Automated CI/CD Data Snapshots
rhymepurple
1 Post – 27 Comments
Joined 2 years ago
A free, libre, opensource, and privacy focused alternative to Zoom is Jitsi, which can be used without an account.
If you want even more privacy, you could host your own video conferencing service. Some options are below.
Congrats on getting everything working - it looks great!
One piece of (unprovoked, potentially unwanted) advice is to setup SSL. I know you're running your services behind Wireguard so there isn't too much of a security concern running your services on HTTP. However, as the number of your services or users (family, friends, etc.) increases, you're more likely to run into issues with services not running on HTTPS.
The creation and renewal of SSL certificates can be done for free (assuming you have a domain name already) and automatically with certain reverse proxy services like NGINXProxyManager or Traefik, which can both be run in Docker. If you set everything up with a wildcard certificate via DNS challenge, you can still keep the services you run hidden from people scanning DNS records on your domain (ie people won't know that an SSL certificate was issued for immich.your.domain). How you set up the DNS challenge will vary by the DNS provider and reverse proxy service, but the only additional thing that you will likely need to set up a wildcard challenge, regardless of which services you use, is an email address (again, assuming you have a domain name).
Calls made from speakers and Smart Displays will not show up with a caller ID unless you’re using Duo.
Is it possible to use Duo still? Google knows it discontinued/merged Duo with Google Meet nearly 18 months ago, right?
Change Detection can be used for several use cases. One of them is monitoring price changes.
Ultra-wideband
In addition to other use cases, it is used to precisely identify where a device is in relation to another one.
I'm not aware of any great FOSS/FLOSS Tasker alternatives. There are a few options, but they will be less capable, functional, extensible, user friendly, or modern.
More direct alternatives
-
Automation - Gitea repo / F-Droid
-
Easer - Github repo / F-Droid
Requires a server to run automations/dcripts
-
Home Assistant - Github repo / F-Droid
Requires scripts and may require a server and/or additional add-on apps
- Termux - Github repo / F-Droid
- Termux:API - Github repo / F-Droid
Just to clarify - this is just an update that (I believe) is only available on IzzyOnDroid's F-Droid Repo, which previously had prior Findroid versions available. This new v0.15.0 is not available on the main F-Droid Repo.
Is anyone only able to download the 32-bit version of this app via F-Droid? It looks like a 64-bit version has been made available starting with v0.3.0 and is also available on this new version.
Yes, there is a Linux desktop Electron app. Beeper provides the below links to download Beeper clients on Beeper's Download page.
The source code for the above clients are not available though. Beeper's self-host repo claims that the clients are closed-forks of Element's Android, iOS, Desktop, and Web apps.
However, Beeper's self-host Github repo outlines the steps required to self-host Beeper's web service, which is essentially a Synapse Matrix server, Mautrix bridges, and other bridges/bots/services to help run the Matrix Server and connect the Matrix Server to other services.
I'm not sure which use case you're referring to specifically, but I have not used any caption functionality in any of the services listed. However, I was able to find the below documentation. At a quick glance, it looks like Jitsi and BigBlueButton support captions better than Jami does.
- Jitsi
- BigBlueButton
- Jami
I know the project may still be in its infancy, but are there any current/prospective screenshots or design files for this initiative? Even better - is a live demo available?
Take a look at QuickWeather if you want a map.
There are several proprietary options (many/most of which you cannot host). Looking for Amazon Wishlist alternatives should help in putting together a list of potential options. Some additional projects which are open source and selfhostable that you could also start with include:
Jitsi isn't really a Slack alternative. Instead, it's more of a Zoom alternative.
However, Matrix is a great Slack alternative. Slack channels are similar to Matrix rooms, which can be organized into Matrix spaces. Matrix supports threads, replies, attachments, and formatted text like markdown or HTML. Slack's snippet functionality is not as great on Matrix and Slack's integrations with other services are likely easier to setup. There is likely a bunch of other pros/cons to Slack/Matrix depending on your use cases. The caveat is that you'll need to use a Matrix client and Matrix homeserver that support the Matrix functionality that you want.
Agreed. It would also be nice if they provided the source code, especially since its just a fork of an opensource project. Hopefully Beeper is at least up-streaming new features, bug fixes, etc.
What do you mean by "defaults to off"? The links for Jitsi were just to how it's set for recording. However, closed captions seem to be turned on by default already. I think that may be more what you are looking for?
Someone already mentioned Hacked on here, but some others are:
- Hacking Humans
- Malicious Life
- Modem Mischief
- What the Shell?
Some additional security related ones include:
- Caveat
- CSO Perspectives
- CyberWire Daily
- Paul's Security Weekly
- Research Saturday
- Risky Business
- Security Now
Thanks for confirming.
XMPP really needs better clients - even the good ones feel dated. Hopefully the timeline was not pushed back too much, if at all, and that this redesign can be the start of modernizing XMPP clients.
