x3i

x3i , 1 month ago

I don't see anyone mentioning sth power efficient yet, so I will throw my two cents in here; I just ordered an Odroid M1S to take over some jobs from my RPi4 (8GB). Has not yet arrived so I cannot praise it yet but might be worth a look!

x3i , 1 month ago

True. Have a setup running on Kubernetes with their helm chart but the documentation is (or at least was) insufficient on what is important to back up, so I had to start over once, learning the hard way that the config file contains the one string you always need for recovering data. Since then, it is pretty stable and I had almost no problems.

x3i , 1 month ago

I think it was literally called "config". I will check my setup and provide the mount points I used here later today, if you back these up, it should work. Put some disposable data on it once you finished setup and then upgrade to a newer version to see if everything works. You can specify the image tag to use manually (or you install an older chart version).
I also pinned the postgres version to 14, not sure if I can recommend that but I had issues with DB upgrades in a docker installation, so I tend to be careful there.

x3i , 1 month ago

Update: seems like the persistence section is sufficient; I have

persistence:
  enabled: true
  existingClaim: nextcloud-config-claim

at the end of my values file which references a volume claim (and volume) that I created manually upfront. The importand file is config.php. Back that thing up immediately and three times, print it if you have to. The secret in there is unrecoverable otherwise and needed for any repair actions.
I also use the postgresql sub-chart (by simply enabling postgresql as database) and provide a claim there:

postgresql:
  enabled: true
global:
    postgresql:
      auth:
        username: XX
        password: YY
        database: nextcloud
  image:
    repository: postgres
    tag: "14"
    postgresqlDataDir: /bitnami/pgdata
  primary:
    persistence:
      enabled: true
      existingClaim: nextcloud-db-claim

Hope it helps!

x3i , 2 months ago

Can you elaborate? 'cause I sure as hell ain't gonna look it up

x3i , 2 months ago

Thank you and sorry at the same time for not phrasing my question properly; I know what it is, I am just very baffled on how it should be a bad thing if they strengthen the enforcement net neutrality. Imo, this is always a pure win for the consumer as it prevents a lot of malicious business models. So basically: no idea what the initial commenter is complaining about.

x3i , 2 months ago

Whenever you accept the TOS, your device is somehow registered/authenticated against their servers. Such a session establishment of course should be secured through TLS, just like all web traffic in general. Frankly, I see the issue here clearly on your side; you have to make sure your device supports up-to-date cryptography standards.

I saw in a different comment that you do not want to replace your phone but you definitely have to replace your software. Find an older build of lineageOS (well, probably even CyanogenMod in this case) and migrate to that. Even if it is based on Android 8, it would still be much more in line with modern security than what you are running now.
Btw, the complaint of you not being able to do banking through your browser anymore while it does not support TLS 1.3 really made me laugh, thank you!

I don't think you realize just how big the risk is that you are putting yourself in with such old software.

x3i , 3 months ago

I used it in a motorbike trip last year and had some trouble but not in the way you describe. I used offline maps, finding my location was a matter of seconds. It would however sometimes not register some "waypoints" and try to lead me back to a point I already passed until I restarted navigation. Annoying when you have a route with several intermediate destinations.

I use organic maps for everyday navigation, never had such issues with that one.

x3i , 3 months ago

Switch banks. I recently did so too after the previous one tried to force a TAN app on me without any way to use a physical generator. Security part aside; I use a custom OS on my phone and these stupid banking apps all love their safety net checks.
New bank was able to just send me a generator and everything works fine.