Eskating cyclist, gamer and enjoyer of anime. Probably an artist. Also I code sometimes, pretty much just to mod titanfall 2 tho.

Introverted, yet I enjoy discussion to a fault.

  • 0 Posts
  • 30 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle


  • In that case, something is invalidating the login. Are you sure that it is happening due to leaving your LAN, and not just coinciding with that?

    Does restarting the laptop log you out, or temporarily disconnecting from the internet? Could you test by switching to a wifi hotspot on your phone, and switching back, for example?

    The client stores your session token in the OS credentials manager (kwallet for linux kde, for example) and the issue can lie there, as well.





  • Yes. But you didn’t.

    Knowing what something does is important.

    If you install a piece of software expecting it to do something it actually doesn’t, that can leave a security gap.

    I wasn’t just correcting you. I was making sure you knew that if you install a “firewall” it won’t do the thing you’re looking for.

    As for an actual answer, most distros will already ask you to confirm if you try to run a random appimage you downloaded.

    But you shouldn’t need to do that in the first place. On linux, there’s not really any need to go running random programs downloaded using your web browser, since you can just download software from trusted reposotories that aren’t going to host malware to begin with.

    Unlike on windows… You don’t need to risk it in the first place.





  • Almost everything you do on desktop linux is already “outside the core os”.

    This is mostly relevant for server software configuration, where you should run services with as few system privileges as possible. Preferably you isolate them entirely with a separate user with access to only the bare minimum it needs.

    This way, if a service is compromised, it can’t be used to access the core system, because it never had such access in the first place. Only what it needed to do its own thing.

    By default, nothing you run (web browser, steam, spotify, whatever) should be “running as admin”.

    The only time you’ll do that on desktop linux, is when doing stuff that requires it. Such as installing a new app, or updating the system. Stuff that modifies the core os and hence needs access.

    Basically, unless you needed to enter you password to run something, then it’s already “outside” the core os.








  • I also need to work out how to do automatic certificate renewal and if that’s even worth doing

    This is what certbot is for. For example, with nginx, you just set up the webserver to be reachable via your domain.

    You then install and run certbot, and it will aquire, install and configure, and then set itself up to auto-renew, a certificate. All with just one command.

    With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup

    Yes you can?

    I’ve done it thrice now.

    Is this some limitation of the docker AIO stack?