#self_hosted — Public Fediverse posts

Hybrid RAG для бизнеса: умный поиск по документам без облака и утечки данных

Крупная логистическая компания. Многолетний архив — договоры с перевозчиками, регламенты, переписка по инцидентам. Менеджер хочет узнать: были ли у нас претензии к этому контрагенту и на каких условиях мы с ним работали два года назад? Открывает почту, потом SharePoint, потом звонит в архив. Через час у него есть частичный ответ. Та же ситуация повторяется в таможне, банках и юридических фирмах. Данные накоплены — в PDF, Word, сканах, таблицах. Но корпоративная база знаний не отвечает на вопросы: нет инструмента, который понимал бы смысл запроса, а не просто искал по ключевым словам. Автоматизация документооборота упёрлась в потолок классических СЭД.

https://habr.com/ru/articles/1024696/

#Автоматизация_Документооборота #ИИ_для_Бизнеса #Нейросеть_Без_Облака #HybridRAG #Self_Hosted #LangGraph #Haystack #Qdrant #LlamaIndex #observability

@rimu

I keep telling others that over and over, even over at WHT and other industry forums.

Start with at least a half rack (full being 42U) and 100A. You can buy two or three identical (I prefer Proliants, but refurb'd Dells are just as good) 1U servers for your #Proxmox VE cluster for less than $400 each on #eBay (typically 384GB RAM each and several populated SAS bays) including shipping, straight to you or your data center of choice, an inexpensive managed layer 3 switch can be picked up for under $200 and half of the colo sites will throw in a PDU at no charge.

A full rack can be had with 200A, XC, and unmetered blended gigabit transport for under a grand per month (less than .002ms from One Wilshire here in Los Angeles), so your average half rack will be a little more than half that w/100Mbps or better.

If you have your own IP block they'll announce and route for free with a letter of agency from you and with a full rack they should be willing to throw in a /19 included in those price points gratis.

Pro Tip: wait until the last week of any month BEFORE speaking with ANY sales reps. They'll sell their own mothers to get their end of month bonuses - you can save really big coz all they care about is closing and getting that bonus check.

If you're still not sure, let me quote you...

We're being taken for a ride.

Renting is not working out. It's time to OWN the means of federation!

I couldn't agree more

#federation #Fediverse #FOSS #self_hosted #Colo
#tallship

⛵

Ente completes CERN sponsored audit

This includes (especially so) Ente Auth.

I wanted to bring some awareness to this because when I think of MFA I typically think of TOTP Authenticators. Like my friend Eric Hameleers (alienbob), I bent the knee way back and adopted the proprietary, closed source product Authy by Twilio.

Why? Because there were considerations to raise, such as, "What if I drop my phone in the fricken' toilet?", or, "I want my authenticator to support installs on multiple platforms and sync" - Actually, both of those considerations are really the same thing. The mess about this really was that Google Authenticator and others didn't sync, existed on a single device, and I had no need or desire to enjoy passwordless authentication offered by Microsoft for some resources.

Authy provided multi-devices w/sync, on #Android, #Linux, and #Windows, okay I guess, and my phone(s). And then Ente Auth came out, they were working on the desktop version and close to a release, it sync'ed with multiple devices and second best of all, it was the first truly cross-platform (Okay I never tried running it on a BSD) authenticator - it could sync between a Linux box and a Windows desktop and an Android - that's everything in my Universe, and actually, who cares about Windows anyway?

Just about that time, as I started considering the move, Twilio informed everyone that Authy support on Desktop was going Bye Bye!

So the choice at that point was Easy Peasy - migrate nowwwww!!! And so I fired up my rarely used wYnd0z3 box and got an alert - "This desktop version will be retired soon, you need to update to the lastest version as soon as possible"... in so many words.

Hmmm... Yeah, I dunno. I think I'mma do some online searches, this sounds fishy to me. And oh boy did it stink to high heaven. I'm glad I checked that out and found a little blurb (over on Reddit, IIRC) that covered the steps required to export everything, a script, a hacked up patch, and voila! done - got it!

There was one caveat there, for those who ventured into those same murky waters that I had - DO NOT APPLY THE TWILIO UPDATE!!!* For those who did, they found out quickly that the a patch no longer worked, they could not perform the export, and this was by design since the export had to be performed on a desktop version of Authy, effectively subjugating the non-daring with the typical enshittification that we've always known as #Vendor_Lockin.

By the time Eric apparently got around to making the move to #Ente_Auth from #Authy, the laborious process was entirely manual - one site at a time, which you can READ ABOUT HERE.

You really gotta watch these sneaky proprietary types of folks.

So anyway, fast forward a bit to where we are now, and although I mentioned my second fav reason to select Ente Auth, I didn't disclose my fav - which should be obvious: It's #FOSS. And not just that, but #Self_Hosted FOSS, if you prefer to keep things close to your breast.

Anyway, that's the backstory and the long way around my announcement here that you an read up on the Audit of all Ente products here:

https://ente.io/blog/cern-audit/

So, IMNSHO, There's really no reason to choose another authenticator, really, truly, there just isn't.

I hope that helps. Enjoy!

#tallship #redundancy #TOTP

⛵

.

Hello everyone!
I have set up a #6in4 tunnel on my server with /56 subnet to have an #ipv6 /64 subnet for my router.
Everything works well but this setup consists of a tun interface with specific settings and also from some ip route rules and iptables rules.
My question is how do I make it persistent?
I know how to save iptables rules but I have no idea on how to save ip route rules and a tun configuration.
I have done this with a 6to4 script from github and cannot repeat the same manually without any helper scripts.

Any help will be appreciated.
Thanks in advance.

#linux #askfedi #self_hosted