[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


[Advertise on 4chan]


Another homeserver unit ready and deliverable. Anyone like homeservers around here? I can print infinite copies set up to be consumed by common consumers. How does your home server compare?
>>
>>108376771
that GUI is dogshit my guy
>>
>home.arpa as full domain
unhinged
>>
>>108376771
>toggle ssh password auth
surely you can find something less useless for your UI. this is some AI creation, right?
>>
>>108377016
where's yours?
https://www.youtube.com/watch?v=ZVeJYJv2eTs
>>
>>108377038
That's a yes
>>
>>108376996
https://datatracker.ietf.org/doc/html/rfc8375
this is literally where the government tells you to put your home server domain address big guy
>>
>>108376771
>web dashboard that you can turn on and off ssh for some reason
utterly retarded

my home server is just a headless box with a couple of disks thrown in.
if i need something from it i just ssh/scp
i don't need some stupid web front end to use a computer
>>
>>108376771
normies discovering 'le homeserver' was a disaster to mankind
>>
>>108377078
what services you run? I offer 10 prepackaged services. You offer, what's that? 0? you offer nothing? nothing to the world, gotcha
>>
>>108377062
no it says .home.arpa.
i don't know what the last dot is for
but the first implies that servers like yours are a subdomain within home.arpa.
but if you want your whole tld to forward to your server then more power to you i guess
>>
>>108377098
i just explained its a file server
what services do you run? dns/firewall? i have a hardware firewall that does stuff like that. and its not even ssh accessible.
>>
You genuinely don't know what you're talking about. Your isp has special restrictions on any home.arpa address regardless
>>
>>108377111
https://arpaservers.com/packages/
come check em out
unbound
nftables
okay well can you sell yours? i can produce infinite copies of mine
>>
>>108376771
>SSH password authentication

yikes
>>
>>108377129
that's so you can set up ssh locally with a key once you acquire the thing; it's blocked on the wan regardless. lan only ssh

what you want me to prepare an ssh key on your personal computer for you and put it on your home server before i shit it to you?
>>
>>108377119
>2to3
>adduser
damn i'm fucking jelly dude
how many have you sold?
>>
>>108377153
definitely need to do a round of cleanup; that's the live packages and every single tool used to build every single thing from source if they don't distribute their own binary. do you understand what apt integration is?
>>
>>108377038
my what? stupid web interface? i can use a cli dude and most of that web ui is pointless shit i'd never need.
>>
if your homeserver fails you can buy another, move your nas drive over, and you're back up and running immediately. we're working on getting forgejo to be this seemless; presently so much of it is nested in the postgres database it's hard to automate to this degree; must interop with a backup system of some kind


>>108377230
you can cli your jellyfin? i can show my relatives my pictures from a nice gui anywhere in the world on my phone seemlessly as if i was accessing the google cloud. you do that with your termux?
>>
>>108377244
>jellyfin
dude, i have samba and kodi.
>pictures from nice gui
yes, google photos. my phone backs itself up to the nas when I'm home
>when your homeserver fails you move the drive
i'm sorry, i don't use an ewaste toy for my home server. if my nas has hardware issues i fix the hardware.
>>
>>108377100
>i don't know what the last dot is for
thanks for making it obvious you know nothing about domains
>>
>>108377289
>i'm sorry, i don't use an ewaste toy for my home server. if my nas has hardware issues i fix the hardware.
you sound absolutely retarded. you solder traces inside your intel cpu? Hardware fails my guy

samba and kodi, that's great that's most of the functionality we offer, i'm glad you've figured those out. Can you access them from anywhere in the world? use tailscale. Your phone doesn't back itself up to your nas, google photos is a cloud service, and they train their ai's on your data. You don't read books so those are out. I guess you don't listen to music. Or write code. Or get files. So i guess you win, you're not our target customer, congratulations?
>>
>>108377112
>Your isp has special restrictions on any home.arpa address regardless
>You genuinely don't know what you're talking about.
>>
>>108376771
>homeserver
use case?
>>
>>108377337
yes if they allow public traffic to a home.arpa address, they are domain poisoning and breaking the law
>>
>>108377321
now that i have googled it i will pretend i meant why arpa has a dot but local doesnt in the example they give
>>
this is complete and utter dogshit
random n100 mini pc off aliexpress plus usb hdd makes for a fucking terrible home server
adding your horrid vibecoded webslop on top is a great idea

>>108377344
>You genuinely don't know what you're talking about.
actual moron
>>
>>108377384
so let's say i want to hack all the home servers since i know they're routed to home.arpa . i poison my isp's dns to route all traffic from my 'legit site' evil.com to actually redirect dirty payloads to home.arpa domains on public ip's i know my isp carries.

