• 1 Post
  • 40 Comments
Joined 21 days ago
cake
Cake day: June 9th, 2024

help-circle

  • One thing to be careful of that I don’t see mentioned is you need to setup ACLs for any local-only services that are accessible via a web server that’s public.

    If you’re using the standard name-based hosting in say, nginx, and set up two domains publicsite.mydomain.com and secret.local.mydomain.com, anyone who figures out what the name of your private site is can simply use curl with a Host: header and request the internal one if you haven’t put up some ACLs to prevent it from being accessed.

    You’d want to use an allow/deny configuration to limit the blowback, something like

    allow internal.ip.block.here/24; deny all;

    in your server block so that local clients can request it, but everyone else gets told to fuck off.



  • I’ll be the contrary one: I tried a lot of things and ended up, eventually, going back to Nextclolud, simply because it’s extendable and can add more shit to do things as you need it.

    File sync and images may be all you need now, but let’s say in the future you want to dump Google Docs, or add calendar and contact syncing, or notes, or to do lists, or hosting your own bookmark sync app, or integrating webmail, or…

    It’s got a lot of flaws, to be sure, but the ability to make it essentially do every task you might want cloud syncing with to at least a level of ‘good enough’, has pretty much kept me on it.









  • So, I posted this on a similar thread a few days ago, but plex and/or jellyfin do an amazing job of user/library seperation, music streaming, AND have apps for every relevant platform you’d remotely care about: phones, computers, browsers, widgets plugged into your tv, etc.

    It’s a little odd nobody has bothered to do a really good multi user/library audio-only app, but plex+plexamp or jellyfin+finamp is a pretty great solution as it is.