Some additional ideas for the Protectli device:
- backup/redundant OPNsense instance for high availability
- backup NAS/storage
- set it up at a family/friend's house
- a test/QA device for new services or architecture changes
- travel router/firewall
- home theater PC
- Proxmox/virtualization host
- Kubernetes cluster
- Tor, I2P, cryptocurrency, etc. node
- Home Assistant
- dedicated local STT/TTS/conversation agent
- NVR
- low powered desktop PC
There are so many options. It really depends on what you want, your other devices, the Protectli's specs, your budget, etc.
Everything I mentioned works for LAN services as long as you have a domain name. You shouldn't even need to point the domain name to any IP addresses to get it working. As long as you use a domain registrar that respects your privacy appropriately, you should be able to set things up with a good amount of privacy.
Yes, you can do wildcard certificates through Let's Encrypt. If you use one of the reverse proxies I mentioned, the reverse proxy will create the wildcard certificates and maintain them for you. However, you will likely need to use a DNS challenge. Doing so isn't necessarily difficult. You will likely need to generate an API key or something similar at the domain registrar or DNS service you're using. The process will likely vary depending on what DNS service/company you are using.
I think there may be an issue where F-Droid is not properly recognizing the 64-bit version of Findroid. Maybe Droid-ify and/or the version of Android you are using won't allow 32-bit apps to be installed.
Yes, I am using PersistentVolumes. I have played around with different tools that have backup/snapshot abilities, but I haven't seen a way to integrate that functionality with a CD tool. I'm sure if I spent enough time working through things, I may be able to put together something that allows the CD tool to take a snapshot. However, I think that having it handle rollbacks would be a bit too much for me to handle without assistance.
Thanks for the reply! I am currently looking to do this for a Kubernetes cluster running various services to more reliably (and frequently) perform upgrades with automated rollbacks when necessary. At some point in the future, it may include services I am developing, but at the moment that is not the intended use case.
I am not currently familiar enough with the CI/CD pipeline (currently Renovatebot and ArgoCD) to reliably accomplish automated rollbacks, but I believe I can get everything working with the exception of rolling back a data backup (especially for upgrades that contain backwards incompatible database changes). In terms of storage, I am open to using various selfhosted services/platforms even if it means drastically changing the setup (eg - moving from TrueNAS to Longhorn, moving from Ceph to Proxmox, etc.) if it means I can accomplish this without a noticeable performance degradation to any of the services.
I understand that it can be challenging (or maybe impossible) to reliably generate backups while the services are running. I also understand that the best way to do this for databases would be to stop the service and perform a database dump. However, I'm not too concerned with losing <10 seconds of data (or however long the backup jobs take) if the backups can be performed in a way that does not result in corrupted data. Realistically, the most common use cases for the rollbacks would be invalid Kubernetes resources/application configuration as a result of the upgrade or the removal/change of a feature that I depend on.
Didn't know about this. That's interesting!
Are you referring to this c3 branch? If so, there havent been any commits or pull requests for a few months now. Is there a timeline posted anywhere for the "soon-ish" release of the redesign?
How do you access the live demo? I don't see it anywhere in this thread nor on the Github repo.
Could you use symlinks? Not sure what the "gotchas" or downside to this approach is though.
Raspberry Pi + PiHole + PiVPN = Network Gateway Drug
Although, PiVPN is winding down so you might want to find something different instead. Setting up a regular Wireguard VPN isn't so bad, but it may be simpler to setup a Tailscale Tailnet.
tl;dr: A notable marketshare of multiple browser components and browsers must exist in order to properly ensure/maintain truly open web standards.
It is important that Firefox and its components like Gecko and Spidermonkey to exist as well as maintain a notable marketshare. Likewise, it is important for WebKit and its components to exist and maintain a notable marketshare. The same is true for any other browser/rendering/JavaScript engines.
While it is great that we have so many non-Google Chrome alternatives like Chromium, Edge, Vivaldi, etc., they all use the same or very similar engines. This means that they all display and interact with websites nearly identically.
When Google decides certain implementation/interpretation of web standards, formats, behavior, etc. should be included in Google Chrome (and consequently all Chromium based browsers), then the majority marketshare of web browsers will behave that way. If the Chrome/Chromium based browsers reaches a nearly unanimous browser marketshare, then Google can either ignore any/all open web standards, force their will in deciding/implementing new open web standards, or even become the defacto open web standard.
When any one entity has that much control over the open web standards, then the web standards are no longer truly "open" and in this case becomes "Google's web standards". In some (or maybe even many) cases, this may be fine. However, we saw with Internet Explorer in the past this is not something that the market should allow. We are seeing evidence that we shouldn't allow Google to have this much influence with things like the adoption of JPEG XL or implementation of FLoC.
With three or more browser engines, rendering engines, and browsers with notable marketshares, web developers are forced to develop in adherence to the accepted open web standards. With enough marketshare spread across those engines/browsers, the various engines/browsers are incentivized to maintain compatibility with open web standards. As long as the open web standards are designed and maintained without overt influence by a single or few entities and the open standards are actively used, then the best interest of the collective of all internet users is best served.
Otherwise, the best interest of a few entities (in this case Google) is best served.