who is responsible for stopping the attack and at what layer of the osi model does the attack vector get thwarted?
>>
>>108377384
it's lay flat hard drive docks with proper 5400 rpm red nas drives now. i raised my pricing and don't have pics of the new stock yet
>>
>>108377326
>tailscale
yes, i host my own headscale.
>phone doesnt' back up to nas
mine does.
>train their ai's on my data
don't care. i use their ai and benefit from the training.
>read books
i have calibre integrated with koreader.
>don't listen to music
i have a music collection with lidarr, but these days i mostly just use an app w/a cloud service honestly.
>write code
why do i need a home server for this? i don't use some web crap for coding.
>get files
samba
>not your target audience
no one is. your ui is horrible.
>>108377344
you are astonishingly clueless.
>>
>>108377405
again your not my target customer. i'm glad you got it all figured out. if you have any questions ask. Why are you angry about someone else trying to commodity the experience of a home server, if you've experienced it?
>>
>>108377397
>what layer of the osi model
you'll never use the osi model in reality. you're only learning it for your TIA cert.
don't stay up too late working on your homeserver project, you have school in the morning.
>>
>>108377159
>do you understand what apt integration is
no
>>
>>108377428
their firewalls have deep packet inspection and any home.arpa's get filtered. that's the answer you fucking moron
>>
>>108377404
>i raised my pricing and don't have pics of the new stock yet
just ask chatgpt to generate some like everything else youve "created"
>>
>>108377429
so basically i could maintain my own packages as a developer on apt using apts tooling. or i can just say fuck it yolo you can build my shit from source. many of the tools i'm using to put this frankenstein together are of the latter
>>
File: ringsOfSecurity.jpg (371 KB, 2816x1536)
371 KB
371 KB JPG
>>108377448
kek he's so mad
>>
>>108377452
sorry, i said no as in no i dont know. what i meant was no and also i dont care.
im glad you had fun on your little project.
not everything needs to be a website and i believe that its actually detrimental to society
>>
You know like IBM and other businesses use home.arpa for their own infrastructure right? am i taking fucking crazy pills here? That's what we're hung up on
>>
>>108377473
The future of the internet is localized small nodes living in everyone's house. Not in a data center. In your house. In my house. In every house down the road. Those nodes are going to communicate with each other. Node to node. We will not communicate with these big services and these big cloud providers. They think they can just harvest the data for free forever. They are wrong. We can talk to each other directly. We don't need them. We built our own private cloud. It is topographically unstoppable. There is no single switch to throw. You cannot unplug a cloud that lives in a million basements. That is what we built and that is what we ship.
>>
theres no fucking way this isnt some elaborate trolling attempt

it has to be a ruse

https://www.youtube.com/@homeserversltd

the videos all have ai voiceover
literally every word on the website is ai generated.
dude even generates the simplest flow charts with chatgpt instead of just doing 30s in paint

put some actual effort in brother

>>108377481
>we
nigger its you and your $10/month subscription there is no "we"
>>
File: datacenterathome.png (664 KB, 1024x1024)
664 KB
664 KB PNG
>>108377493
there's no subscription. pay once own forever. I'm sorry you cannot rationalize it
>>
File: ownYourLand.jpg (282 KB, 2816x1536)
282 KB
282 KB JPG
Let's talk about the future of the internet. Right now the internet belongs to your ISP and the cloud; the platforms on top rent your data and sell your attention, and the same people who control the route can throttle it or turn it off whenever they want. The move is a machine that goes out and gets your internet and brings it back to you. A home.arpa behind every modem. A topology they can't switch off. So the real question is whether we keep feeding their pipeline or build one we actually own?
>>
File: 1760114995478531.png (92 KB, 1384x292)
92 KB
92 KB PNG
>>108377481
yes, all the normies i talk to are discussing their home servers.
>>
>>108377502
you are using the free tier of these services to generate all this slop?

shame you cant get it to manifest a noose, we'd all be better off.

