Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @dan@d.sb

  • 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle


  • dan@upvote.autoSelfhosted@lemmy.worldEncrypted backups to the cloud
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    4 hours ago

    I use Borgbackup, with borgmatic to configure and periodically run it. I have two storage VPSes “in the cloud”, and back up to both of them. My main storage VPS is a HostHatch one with 10TB space for $10/month. I got it during Black Friday sales in 2021.

    If you do back up to multiple destinations, Borgbackup’s devs recommend configuring two separate backups, rather than doing a backup to one server then syncing it to the second one. This is to handle the case where one of the backups becomes corrupted.

    Hetzner have decent deals on their “storage boxes”. You don’t get root access, but they support Borgbackup, restic and rclone in addition to the regular protocols (SFTP, FTPS, WebDAV, SMB).

    Make sure you configure the SSH key to only allow it to run borgbackup in “append only” mode, so that malware/ransomware on the client system can’t delete the backups. This is a common issue with other backup solutions like rsync - the client has full access to the server, so a malicious user/code could delete the whole backup.


  • This isn’t strictly true because most games do still have a playable version on the disk

    At least on my Xbox, there’s games where it wouldn’t let me play them unless some updates were installed. “day one patches” are very common in the video game industry these days.

    legally transferable due to doctrine of first sale as I understand it.

    The first sale doctrine applies to physical goods. The game companies are moving towards the games always being digital goods, and the disc simply being a physical license key for the digital games. I’m not sure if the doctrine would apply in the same way in this case.




  • Why is ActivityPub “the” Fediverse? “Fediverse” is very broad and encompasses multiple protocols, a lot of which predate ActivityPub becoming commonplace.

    The original Fediverse apps are still around and don’t use ActivityPub. For example, StatusNet / GNU Social use OStatus and Identica uses Activity Streams / ActivityPump (which was the protocol before ActivityPub). diaspora (if it’s still around) used its own protocol too.

    Some of the older apps have adapted to use ActivityPub, while some of them still exist in their own separate part of the Fediverse.




  • For DNS challenges, I personally prefer using acme-dns. It’s a separate DNS server that only serves ACME DNS challenges. I felt a bit uneasy using an access token for my actual DNS host since it grants full read/write access to every record. acme-dns reduces the attack surface.

    Let’s Encrypt follows CNAMEs and supports IPv6-only DNS servers, so you could just run acme-dns on a spare IPv6 address (assuming your internet provider has a static IPv6 range, or you have a VPS with IPv6).