l3s2d

What's the future of enterprise self-hosting?

Cloud offerings that hook into your existing IAM are really good these days. In fact, even the IAM can be off-prem (Okta). It relieves the maintenance and upgrade burden significantly.

Yet, open source + self-hostable services have found a niche. Many organizations can't use off-prem for anything remotely sensitive, so they turn to software like GitLab and Mattermost. Interestingly, I have noticed that these self-hosted services broaden their scope to incorporate functionality that might be covered by another service, to reduce said on-prem maintenance burden.

Interesting, I haven't noticed any slowdown, but I am running fairly low traffic services.

I do see that RemoteAddr is from a private IP range. Luckily I'm not using this information anywhere, but good to know.

This has been a major pain point for me. Despite my `firewalld` configuration only allowing specific traffic, all my containers were exposed.

My current policy is to set `"iptables": false` in Docker's `daemon.json` on any public machine. I don't understand why this isn't the default.

Here's some more HN discussion around this: https://news.ycombinator.com/item?id=14533398

And the relevant doc in the kernel source: https://github.com/torvalds/linux/blob/master/Documentation/...

Small players are still free to use the software under the terms of the GPL. What if the software were only available under the GPL with no commercial licensing option? The small players would be in the same scenario.

I think you're right in that it is somewhat against the spirit of the GPL. That said, I'd like to offer another perspective: Dual-licensing with the GPL allows for the open sourcing of programs that would otherwise have been proprietary. I think this benefit greatly outweighs the moral quandary. The potential for forking alone is a huge boon to the open source community.

RMS's thoughts on dual-licensing: https://www.fsf.org/blogs/rms/selling-exceptions

In this scenario, how do you track which parts of each file are GPL and which parts are MIT?

I like to use nethogs for quickly looking at per-application traffic. Requires root.

Related: trickle (per application bandwidth shaping) and wondershaper (per interface bandwidth shaping) are great for testing.

Are you sure you can share Wayland windows? To my knowledge screen sharing support for Electron apps is experimental or hasn't landed yet.

Xwayland windows (most games and Discord itself would fall into this category) can be shared.

On most Linux distros the `python` package corresponds to Python 2. Likewise, most distros have a `python3` package with a relatively recent Python 3 version. This is for compatibility reasons and won't change anytime soon.

The most notable exception is probably Arch Linux, which has Python 3 available in the `python` package.

The bit about attitudes towards shared payments is fascinating. I wonder if this is truly attitude or just lack of choice.

Are there any concrete examples of existing systems where people choose to pay more when the alternatives are significantly cheaper but pricing is shared?

Hypothetical example scenario: Someone would choose to pay $10 for their own water instead of $2.50 (on average, with minor fluctuations), in order to avoid subsidizing other tenants' water usage. The difference in cost could be attributed to the maintenance burden of many monitoring devices. I have a hard time believing anyone would choose the more expensive option.

Source available, not open source.

There is Metastream (https://getmetastream.com/), but it doesn't seem as easy to use.

Just tested on sway, it draws the title bar, but otherwise seems to work.

I agree in principal, but in practice this isn't as easy as one would hope. Each IdP has slightly different requirements and parameters for connecting clients. There may be significant code non-overlap across providers, not to mention across platforms.

Facebook, for instance, doesn't actually implement OpenID Connect, but has a custom layer on top of OAuth. Their recommended method of connecting is a client SDK for each platform.

Not a Nix user, but my understanding is that it's a standalone package manager with its own repositories. On a non-Nix distro, installing a package with Nix is akin to installing a Python module with pip, instead of the distro's package manager. It would not be managed at all by the distro's package manager. On NixOS, Nix is the distro's package manager.

I use a systemd user service. It sounds like you're on OS X, so you won't have systemd. Cron should work.

Here are my systemd files for reference.

Service:

  [Unit]
  Wants=network-online.target
  After=network-online.target

  [Service]
  Type=simple
  ExecStart=/bin/bash -c "/usr/bin/restic unlock && /usr/bin/restic backup --verbose --one-file-system --exclude-caches --exclude=$XDG_CACHE_HOME %h && /usr/bin/restic forget --keep-last 5 --prune && /usr/bin/restic cache --cleanup --max-age 30"

  [Install]
  WantedBy=default.target

Environment (fill these in with your keys):

  [Service]
  Environment="B2_ACCOUNT_ID="
  Environment="B2_ACCOUNT_KEY="
  Environment="RESTIC_REPOSITORY="
  Environment="RESTIC_PASSWORD="

Timer:

  [Timer]
  OnCalendar=*-*-* 00:30:00
  RandomizedDelaySec=20min

  [Install]
  WantedBy=timers.target

I would recommend restic with B2. Really simple to set up. I use it for nightly homedir backups for multiple machines. Currently at ~400GB and it's costing me < $3/month.

See here for details: https://github.com/jitsi/jitsi-meet/issues/4758

Some relevant links: https://aur.archlinux.org/packages/linux-clear/ https://www.reddit.com/r/archlinux/comments/7rcvxc/clear_lin...

Tangentially related, there was an interesting Reddit post on this a few years ago: https://www.reddit.com/r/askscience/comments/2ayhkp/if_someo...