

deleted by creator
A software developer and Linux nerd, living in Germany. I’m usually a chill dude but my online persona doesn’t always reflect my true personality. Take what I say with a grain of salt, I usually try to be nice and give good advice, though.
I’m into Free Software, selfhosting, microcontrollers and electronics, freedom, privacy and the usual stuff. And a few select other random things as well.


deleted by creator


Thanks for the link! As a short aside for the other people here: Try not to spam developers. That usually achieves the opposite and makes them miserable, when we want them to not burn out, and write good software for us. A thumbs-up emoji is the correct reaction for the average person. Or for the pros - a code-review highlighting specific issues within the code.


Uh. I’d really prefer if people experimented with new technology a bit more cautiously and not directly jump to “the biggest release […] ever done”.


I feel Anti-DDOS and Cloudflare as a web application firewall has traditionally been a lot of snake-oil as well. Sure there’s applications for it. Especially for the paid plans with all the enterprise functions. And all the way at the other end of the spectrum, where it serves as a means to circumvent NAT and replace DynDNS. But there’s a lot in-between where I (personally) don’t think it’s needed in any way. Especially before AI.
From my own experience, personal blogs, websites of your local club, church, random smaller projects, small businesses… rarely need professional DDoS protection. I’ve been fine hotsing it myself for decades now. And I’m not sure if people know what they’re paying with. I mean everytime we get a Cloudflare hiccup (or AWS…) we can see how the internet has become very centralised. Half of it just goes down for an hour or so, because we all rely on the same few, big tech services. And if you’re terminating SSL there, or use it to look inside of the packets to prevent attacks, you’re giving away all information about you and your audience/customers. They don’t just get all metadata, but also read all the transferred content/data.
It all changed a bit with the AI crawlers. We definitely need countermeasures these days. I’m still fine without Anubis or Cloudflare. I block their IP ranges and that seems to do most of the job. I think we need to pay a bit more attention to what’s really happening. Which tools we have, instead of always going with the market leader with the biggest marketing budget. Which problems we’re faced with in the first place and what tools are effective. I don’t think there’s a one size fits all solution. And you can’t just roll out random things without analyzing the situation properly. Maybe the correct answer is Cloudflare, but there’s also other way less intrusive and very effective means available. And maybe you’re not even the target of script kiddies or annoyed users. And maybe your your convoluted Wordpress setup isn’t even safe with the standard web application firewall in front.
Anubis is an entirely different story. It’s okay concerning privacy and centralisation. It doesn’t come without downsides, though. I personally hate if that thing pops up instead of the page I requested. I don’t like how JavaScript is mandatory now to do anything on the web. And certain kinds of crawler protection contribute to the situation how we can’t google anything anymore. With all the people locking down everything and constructing walled gardens, the internet becomes way less useful and almost impossible to navigate. That’s all direct consequences of how we decide to do things.


Hmmh. I’m not entirely satisfied with any of them. Crowdsec is a bit too complex and involved for my taste. And oftentimes there’s no good application config floating around on the internet, neither do I get any sane defaults from my Linux distribution. Whereas fail2ban is old and eats up way too much resources for what it’s doing. And all of it is a bit too error-prone(?) As far as I remember I had several instances when I thought I had set it up correctly, but it didn’t match anything. Or it was looking for some logfile per default but my program wrote to the SystemD journal. So nowadays, I’ll double-check everything. I wish programs like sshd and webapps came with that kind of security built in in some foolproof way.


For remote management, I just enable SSH, configure it to run on some non-standard port and enable Fail2ban… Make sure I use certificates or secure passwords and also check if fail2ban is actually doing its job. Never had any issues with that setup.
For the services I’ll either use a reverse proxy, plus configure the applications not to allow infinite login attempts, or Wireguard / a VPN.


I follow a similar strategy. I back up my important stuff. And I’m gonna have to re-rip my DVD collection and redownload the Linux ISOs in the unlikely case the RAID falls apart. That massively cuts down on the amount of storage needed.


