I think the added benefit of an OpenWRT router is, you get 3 more ports (for your TV, Playstation and PC), plus a Wifi network. And it’s really hard to break it. But a MiniPC with OPNsense, of course will be more powerful. And some more advanced things have been notoriously difficult to set up in OpenWRT, maybe OPNsense does it a bit better.
hendrik
A software developer and Linux nerd, living in Germany. I’m usually a chill dude but my online persona doesn’t always reflect my true personality. Take what I say with a grain of salt, I usually try to be nice and give good advice, though.
I’m into Free Software, selfhosting, microcontrollers and electronics, freedom, privacy and the usual stuff. And a few select other random things as well.
- 1 Post
- 396 Comments
I have a port forwarding without any tunnel to third parties and Wireguard.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Remote Code Execution in Forgejo?English
3·11 days agoI think there’s pros and cons to everything. That way would have been less of a dickhead move towards the Forgejo developers. But a big letdown to admins as they don’t know what’s up with the software they’re running on their servers. The way the author chose gives some new intelligence to admins, and they can now act on it, since it’s public knowledge. But it’s annoying to the devs.
I guess I as a Forgejo user am kinda greatful they did it this way. Now I got to learn the story and can allocate 2h on the weekend to see if my personal Forgejo container is isolated enough and whether the backups still work.
(But that’s just my opinion after reading one side of the story. Maybe there’s more to the story and they’re being a dick nonetheless…)
Edit: And regarding just dropping the security team an informal mail… I don’t know if that’s clever. You’d normally either follow some security policy, or don’t engage. Sending them other kinds of mails which violate their policy (an internal carrot) might not be the best choice.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•GitHub - minio/minio: "This repository was archived by the owner on Apr 25, 2026. It is now read-only."English
1·11 days agoThx very much. That’s valuable info. I edited my comment and crossed it off my list of software to evaluate for future projects. I already got the vibe-coding and a bit of sketchiness by scrolling through the latest commits and issue tracker.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•GitHub - minio/minio: "This repository was archived by the owner on Apr 25, 2026. It is now read-only."English
1·11 days agoThanks for pointing it out. Yeah it does. I just copy-pasted what I found and didn’t check.
Yes. I’ve been somewhat lucky as well. Upgraded my homeserver to 48GB to run a few virtual machines and maxed out my old laptop well before prices skyrocketed. Got to check if I still pay the ~8€ a month for my netcup VPS or if they increased price for existing customers as well…
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•GitHub - minio/minio: "This repository was archived by the owner on Apr 25, 2026. It is now read-only."English
39·11 days agoWas pretty much clear since last year. At the latest in December when they switched to “maintenance mode”. And now they archived it.
https://blog.vonng.com/en/db/minio-is-dead/
Alternatives include Garage, SeaweedFS (and RustFS).
Edit: RustFS looks very sketchy. Read object Object’s comment below before using it.
I think I get those emails twice a year. And it’s usually same price and double storage for the VPSes. Can recommend netcup.de as well. They used to be a bit cheaper than today, but I guess every hoster increased price within the last year.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Looking for information on setting up a VPS to forward trafficEnglish
1·14 days agoI’d let the home server connect to the VPN on the VPS so there’s a direct tunnel between the VPS and the home server. And the router is pretty much irrelevant. You can of course choose to terminate it on the router as well, bus as you said, that requires either a second forwarding. Or the entire home network to be bridged or routed.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Looking for information on setting up a VPS to forward trafficEnglish
4·15 days agoI think a few people already mentioned some good solutions. I just wanted to add: A port forwarding in the firewall of your router is the basically the same thing as a port forwarding on your Linux computer’s firewall. You could just set up any VPN, SSH tunnel or whatever and then use your firewall (nftables, iptables) and forward the VPS’ extetnal port to the internal port on the VPN. It’s the same thing you do on your router, just that you don’t get a graphical interface to configure it.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Reuse old server for a youth centerEnglish
2·21 days agoI’ll do my very best. I mean not “have you heard of our lord and saviour RMS” style… But you can definitely have some fun with teaching teenagers to use Kdenlive. Or ask them whether they’re interested in setting up a Luanti world with loads of additional mods. 😀
Yes. With other projects, I often found it is problematic. Like Claude come up with lots of advertisement text, but the software doesn’t even do a fraction of it. Or the install instructions are made up and nothing works… So I usually advise for caution once a project has a wide disparity in claims, stars and signs of actual usage… But I can’t tell what’s the case here, without a proper look. It definitely has some red flags.
