRIX_ACCESS_TOKEN=<your beeper matrix token> - BRIDGE_NAME=sh-<service> volumes: - ./beeper-<service>:/data
then messaging the @sh-<service>bot:beeper.local
bot user, and logging in to your chat account.
I'm using the Beeper Matrix server, but self-host their bridges. That way the de- and reencryption is done on my server, and Beeper only sees encrypted Matrix messages. It's extremely easy to set up if you've used docker before, much less work than running a full Matrix server yourself.
I opened specific ports where needed, and also limit most frontends to local requests only.
I'm using the DS920+, as it's still the best 4-bay Synology NAS for media streaming/encoding tasks afaik. Caches are read-write, and do use the NVMe slots.
The RAM upgrade and added caches definitely made a huge difference. The system is averaging around 70% RAM usage, and goes beyond that for certain tasks, so the current workload wouldn't really be feasible without the extra RAM. And the caches really make most IO operation noticably faster, especially random drive access e.g. from multiple simultaneous processes.
I have some Arr containers on there, as well as Plex, Audiobookshelf, AppFlowy, some Beeper Matrix bridges, FileFlows for media conversion, my own Piped instance, SearXNG, Vaultwarden, FirefoxSync, and a few smaller ones.
I switched the account in the app, so it should use it and fetch content from LW.
I agree with everyone here that self-hosting email is never easy, but if you still decide to go down this route then here are two tips that I personally found very helpful, especially when you decide to host it at home:
The first is to get an SMTP relay server. That's just another mail server that yours can log into to actually send its mail, just like an email client would. That way you don't have to worry about your IP's sending reputation, because everyone will only see the relay's reputable IP.
Second is to configure a Backup MX. That's an additional MX DNS entry with lower priority than the primary, and it points to a special mail server that accepts any mail for you and tries to deliver it to the primary server forever (or something like an entire week). So when your primary server is unreachable other sending servers will deliver mail to the backup, and it delivers the mail to the primary as soon as that's back online.
You can get these as separate services, but some DNS providers (like Strato for example) offer both with the base domain package. It makes self-hosting an email server much simpler and more reliable in my experience.
That was my first thought as well! But I also tried LW which is still on 0.19.3, same problem.
Edit: My bad! I had "show read posts" enabled on my LW account, and read posts are correctly hidden when I disable it. So it really seems to be a problem with the new version.
Hiding read posts stopped working
I have "Show read posts" disabled in the settings, but it just stopped working all of a sudden. Since yesterday I'm seeing read posts again.
I tried toggling the setting, clearing cache and switching instances, but no luck so far.
Anybody else who has this problem? Any idea how to fix it?
Edit: Looks like it's a problem with the new Lemmy version!
Welcome to the Linux community. :)
You will probably never understand everything about Linux and all of its included and associated systems. That's completely fine, no one does! That's why we are many, and it's what asking for advice or help is for. You can just learn whatever interests you at your own pace, and know that there will always be interesting things you haven't seen yet.
Election: Poll results for small parties?
In this election there won't be any % barrier in some countries, but I still haven't seen any poll numbers for small parties here in Germany for example. Everything below 2-3% gets lumped in with "Others" as usual, even though about 0.5% would already get them a seat in parliament this time. This makes voting strategically very difficult, because we have no idea whether any small party could even get in.
I get that there are limits to what you can show in a graphic, but even the source links I checked didn't provide more details. Why is that, and has anyone seen poll numbers for small parties, particularly for Germany?
I really like the idea of creating a decentralized network that has a fair monetization model built right in, instead of relying on donations like the Fediverse. Crypto got a very bad rep, but this kind of stuff is exactly what it's good for imo.
It also has some core features that are missing from other similar messengers, like multi-device sync. And lastly, the devs seem pretty capable and open as well. They are very transparent with their work and seem to have the right ideas about where things should go and which trade-offs to make. E.g. their reasoning for not using the Signal protocol seems solid to me.
So I'm hopeful, but time will tell if it all works out.
The thing is, Reddit also has money and lawyers. LW doesn't, so it's understandable that they play it safe imo.
Good to know I guess, but yea that's a bit too speculative for my taste.
Looks ok to me, what in particular do you take issue with?
This UsenetServer discount link gives you 1 trial month for $1, then $50/year after that, and includes a 1TB TweakNews block and a paid PrivadoVPN account.
Completely agree! There are solutions for letting Lidarr download from Deezer and Tidal, but afaik no other music streaming services for some reason.
I'm transcoding everything to 320kbps MP3s. It's much much smaller than flac, and I can't hear the difference even if I try.
Trying to finish the Horizon Forbidden West story, but it's a bit meh. Really sad about that! The HZD stories were great, and the world is as beautiful as ever, but I stopped caring at some point with the newest one. Other than that, I just bought the Age of Wonders 4 season pass and am trying out the new races and traits.
Fedora, I usually wait 1-2 weeks for the last bugs to be found+fixed and extensions to catch up, and then just upgrade in-place. Haven't had a major upgrade problem for years now, it's mostly as smooth as any other offline update. And I don't feel like I have to reinstall the OS every few years on Linux either.
united, indivisible republic
So no federalism anymore, just one centralized state power.
All baronial and other feudal estates, all mines, pits etc. shall be converted into state property
The mortgages on peasant farms shall be declared state property
All private banks will be replaced by a state bank
All means of transport: railways, canals, steamships, roads, posts etc. shall be taken in hand by the state
So the state owns and manages all land, all finances, all infrastructure, and all means of mass transportation, on top of all the things the state controls already.
Idk what you think centralization of power looks like, but imo this is it.
Because that's what creating an all-powerful government leads to. Imo the key is splitting up and balancing the power, not concentrating it in one easily corruptable entity.
One of us One of us One of us! :)
Guide: Setup authentication for the default Synology reverse proxy
Setup reverse proxy authentication for Synology DiskStations.
Hey everyone,
My personal server of choice is a DiskStation right now, and I'm using the default reverse proxy for all my subdomains. I went through a few stages to secure them, and now that I'm finally finished (famous last words heh?!) I thought I'd document my approach and provide some configs and code. I've seen a few unanswered questions here and there about how to do this on Synology, so hopefully this helps a few people.
The guide covers limiting access to local IPs, as well as adding Basic or SSO authentication. The main goal is to integrate well with the GUI and access control profiles, and to leave all existing and autogenerated files untouched, so updates and changes via the GUI still work as expected.
Here is the basic idea:
The nginx server config is located in
/etc/nginx/
, and the reverse proxies are defined in thesites-available/server.ReverseProxy.conf
file inside that folder. There's oneserver
directive for every proxied site, and the DSM config adds a `
Touch navigation gestures on desktop
Hey everyone,
I created an addon to bring touchscreen navigation gestures to the desktop version of Firefox, so mainly for 2-in-1 laptops and Linux/Windows tablets. It adds back/forward navigation and pull-to-refresh gestures, shows the same icons as existing touchpad gestures, and will check beforehand if you can still scroll in a given direction.
Here is the link: Touch Navigation
What does AC3D mean?
So I know what AC3 means of course, but what does AC3D mean in some releases?