Yeah, they often get quite warm. Some day I’ll be in the same situation as OP. And I can’t wait to throw out that supid modem. No clue, though what kind of SFP the fiber provider requires. I mean there’s quite a selection available…


Maybe correct? Though my cable modem gobbles down some 15W… Without even doing the Wifi… So, I bet this isn’t a universal truth, as a Mini-PC will comsume less and provide all kinds of extra services, networking, NAS…


You should have all kinds of options on Lemmy… You can edit a post and change it to whatever you like. Or delete it and optionally post a new one…


Just delete the post if it’s a mess-up.


Livekit can be used to build voice assistants. But it’s more a framework to build an agent yourself, not a ready-made solution.


And there’s another custom component, integrating all servers with an OpenAI-compatible API endpoint: https://github.com/jekalmin/extended_openai_conversation


HA isn’t the only option. I think there’s two other open source smarthome solutions out there(?) And you could probably do with just an MQTT broker and a Python script, or something like that…
But HA isn’t a bad choice. They’re doing a phenomenal job. And related projects like ESPHome make it really easy to integrate microcontrollers. And if you want to do more smarthome stuff, it has a plethora of features, integrations, an app…
Extra hardware isn’t absolutely necessary. I have one server at home which does NAS, and I use 4GB of it’s RAM to run a virtual machine with Home Assistant. That’s enough for it, including a bunch of Addons.
You could try to debug the permission issue… Like take a note of the current permissions, chmod the certificates to 666 and the parent directories to 777 and see if that works. Then progressively cut them down again and see when it fails. And/or give caddy all the group permissions ssl, acme, certwarden… and then check which one makes it fail or work.
Kind of the reason why I quit Netflix. For once it got more expensive each year. And at some point there was less and less of my favorite shows on there, so I’d need to subscribe to a second service for Star Trek… then a third one for all the good stuff that’s Disney… And I don’t even watch that much TV. So instead, I just quit. Maybe one day I’m gonna read a book on a Friday evening 😆 Or the stuff the government forces me to pay for.
Puh, ziemlich fokussiert auf Video. Ich ersetze damit mehr meinen Chat, Cloud-Office, Social Media… Aber der Return of Investment ist da weniger die Abo-Gebühr 😅


Also got a nice Dell 7390 for a similar price a year ago. Though you really can’t compare a laptop bought in 2019 with a laptop bought 6 years in the future. You’d need to compare it to a refurbished one available for a similar price in 2019 and then factor in how that turned out for you a few years later. I mean technology always progresses and you’ll always get more a few years later. But yes, I’ve always been a fan of refurbished enterprise-grade laptops instead of the super-cheap consumer ones which include as much cost-cuttings as possible and a legacy CPU which is upmarketed because it’s cheap. I think my old desktop Celeron N4500(?) was like 40€ when it was new, because it was leftovers in production. At that point you can always buy a used processor for the same price with double the processor cores.


Nice, thanks for the link! I wasn’t aware of that. Sadly as with all shiny new things it doesn’t fit all my requirements… I’d really like to speak to my house in my native language. But I figure English will do. I’m gonna try that.
Not sure if an ESP32-S3 is fast enough for more advanced DSP plus the rest of an voice assistant. At least I found some ESP32 libraries with noise reduction, echo cancellation… There is the ESP-ADF and a project called ESP32-SpeexDSP. But I didn’t try that yet. The Rockckip / Luckfox development board looks nice as well. A Cortex-A7 and a few hundred megabytes of memory might come in handy. And whatever the NPU does. But I don’t have a clue what kind of software and libraries we got for embedded Linux or custom processing units.
Anyway. I think the production-grade stuff mostly uses multiple microphones and a combination of beamforming and echo cancellation. I got 4 inmp441 microphones here. But I lack the software/libraries to tinker with that kind of signal processing.
What I do is use externed_openai_conversation from the HACS to hook into my LLM’s OpenAI-compatible API endpoint. That one makes it available via the regular Voice Assistant stuff within Home Assistant.
Not sure what’s happening here. The Ollama page says it doesn’t have all functionality, for example it doesn’t have sentence triggers? And weather forecast is a bit of a weird one in Home Assistant. That’s not an entity (unless you configure one manually) but a service call to fetch the forecast. Maybe your AI just doesn’t have the forecast available, just the current condition and maybe current temperature. Everything else must be specifically requested with a deliberate “weather.get_forecast” call. Maybe that service call and the specific processing is in the official Assistant, but not in the Ollama integration?