For the Tor operators, how to you mitigate the risks associated with what’s being trafficked across your network?

I understand that. It’s quite a popular place in the selfhosting/homelabbing/opensource world.

I would agree. If you are going to cite alternatives, an easy to read comparison chart would be very helpful.

github

…which collects all manner of data from you: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

Just to say, even tho I do not have an immediate use case, the demo is very nice. It looks very polished and professional. Everything seemed to fit together nicely. I have bookmarked it in my /future_projects/ folder.

I’m probably telling you wrong, but I’ve only been able to do the cs-blocklist-mirror and firewall-bouncer. There are a bunch of the scenarios that are remediation components. If you look at something like cs-cloudflare-worker-bouncer, well I don’t have a use for the cs-cloudflare-worker-bouncer remediation component, so that doesn’t get installed. Same for remediation components like cs-aws-waf-bouncer. So yes, there are unlimited remediation components, just not all will fit your use case. As I understand it, you can even write your own, tho I’ve not dabbled in that aspect.

If all you want to do is look at Docker logs and the occasional syslog, then I would think Dozzle to be quite capable in conjunction with something along the lines of lnav.

Hey you never know. Could be the next big thing: Focker by Mo’Fugger Industries.

I’ve heard of Docker, Incus, k8s, VM, but not Focker. Is this some new containerization software?

On the free plan, you should be able to set up 2 remediation components, 4 blocklists, and a variety of scenarios. For the scenarios, I’d only install what you have need for.

As far as logs, I personally think something more along the lines of Grafana+Loki+Alloy (Formerly Prometheus) for logs and metrics. You could even use something like lnav. Lnav is simple to install. It’s not a dialed out dashboard of metrics, rather it keeps things simple. After install, to access it simply type lnav and the log location you wish to view: lnav /var/log/auth.log or lnav /var/log/syslog in the cli. Don’t let it’s simplicity fool you tho. It is quite capable.

I really tried with logging aps like ELK, Graylog, etc. I found them to be quite heavy for my environment. They certainly do have all the bells and whistles and pretty graphics, but again, it comes down to what can run on your server comfortably. I didn’t want to eat up 2/3 of my resources just to look at logs. The Grafana+Loki+Alloy combo really sips the resources. I think for all I have Grafana monitoring, it clocks in at around 2+/- gb in used resources.

I hear you Mr Audiophile. Thing is, all that space it takes to house a grand collection, when it all now fits on two 10TB drives filled with high res flac. I can’t tell a difference. Not saying there isn’t one, just saying I can’t hear it. So, for me, it works out perfect.

0K that’s cool. I love docker. I would like to upgrade to k8s but I haven’t yet plumbed the depths of docker. I was just with the overhead of docker, since Pi-Hole/Unbound is a dedicated system, I thought maybe it’d get better thru put baked in. I wouldn’t listen to me tho, I’m medicated.

How well does that run in docker? I’ve always liked docker, but it seems to me that certain apps should touch metal than be containerized. Maybe I’m too old school.

Gonic

Wow, I thought I had a large music collection. I mean, I can put the whole 80k on random and it will be months before I hear a repeat. 200k you’d hear a song and then maybe on your 80th birthday hear it repeat. LOL The larger majority of my songs are from Indie groups I used to promo.

I checked out Gonic.

My problem is that I cannot find a selfhosting solution that has the nuts to spool up 80k+ hi-res, original sourced, flac files that reside on two 10TB drives through my ancient technology. MusicBee is the closest thing I’ve come across, but that is local, and it struggles. I stay around the compound now days so local is ok, but it would be nice to stream out on the back porch without cranking my stereo to 11 so I can hear. I have bluetooth options but range is an issue.

This sort of thing ain’t my bag baby.

You’re fine. Thanks for the follow up.

Awesome!

As cool and neato as I find AI to be, I haven’t really found a good use case for it in the selfhosting/homelabbing arena. Most of my equipment is ancient and lacking the GPU necessary to drive that bus.

But I know what the answer is and it’s not as exciting as I’d like it to be.

At least you would know, and you would learn something new as I have done. I have set up to monitor syslogs, ufw logs, assorted metrics so far. I’m going to tackle using cAdvisor and ingest the data into Prometheus and display such data on my Grafana dash.

It’s fun and educational. Try it. At the very least when you’ve worn all the new off, you can just delete the docker containers.

I’m sorry to be the bearer of bad news. I read up on it about an hour ago. Of course, just as I finally get things running, they switch horses. le sigh…c’est la vie