Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
Still kinda sad that ip6 still hasn't taken off, that would give literally every toaster in the world its own static ip
I'm convinced it hasn't taken off because they're too complicated for the human brain to easily reference. Four triplets is simple enough.
All the shortening rules trip me up. I'd much rather work with addresses with standardized number of hextets and ideally the same number of digits than not have to type a few zeros.
all of these are the same address: 2041:0000:0001:0000:0000:0000:875B:131B 2041:0000:0001::875B:131B 2041:0:0001::875B:131B 2041:0000:1:0000:0000:0000:875B:131B 2041::0001:0000:0000:0000:875B:131B 2041::1:0000:0000:0000:875B:131B 2041::0001:0:0:0:875B:131B 2041:0:1::875B:131B 2041:0:1:0:0:0:875B:131B 2041:0000:1:0000:0000:0000:875B:131B 2041:0000:01:000:00:0:875B:131B 2041:00:1::0:875B:131B
Ugh. Yes.
The fact that they have shortening rules already shows it's too complicated.
They would've been better off with a shorter length, and ditching hex for a base 32 string.
Imo they should have kept the ipv4 format but instead of maxing out at 255.255.255.255 make it 65535.65535.65535.65535 this aproach makes the address pool more than 4000000000 times larger and is backward compatible with ipv4 so it could be a drop in replacement for most things. And if we ever do end up running out of over quintilion (18446744073709551616) ips we can just keep going up, to 4294967295.4294967295.4294967295.4294967295.
What's the problem?
Once you learn IPv6 it isn't bad. I would highly recommend that you check out onemarcfifty IPv6 videos
True that. They're also less recognizable as an ip address. They don't stand out
That's what DNS is for.
Well, yes, for users. But I'm in tech. And it's the tech people that need to implement it. And when I'm trying to hunt down why something about DNS or a firewall rule isn't working, I really don't want to be juggling gigantic alphanumeric strings.
DNS doesn't work over IPv6 since it doesn't allow fragmentation
It really isn't all that complicated. Honestly in some ways it is easier since you don't need to worry about subnetting. Also SLAAC is pretty cool.
The key to IPv6 is to not apply your IPv4 brain to it. It works very differently and in some ways it is better.
Since I am behind CG NAT I try to use IPv6 for most things at home. It works pretty well most of the time. Also a lot of Software (or should I say games) that claim to not support ipv6 do, as long as you can give them a domain that only has AAAA entries...
SLAAC is pretty cool if it works and if you can weed out all the devices with privacy extensions enabled by default, so you can properly apply rules...
I really don't like the idea of every device automatically having a publicly reachable IP.
There's certainly situations where that would be nice; but I'm quite fond of most equipment and services being behind a router and it's firewall, requiring explicit configuration to be exposed to the open net.
Nobody outside my home network ever needs access to my toaster... (btw, why tf is my toaster wifi enabled...?)
A Firewall and NAT are to different things. All devices would still be behind a Firewall so they would effectively be invisible from the outside except for when they make an out going connection.
If you really want NAT for IPv6 you could use NAT66. It isn't technically the IPv6 way of doing things but it works. The main benefit with NAT is that you don't need to worry about prefixes.
Nat is not a firewall....
Seriously. Unless you open up your Lan to the internet it functions the same way as ipv4 in respect to receiving unsolicited queries from the internet. All those are dropped.
You would have to specifically open a port in your firewall before anyone could access a device over IPv6 on your network from the internet. Just like you would have to forward a port on IPv4.
It's kind of like AI or 'the cloud'. Everything now has access to at least your wifi. Hell, even my rumba has wireless access. I didn't activate that feature. I live in a very small house. If I want to restart it, I can walk over to it and push the restart button. Refrigerators with flat screen embedded in the door? Who is that for? I just want my fridge to keep everything cold. I absolutely love technology. I think it's wonderful. However, imho, not everything needs internet access, or AI, or 'the cloud'. I did build a little 'magic mirror' a while back that alerts me about weather, schedules, keeps track of a couple of my 25 different security cams, but that's about it. I haven't purchased a vehicle in quite a long while now, but I would guess the gadgetry saturation is pretty high.
IPv6 is really widespread.
It is also the classic case of death by a thousand cuts.
I want to be able to buy an IPv6 block and then be able to use it anywhere easily.