• 0 Posts
  • 10 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle

  • Well, that’s kind of the problem of a fully open OS where the system administrator (root) can fine-tune everything.

    The (technical) purpose of DRM is to ensure the stream goes through a certified channel. This means encryption on the wire, as well as ensuring that the image data, from the point of decryption to the point of display, isn’t intercepted.

    For this, the DRM module needs absolute, un-overridable control over the process. With root access, one can easily load a modified GPU driver that funnels the decoded image data not just to the output display, but to a separate buffer (a file). Or not even go that far but simply snatch the encryption key from memory and decrypt the streamed media directly. The list goes on.


  • fonix232@fedia.iotoSelfhosted@lemmy.worldAuth apps
    link
    fedilink
    arrow-up
    11
    ·
    27 days ago

    “The best” depends on what you really need.

    Authentik and Authelia are two of the top most quoted solutions, but they aim to be an “everything in one” package, with tons of features a simple homelab will rarely need. They’re aimed more at enterprise-like setups.

    On the other end of the spectrum you have e.g. Pocket-ID, which only does OIDC by itself (you can hook up an LDAP server as user database though); but that tradeoff means it uses little to no CPU time, and, in my experience, around 130MB RAM. Given RAM is getting more expensive than gold, one needs to consider memory footprint, especially for older homelab setups. We can’t all be running 256GB nodes after all.

    So instead of hunting the mythical “best” solution, decide what features you really need, grab a list of providers that cover those features, and compare them to see what fits your needs best.


  • The recommendations so far are quite solid.

    I’d also add that crowdsec with the right collections as a primary filter within your reverse proxy setup can be extremely useful, potentially even better than fail2ban, as CS delivers a literal “scan every packet and put them against these rules” approach - where the rules are crowd sourced, thus are more up to date than any manual blocklists, filter list etc. can be, and can spot even 0day intrusion approaches.





  • I’m actually working on an all in one solution that sort of fills the roles of Readarr AND Calibre - without all the baggage of the latter.

    Oh, and of course a KOReader library plugin that foregoes OPDS and works like the Kindle interface (“available books” synced from this backend, one tap downloads them, plus potentially adding series handling too in the future).

    But right now it’s mostly manual downloads + CWA ingest + OPDS via KOReader.


  • Linux does come preinstalled on a number of laptops if you buy them in Europe.

    Problem is that the Linux variants used are usually incredibly out of date, with no straightforward way to upgrade, abysmal desktop experience and so on.

    There’s also simply too much choice when it comes to Linux for the average people. Your Average Joe wants to sit in front of a computer, turn it on, and have a usable desktop, readily available office and basic utility apps, and easy installation of software.

    They don’t want to learn the difference between KDE, Gnome, Cinnamon, X11 and Wayland, open or closed sourced drivers, licences, and so on. To most people, a computer is a tool that should be as complicated to use as a screwdriver - you can swap different heads (software for different purposes), but it works the same, no matter how you sit in front of if.

    Historically, there’s been a singular distro offering anything even close to this requirement, Ubuntu, and even that has gone to shit.

    Hopefully, with gaming being a major pull force, this can change and we will see more generic use distros pop up like Bazzite and SteamOS, but at the moment, there’s simply no alternative to Windows or macOS that can proper take them over.