Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ditching Obsidian and building my own

amberwilliams.io

Post reply on HN
Print view View original

261–270 of 570 posts

Re: Ditching Obsidian and building my own

#261

Post by ra »

dankebitte wrote: post #249
miki123211 wrote: post #240

Earlier quoted context omitted.

Even better, set up Tailscale. It's far easier to set up, is much more reliable (e.g. when devices are behind firewalls), and uses direct (encrypted) connections when possible. You can get it to do what you want with just a few clicks. Things like exposing a IoT VLAN on your Tailnet or setting up an exit node to tunnel all internet traffic through your home are super easy. You can even share specific devices with fri…

> If you aren't comfortable with trusting them with control over your network Wrt the possibility of Tailscale being compromised, there's the in-beta tailnet lock feature: > Tailnet lock lets you verify that no node is added to your tailnet without being signed by trusted nodes in your tailnet. When tailnet lock is enabled, even if Tailscale infrastructure is malicious or hacked, attackers can't send or receive traff…

The pricing page suggests this is only for the "enterprise" plan.

Re: Ditching Obsidian and building my own

#262

Post by Zambyte »

bloqs wrote: post #250
Zambyte wrote: post #94

Earlier quoted context omitted.

These solutions are composable. Just run it on a VPS over a VPN.

But what if your home hypervisor goes down?

Nothing. You probably though I said "VPN over a VPS", which would just be the same as a VPN, which isn't composing the solutions.

Re: Ditching Obsidian and building my own

#263

Post by GCUMstlyHarmls »

rtrgrd wrote: post #252
miki123211 wrote: post #240

Earlier quoted context omitted.

Even better, set up Tailscale. It's far easier to set up, is much more reliable (e.g. when devices are behind firewalls), and uses direct (encrypted) connections when possible. You can get it to do what you want with just a few clicks. Things like exposing a IoT VLAN on your Tailnet or setting up an exit node to tunnel all internet traffic through your home are super easy. You can even share specific devices with fri…

Or, for those who are paranoid about relying on a company, setting up headscake is relatively quick and painless too - currently using it to sync between devices across multiple cities.

headscale*

https://headscale.net/stable/

https://github.com/juanfont/headscale

Re: Ditching Obsidian and building my own

#264

Post by cobertos »

lolinder wrote: post #6

> Since my PKMS is hosted online to manage notes across devices, I have multiple layers of security to ensure my notes are kept private. {Screenshot of a login form} The biggest life hack I can recommend for a self hoster is to set up a VPN on your local network and then just never expose your services on the public internet unless you're specifically trying to serve people outside your own household. Before I did th…

Any idea on how to segment a VPN between friends? I have a few critical servers on my VPN I only want one or two devices to access, but no other devices. Mostly so that in case a rogue device enters or a friend gets hacked, there's no access to my sensitive services.

Re: Ditching Obsidian and building my own

#266

Post by dankebitte »

ra wrote: post #261
dankebitte wrote: post #249

Earlier quoted context omitted.

> If you aren't comfortable with trusting them with control over your network Wrt the possibility of Tailscale being compromised, there's the in-beta tailnet lock feature: > Tailnet lock lets you verify that no node is added to your tailnet without being signed by trusted nodes in your tailnet. When tailnet lock is enabled, even if Tailscale infrastructure is malicious or hacked, attackers can't send or receive traff…

The pricing page suggests this is only for the "enterprise" plan.

Not sure which page you're referencing, but the linked page states it's available for Personal (free) as well:

> Tailnet lock is available for the Personal, Personal Plus, and Enterprise plans.

Re: Ditching Obsidian and building my own

#267

Post by vijucat »

Thank God I got over my tendency for gravitating to such bike-shedding [1] projects! While I appreciate that such pet peeves may result in a net benefit to the world, right now, I am in a place where I would cringe at even taking the risk of upgrading a piece of software that is working fine (like how often has upgrading Pylance or vscode resulted in something breaking? Every single time). The real, actual work is so so so difficult. Sitting down and starting (after attending to family obligations, eating, showering, changing clothes, commuting, et al). Getting into a productive flow state. Not getting interrupted. Not getting distracted. Just choose one thing, anything (OneNote, Evernote, whatever) and get to the real work, I beg you. Productivity + don't mess with success.

https://thedecisionlab.com/biases/bikeshedding

Re: Ditching Obsidian and building my own

#268

Post by colordrops »

lolinder wrote: post #6

> Since my PKMS is hosted online to manage notes across devices, I have multiple layers of security to ensure my notes are kept private. {Screenshot of a login form} The biggest life hack I can recommend for a self hoster is to set up a VPN on your local network and then just never expose your services on the public internet unless you're specifically trying to serve people outside your own household. Before I did th…

I built a home server project that manages many of the rough edges around deployment of self-hosted apps. It includes DDNS, router+firewall, headscale, automatic setup of apps, and automatic deployment of subdomains and TLS certs for each app.

Apps are blocked to the public by default but accessible using a Tailscale client.

It's built on top of NixOS and completely configurable through a single module.

Still in heavy development but I've replaced an entire rack in my closet with an Intel NUC.

https://homefree.host

Re: Ditching Obsidian and building my own

#269

Post by twodave »

Maybe I’m just not a very insightful person, but I can’t imagine ever having so many original and valuable thoughts that I’d need a place to store them. In fact, many of the things I think end up being wrong, so I’d rather use the Internet as my “PKMS” since it is more likely to refine what I think I know.

Re: Ditching Obsidian and building my own

#270

Post by cypherpunks01 »

dankebitte wrote: post #249
miki123211 wrote: post #240

Earlier quoted context omitted.

Even better, set up Tailscale. It's far easier to set up, is much more reliable (e.g. when devices are behind firewalls), and uses direct (encrypted) connections when possible. You can get it to do what you want with just a few clicks. Things like exposing a IoT VLAN on your Tailnet or setting up an exit node to tunnel all internet traffic through your home are super easy. You can even share specific devices with fri…

> If you aren't comfortable with trusting them with control over your network Wrt the possibility of Tailscale being compromised, there's the in-beta tailnet lock feature: > Tailnet lock lets you verify that no node is added to your tailnet without being signed by trusted nodes in your tailnet. When tailnet lock is enabled, even if Tailscale infrastructure is malicious or hacked, attackers can't send or receive traff…

Thanks for the tip!

I've had the Device approval setting on, and wished there were more robust lock features, but not enough to want to run my own coordinator. So Tailnet lock seems like a good security upgrade.

Post reply on HN