I dunno why but I’m worried that casaos is holding me back from doing greater things I guess? I’m pretty new to self hosting and I discovered casaos from a Minecraft server setup tutorial of all things and it’s been great for me so far and does pretty much everything I need it to do, but I feel like I don’t really have a full understanding of what I can do outside of it, and I don’t really hear many people talk about casaos so I’m like worried it’s just not very good I guess? I’m just looking for ways to improve really.

For reference I just use my server for Minecraft on the occasion, a self hosted obsidian live sync, adguard, and in the future plan on hosting nextcloud. Casaos seems great for that and maybe it’s perfectly fine but I’d just be interested in being more knowledgeable I guess, and aware of any ways to improve.

  • MangoPenguin@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    1
    ·
    5 minutes ago

    CasaOS is fine, but the downside of tools like it is you don’t really know what’s going on under the hood, so if/when something breaks it may be really hard to fix.

    But if it works for you I don’t see a reason to change. Just make sure you’ve got reliable backups following the 3-2-1 rule.

  • PriorityMotif@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 hour ago

    Just looking at their website makes me not want to use it because it doesn’t give any details as to what it actually is.

  • conciselyverbose@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    4 hours ago

    Serious question: last I looked at casaOS (because I liked the hardware), they had SSH open and accessible to default passwords by default. This scared me off hard.

    Is this still a thing/are there other glaring security holes?

    • alwayssitting@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      3 hours ago

      I don’t know if they changed it by now, but unRAID was the same when I tested it back in 2019. I wish they did things differently but both are products designed to be deployed and ran by hobbyists in a local network, so it makes somewhat sense.

      • conciselyverbose@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        3 hours ago

        I could get the “default” to facilitate setup, but as far as I’m concerned it’s seriously fucked not to have the first step of your script be replacing it with the user’s own choices. It’s really hard for me to trust the security as a whole of a project that does that by default, especially because it’s intended to be for inexperienced users and there was no indication during the setup process or other included information that that was the case.

  • madejackson@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 hours ago

    May I suggest you have a look at cosmos cloud? It’s comparable to casaOS from a usability standpoint but it is more secure and has much more features like integrated Auth-Proxy.

  • just_another_person@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    2
    ·
    8 hours ago

    Stop worrying about stuff like this.

    Does it do what you need?

    Does it fail where you need it?

    Then start asking that question. Don’t be OCD about it. It’s an automation suite. Chill.

    • fmstrat@lemmy.nowsci.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 hours ago

      Agreed. Only two reasons to consider this question:

      • Do I want to do something it can’t?
      • Do I just want to learn something new?
  • AustralianSimon@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    7 hours ago

    If that’s what you are doing there is definitely heaps more you can do with casaOS.

    The apps are basically docker made easy and it has a lot of connections that are hidden behind ease of use menus.

    What do you think you are missing out of aside from more explicit controls?

  • Scipitie@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    9 hours ago

    From what I understand: CasaOS is simply an abstraction layer and takes away a lot of the manual work.

    I agree with you that this shows down learning quite a bit.

    I see three ways forward for you:

    a) switch to a Linux base system, Debian, arch, nixos, whatever resonates and set up everything from scratch. High learning curve but no more hidden things.

    b) same as a but as a separate setup. This is what I would recommend if you have the time and cash. Replicate what’s already working and compare.

    c) figure out how to do things manually within the CasaOS framework. Can’t help you there though :)

  • doeknius_gloek@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    8 hours ago

    Having a solution that works for you is never a bad thing.

    Now it comes down to what you want to archive: Do you want something that just works? Great, you’re done - now go on and do some other things that you like, that’s perfectly fine. Or do you want to learn more about servers, virtualization, linux, networking and selfhosting in general? Then there are a million ways to get started.

    I’d suggest to setup a little lab, if you haven’t already. Install Proxmox on your server and run CasaOS inside a virtual machine. Now you’ve learned about hypervisors and virtual machines. Afterwards you could create a second virtual machine to play around - maybe install debian and get used to the linux cli. Install docker manually, run some apps using docker-compose. Now you’re already doing some stuff that CasaOS does under the hood.

    The possibilities are endless, the rabbit hole is deep. It can be a lot of fun, but don’t force youself to go down there if you don’t want to.

    • NaibofTabr@infosec.pub
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      7 hours ago

      I second this - virtualization is the easiest way to branch out and try new things. You can keep the working system you already have, and also experiment with other systems.

      A further advantage is that you can run services in separate VMs, which helps if you need isolated contexts for security, privacy, or stability reasons. And, if you break something while you’re learning you can just delete that VM and start over without affecting your other working services.