• 9 Posts
  • 221 Comments
Joined 1 year ago
cake
Cake day: March 22nd, 2025

help-circle
  • I tried hosting the bridge and it was hard to set up and unreliable. Right now I have WhatsApp installed on Graphene OS in a work profile so it doesn’t get access to all my contacts, only the ones I had to specifically add in this profile. In theory you can restrict it even more using labels but managing this was a pain in the ass.

    WhatApp will still know who are you talking to and you still have to run their app somewhere so in my opinion setting up the bridge just so I don’t have their app on my phone is simply not worth the hassle.





  • Also, vaultwarden requires HTTPS?? Ah drat, that’s not good :/ I don’t have experience with that.

    Yes, the clients work only over HTTPS. Caddy can handle that:

    vaultwarden.cosmos.internal {
            tls /opt/caddy/certificate.crt /opt/caddy/private.key
            handle /* {
                    reverse_proxy http://localhost:8081/
            }
    }
    

    The certs need to be generated for this specific domain:

    openssl req   -x509   -newkey rsa:4096   -keyout key.pem   -out cert.pem   -sha256   -days 36500   -nodes   -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=cosmos.internal"
    

    Some more details are here: https://bitwarden.com/help/certificates/ under “Using a self-signed Certificate”







  • In my case I wanted to separate my services between the ones accessible from the internet (git. lemmy) and not (bitwarden, *arr). To do this I need 3-4 VMs. I went with proxmox for the backups: you just define retention policy and that’s it. Promox drops backups of VMs automatically keeping the right amount of old versions. If you don’t want to split your services and you’re fine with just one VM I think you can easily go with pure debian. I did have some issues with proxmox (like failing network card, it required some fiddling) so it’s not “free”. There’s some extra work to get the benefits.

    And I think having everything in one VM is also fine. I’m only splitting it because I want to have some things accessible from the internet. If not I would just use docker for everything.


  • I tried just using WIreguard and I struggled with with setup. When it fails to connect it’s really hard to figure out what the issue is (port forwarding on one of the routers? firewall on the server? something else?). WIth my netbird setup I’m also relying on DNS, groups and exit node setup. I think it’s just easier with a clear dashboard like the commercial tool have. Netbird is also free and I’m planning on selfhosting netmaker.







  • I tried some keypass tools and immediately went back to Vaultwarden. Bitwarden clients work offline until you have to sync, no risks here, but the user experience is way way better. It’s easier to add new accounts, search for them, store additional data like addresses or credit cards and fill them out automatically. I can imagine using keePass for some password I have to access once a week but not for everyday use in my browser and on mobile.