you wouldve been better off just offering hardware+support for existing homeserver "platforms" but that would require actual knowledge. far easier to get in way over your head with chatgpt.
>>
>>108377530
this shit changes literally every time i look at all of my what
>>
>>108377558
https://github.com/homeserversltd/updates
i have units in the field. why are you so buttblasted? lmao all of my what
>>
>>108377481
>>108377520
ok but thats not what you built.
what you are describing is a server at your house
what you built is a web page which shows the status of the server
these two things are not the same.
>>
File: homeserversHaveTwoNICS.jpg (259 KB, 2816x1536)
259 KB
259 KB JPG
>>108377654
every service works and you can add infinite services. I will make p2p facebook and it will come standard. what will you say then? Will you ever be satisfied. over 1 million lines of code. and you can't even see the forest or the trees
>>
>>108377654
Like there's so many layers of integration I don't even know where to start with you do we start with key man do we start with how certificates work do we start with how the different configurations interplay the reverse proxy you don't even know what you're looking at
>>
>>108377642
AI slop
>>
i could go over all of the security, let's try sbin to start. so these are the scripts my subsystem use, and are generally called by a sudo'd www-data, which only allows the website or gunicorn to interact with them, and of course owner, or you are apart of that group. because every single thing is hosted on git hub you can entirely rebuild the device if you nuke it; for example:

from a single script
https://github.com/homeserversltd/sbin/blob/master/fdwebsite

you can rebuild the entire front end stack, from source, in less than 10 seconds. and it will reinstall all of your extra tabs that you have installed too.

These tabs can manage anything from satellites to your own cctv feed, to literally your imagination is the limit. and they're sharable entirely as a singleton github repo. we can all collaborate organically on tabs that slab directly into our local machine's front end!

and you seem fucking bored!
>>
https://github.com/homeserversltd/sbin/blob/master/calibreHelperDaemon.sh
this thing was a pain in the ass. so calibre web reads a calibre database. how do you get things that are wantonly chucked into an upload folder, into said database whilest preserving their content. I made the answer. Each layer of integration .. . again . i dont even know where to start
>>
dude bro wont even see what's inside the vault
https://github.com/homeserversltd/vault
too busy being a pretentious prick to understand what you can clone and use for free right now
>>
so if i connect to jellyfin remotely or locally i can use the portal system. it will give me the correct url to connect to the target. how do you guys handle remote vs local sans being different?
>>
k so i'm still good

Both .internal and .home.arpa are reserved, non-public top-level domain (TLD) options designed for private networks, intended to prevent naming collisions with real internet domains. The core difference is that home.arpa is an officially recognized RFC standard (8375) for residential networking, while .internal is a recently proposed (Jan 2024), broader standard meant for both home and business use, providing a safe alternative to unreserved domains like .lan or .local.
Pi-hole
Pi-hole
+2
.home.arpa (Best for Home/SOHO)
Purpose: Officially reserved in 2018 for residential home networks (RFC 8375).
Best Use Case: Simple home networks, smart home devices, and local testing.
Advantages: It is highly unlikely to ever be registered publicly, keeping local traffic local and ensuring privacy.
Disadvantages: Can be long to type and is technically intended for residential, not enterprise, use.
Pi-hole
Pi-hole
+4
.internal (Best for Business/Homelab)
Purpose: Proposed by ICANN/large tech companies in early 2024 to provide a standard, non-functional TLD for private use, particularly to replace ".local".
Best Use Case: Corporate internal networks, larger home labs, and scenarios where you want a cleaner "domain.internal" look.
Advantages: Backed by companies like Google, it is intended to be a safe, reserved TLD that won't leak DNS queries to the public internet.
Disadvantages: Relatively new compared to home.arpa, it might not be supported in all older documentation.
Pi-hole
Pi-hole
+4
Comparison and Recommendation
Feature .home.arpa .internal
Status Official RFC 8375 (since 2018) Proposed by ICANN (Jan 2024)
Primary Context Home/Small Office Enterprise/Any Private Network
Safety High (Reserved) High (Reserved)
Length Long (5+4=9+ chars) Moderate (8 chars)
>>
>>108377662
>you can add infinite services
i can already do that on any computer
>>
>>108378020
>>108377899
how do you handle https certs and connecting locally vs remotely the changing of the san
>>
>>108378208
oh right you probably.. .
If a TLS certificate has a Subject Alternative Name (SAN) field, then TLS clients are supposed to ignore the Common Name value and seek a match in the SAN list.
. .
so a san list is the list of domains contained or allowed under the cert authority upon generation.

when you add a portal. and regenerate your cert. your new portal is now a https cert handled and controlled entirely by the onboard https certificate
>>
so for example
i connect to photos.home.arpa locally

over tailscale its now a tailscale url
https://home.tailnetname.ts.net


what configs do you control and modify to allow this behavior to work. how do you securely connect to your remote service? i know how . Tell me how you do it on yours.
>>
i install my new service ensuring no port conflicts. i add a new reverse proxy config available, i ln to sites-enabled, add a new dns config, i add my portal to the portals. i regenerate my certificate. i now have https access anywhere in the world to my new service. The portal system dynamically generates the url you need to access the service based on how you're accessing it. Read the reverse proxy rules at the top of every reverse proxy config already provided to further instructions



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.