Numbers from my instance, running for about a 1 year and with average ~2 MAU. According to some quick db queries there is currently 580 actively subscribed communities (it was probably a lot less before I used the subscribe bot to populate the All tab).

SELECT pg_size_pretty( pg_database_size('lemmy') ): 17 GB

Backblaze B2 (S3) reports average 22.5 GB stored. With everything capped to max 1 USD, I pay cents - no idea how backblaze does it but it’s really super cheap, except for some specific transactions done on the bucket afaik, which pictrs does not seem to do.

According to my zabbix monitoring, two months ago (I don’t keep longer stats) the DB had only about 14G of data, so with this much communities I am getting about 1.5G per month (it’s probably a bit more as I was recently prunning stuff from some dead instances).

Prometheus says whole lemmy service (I use traefik) is getting within about 5 req/s (1m average) though if I go lower it does spike a lot, up to 12 requests within a second then nothing for few.

Attach it to the VM

Is this possible only with the extra, bought storage boxes ? Or is this possible even with the free 100G backup boxes offered with each dedicated machine ? (Or is this just nfs mount?)

We have a dedicated machine in a project from Hetzner with big raided hard disks but the latency is starting creep up on us, moving some of the data off to the faster ssd/san boxes would be rather helpful.

Graphical applications should definitely do this, it’s rather easy to hit delete accidentally but in CLI? I wanna see a cat type rm and some valid parameters, so if the user typed the whole command out it should probably do just the one exact (destructive) thing.

Run your ip through ip abuse databases to make sure there is nothing wrong perceived from outside.

EU should not care about non-EU companies

How did you fail?

VLANs (Virtual LANs) are for isolating devices from each other (while still being plugged to the “LAN” ports of the same router).

Great wizard of the bitrates, grant me your wisdom…

I can’t wrap my head around bitrate - if I have a full hd monitor and the media is in full hd then how is it that the rate of bits can make so much difference?
If each frame in the media contains the exact 1920 × 1080 pixels beamed into their respective positions in the display then how can there be a difference, does it have to do something with compression?

MAS is open-source meaning anyone with the skill can verify what the powershell code does. This does not mean it’s absolutely safe and trustworthy but does give it a big plus.

(the way I understand it is that) It also uses a loophole in the free upgrades from older win versions to 10/11 to get you a valid license from Windoze servers directly - it is not a keygen or cracker.

So, I will vouch for MASgrave but care has to be taken to download it from the official site/repository.

MAM

Thanks for the explanation, I have played with like 30 mods max so the built-in mod manager seemed enough.

Also FYI all your english comments here are posted with language set to dansk so I couldn’t find it even though I got the notifications (seems lemmy does not really tell you you are trying to visit a comment in language you don’t have enabled in settings).

Why would you need this?

Maybe this https://github.com/Alinto/sogo

I wouldn’t recommend putting ssh behind any vpn connection unles you have a secondary access to the machine (for example virtual tty/terminal from your provider or local network ssh). At best, ssh should be the only publicly accessible service (unless hosting other services that need to be public accessible).

I usually move the ssh port to some higher number just to get rid of the basic scanners/skiddies.

Also disable password login (only keys) and no root login.

And for extra hardening, explicitly allow ssh for only users that need it (in sshd config).

I don’t use nginx proxy manager but websocket has to be enabled for apps that use websockets (duh) - you would have to dive into docs or example infra configs to check if the service uses it.
Rule of thumb here would be to enable it for everything. Optionally you could check if the service works with/without it.

E: Websockets are used when a website needs to talk in “real-time” with the servers - live views and graphs will usually use it also notifications, generally if the website does not reload/redraw fully but data seems to change then there is a high chance it uses websockets under the hood (but there are ways to do it without ws, ex. SSE).

Example: Grafana uses websockets but qbittorrent web ui uses other means (SSE) and does not require ws.

borg backup with rsync.net

Borg does de-duplication and compression, I’ve used it for multiple things like backing up minecraft servers and it can reduce the final backup size by a lot (like 1-2 TBs to a hundred of GB, though that was with content that was highly compressible and didn’t change much over-time so the deduplication did a lot too).

There is also borgbase.com which looks a bit better and focuses only on borg repositories instead of also being compatible with just about any usual tools (eg rsync, rclone etc)

I would try momentarily replacing the defined dns servers with nameserver 1.1.1.1 and see if stuff improves, though the pull error would hint that docker did resolve the name but somehow didn’t get an answer.
Hard to guess what else could be a problem apart from some obvious stuff - check if the internet connection is healthy and stable (ping, watch for spikes in ms or drops, also any outgoing firewall filters?)

There is also FX which can do this too, additionally you can browse/download/upload files to/from the phone locally from PC through browser (the app opens up a web server).

We’ve consolidated all our code into a single repository – just clone ente-io/ente on GitHub, and you will have at your disposal a state of the art, end-to-end encrypted, full stack (mobile/web/desktop clients, the server, and a CLI to boot) alternative to Google Photos and Apple Photos.

Getting into MAM is easy tho and you can branch from there, there are people sharing invites to others.

A bit of rant but I hope this can fix some of the discrepancies I have found between free Nginx and the Plus one:

If I want to configure (minimum amount of) proxy connections to keepalive then I have to use upstream ... { ... } directive, but by using that nginx changes how upstream proxy url is DNS resolved. Within docker this can actually cause problems when the nginx container starts sooner then the upstream service - afair to fix it one needs Nginx Plus because in free upstream DNS resolution “mode” can’t be configured.