I appreciate people being upfront, as well. Ain’t easy. Just try to install and test it before advertising for the project.
Yeah, they’re transparent about AI usage. There’s a small paragraph at the bottom of their README.
I mean the website sounds like AI text. The repo is fairly new. Only 1 issue report about how something doesn’t work, zero PRs and seems it’s a single person uploading commits… I’d wait a bit before deploying my production services on it 😅 They’re making a lot of bold claims in the README, though.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Reuse old server for a youth centerEnglish
8·22 days agoI think so as well. The computer isn’t really good to “use” it. That’s more the category for experiments. Or teach people how to install Linux. Or a computer museum corner and you put vintage games on it. Or just recycle it.
And a box with RAM sticks collecting dust isn’t useful either. Put whatever is compatible into other computers, and then try to sell and recycle them. Seems 4GB DDR3L RAM modules still sell for 1 to 4€ on eBay?! So maybe you can make a few bucks to invest in other projects for the kids.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Checking....what's the status for FOSS agentic AI models with skills?English
1·25 days agoI think you need some Agent software. Or a MCP server for your existing software. It depends a bit on what you’re doing, whether that’s just chatting and asking questions that need to be googled. Or vibe coding… Or query the documents on your computer. As I said there’s OpenClaw which can do pretty much everything including wreck your computer. I’m also aware of OpenCode, AutoGPT, Aider, Tabby, CrewAI, …
The Ollama projects has some software linked on their page: https://github.com/ollama/ollama?tab=readme-ov-file#chat-interfaces
They’re sorted by use-case. And whether they’re desktop software or a webinterface. Maybe that’s a good starting point.What you’d usually do is install it and connect it to your model / inference software via that software’s OpenAI-compatible API endpoint. But it frequently ends up being a chore. If you use some paid service (ChatGPT), they’ll contract with Google to do the search for you, Youtube, etc. And once you do it yourself, you’re gonna need all sorts of developer accounts and API tokens, to automatically access Google’s search API… You might get blocked from YouTube if you host your software on a VPS in a datacenter… That’s kinda how the internet is these days. All the big companies like Google and their competitors require access tokens or there won’t be any search results. At least that was my experience.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Checking....what's the status for FOSS agentic AI models with skills?English
3·25 days agoThanks! I didn’t know about these. I was just aware of Apertus from the Swiss National AI Iniative. But from my experience, they weren’t great. Might look into Olmo 3, then.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•Checking....what's the status for FOSS agentic AI models with skills?English
8·26 days agoWe got open-source agents like OpenCode. OpenClaw is weird, and not really recommended by any sane person, but to my knowledge it’s open source as well. We got a silly(?) “clean-room rewrite” of the Claude Agent, after that leaked…
Regarding the models, I don’t think there’s any strictly speaking “FLOSS” models out there with modern tool-calling etc. You’d be looking at “open-weights” models, though. Where they release the weights under some permissive license. The training dataset and all the tuning remain a trade secret with pretty much all models. So there is no real FLOSS as in the 4 freedoms.
Google dropped a set of Gemma models a few days ago and they seem pretty good. You could have a look at Qwen 3.5, or GLM, DeepSeek… There’s a plethora of open-weights models out there. The newer ones pretty much all do tool-calling and can be used for agentic tasks.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•I Replaced $150/Month of SaaS With a $24 VPS and a Weekend — Building Your Private AI Infrastructure [1/5]English
5·29 days agoYeah, I think the em-dashes are alright. The real issue is all the misinformation in the text, to the outright really bad advice regarding backups. And security. If anyone follows this tutorial, they’re bound to get burned. Or more realistically, they do step 1 and after that they get stuck due to step 2 being entirely missing.
I’d say chances this is a person from Japan is slim to none. It’s the AI’s persona roleplaying as an anime character.
hendrik@palaver.p3x.deto
Selfhosted@lemmy.world•I Replaced $150/Month of SaaS With a $24 VPS and a Weekend — Building Your Private AI Infrastructure [1/5]English
7·29 days agoCost? Just do away with your bills and do it on a $24 Vulture VPS 🥹😂
Uh. I don’t know the exact mechanisms behind Google Analytics. But if I had to take a guess, I’d say installing an Addon to tell the JavaScript not to report anything, doesn’t sound like the most clever solution?! I’d rather block that entire tracking library, and prevent it from running in the first place. Any AdBlocker should be able to accomplish that.
Kind of questionable IMO why this Addon even exists… Maybe they’re forced by law (somewhere) to offer a general opt-out like this. Or it makes sense to offer some minimal solution so users might use this rather than something more effective, developed by a third party?!