[-] apigban@lemmy.dbzer0.com 4 points 11 months ago* (last edited 11 months ago)

I'd check high I/O wait, specially if your all of the vms are on HDDs.

one of the solution I had for this issue was to have multiple DNS servers. solved it by buying a raspberry pi zero w and running a 2nd small instance of pihole there. I made sure that the piZeroW is plugged on a separate circuit in my home.

[-] apigban@lemmy.dbzer0.com 4 points 1 year ago

i didnt have a problem with network ports (I use a switch) what I shouldve considered during purchasing was the number of drives (sata ports), pcie features (bifurcation, version, number of nvme slots)

I need to do high IOPs for my research now and I am stuck with raid0 commodity SSDs in 3 ports.

[-] apigban@lemmy.dbzer0.com 9 points 1 year ago

Hello! I'm a hobbyist in this space (scripting/coding), does anyone here have a:

  • gold standard of what commit messages should look like?
  • common practice/etiquette for commit message?

I never had a team or guide or mentor and when I saw this i felt that my commits are like smoke signals describing that there's a fire. which isnt really helpful.

I tried to contribute to a python module that I use daily, my PR was so over engineered (iirc i added just 3 lines, but with tests, screenshots, CI/CD) i think to compensate for my lack of experience that I got called out ("wow this is pretty extreme just for that feature").

[-] apigban@lemmy.dbzer0.com 4 points 1 year ago

Depends on what kind of service the malicious requests are hitting.

Fail2ban can be used for a wide range of services.

I don't have a public facing service (except for a honeypot), but I've used fail2ban before on public ssh/webauth/openvpn endpoint.

For a blog, you might be well served by a WAF, I've used modsec before, not sure if there's anything that's newer.

[-] apigban@lemmy.dbzer0.com 8 points 1 year ago* (last edited 1 year ago)

Edit: **this will make your oci instance less secure **and will break integrations with other oci services. Do not use this in production, but ONLY for testing if the host fw rules affect your app.

I'm currently using oraclecloud for my bots. I work in the space (cloud/systems engg) and the first thing that got me was that the oracle ubuntu instances have custom iptables in place for security.

I'm not sure if it still has, but last i checked a year ago I had to flush iptables before I was able to use other ports. I didint really want to deal with another layer of security to manage as I was just using the arm servers for my hobby.

It might be something worth checking, it isn't specific to lemmy though.

I found it unintuitive because other major cloud providers do not have any host firewall/security in place (making it easier to manage security using SG/NACL, through the console).

[-] apigban@lemmy.dbzer0.com 3 points 1 year ago

I use connect for lemmy on android

[-] apigban@lemmy.dbzer0.com 6 points 1 year ago

Fuckin beautiful

How did you get started?

[-] apigban@lemmy.dbzer0.com 6 points 1 year ago

I don't have an alt account yet but my blocklist is about 50+ communities long now, so much porn already when you sort by new on all.

[-] apigban@lemmy.dbzer0.com 5 points 1 year ago

You got me :D

My wife suspects that I'm using mydaughter as an excuse to play the games/movies I missed when I was growing up.

We still have about 90 percent to finish in lego jurassic world.

[-] apigban@lemmy.dbzer0.com 17 points 1 year ago

Fuckin hell you guys are here too, thank god

[-] apigban@lemmy.dbzer0.com 22 points 1 year ago

I started with jerboa, then I'm now trying out connect.

I've customized both to feel likewhat I have with RiF (just text, no cards, amoled black).

I think I'll stay for a while with connect for a while.

view more: next ›

apigban

joined 1 year ago