Terry Fox, Red Green, Bob & Doug, an angry goose, literally anybody other than that guy.

I feel like “weird” misses the mark. It’s quite hurtful to people who are outside the norm and proud of it.

“Creepy” is a way better description of those guys.

It sort of does make sense, since it’s how trains work so well! A single locomotive can haul dozens of carriages way more efficiently than putting a single small motor on each carriage. It also has way less aerodynamic losses since the trailer is right in the slipstream for the truck!

Right, but we have ways to require all automakers to build safe vehicles, commonly known as “safety regulations” that apply to both foreign and domestic companies. The same minimum requirements apply to a Toyota built in Woodstock or a VinFast built in Vietnam. That has nothing to do with tariffs, which are just a tax on consumers on foreign imports. This has nothing to do with protecting Canadians and everything to do with protecting big business.

Real estate about to go brrrrrrr. The largely landlord-represented government again looks for its own interests first.

We need to break up the grocery conglomerates. Nowhere else in the world is the food system so heavily monopolized and vertically integrated. Go tell an American about Cara Foods/Recipe Unltd[1] — they won’t believe you!

[1] https://en.wikipedia.org/wiki/Recipe_Unlimited

Right? I’ve been using NextCloud/OwnCloud since ~2015. It’s a very standard LAMP app, nothing fancy going on at all. Give it enough memory and you’ll never have any problems, same as any other web service.

It depends. I’d say on average it’s higher for “convenience” items but the cost of milk, cheese, rice, pantry staples, etc seems to be about the same.

If there was a food basics nearby I’d probably go there, but in my city that means driving another 15 minutes.

My wife and I have been spitefully avoiding loblaws for a while now. We get most of our meat & produce from the weekend market, bread from the local bakery, and anything else from the Asian/Indian supermarket or Metro if it can’t be found elsewhere.

The last straw was the prison gates and the receipt checking. Show some dignity.

Wow, you mean tying our entire nation’s success to a speculative real estate market was a bad idea?

It’s fine. RAID is not a backup. I’ve been running simple mirrors for many years and never lost data because I have multiple backups. Focus on offsite and resilient backups, not how many drives can fail in your primary storage device.

Not sure how to do that in docker, I’ve run mine as a plain old PHP-FPM site for years and years. It might be something that can be tweaked using config files or environment variables, or might require building a custom image.

ClamAV is slow and doesn’t catch the nastiest of malware. Its entire approach is stuck in 2008. It’s better than nothing for screening emails, but for a private file store it won’t help much considering that you’ll already have the files on your system somewhere. And most importantly, it slows down file uploads 10x and increases CPU load substantially. The only good reason to use ClamAV for nextcloud is if you will be sued if you don’t!

It needs some tweaks to be snappy. The defaults are really bad.

• change database from SQLite to a proper database like MySQL or Postgres, and configure the database server to use your memory fully
• increase the PHP memory limit from the default (128M on many distros) to >1G, the more the better
• install APCu in-memory cache for PHP
• add Redis as additional cache
• turn off the antivirus extension, if installed (ClamAV is useless)
• use http/2 on Apache/nginx to increase performance with multiple connections

https://docbot.onetwoseven.one/services/nextcloud/

This appears to be some Philly folklore with no real source other than a silly Onion article from the 90s. It’s possible the Onion was spoofing a real thing that happened, or somebody just made it all up. It’s very funny either way.

https://www.theonion.com/sinn-fein-leaders-demand-year-round-shamrock-shake-avai-1819564253

This was my setup from about four years ago. Other than moving suricata elsewhere, it’s largely the same. Worth a shot if it’s something you’re into!

https://nbailey.ca/post/linux-firewall-ids/

OpenBSD is also great, I’m just more familiar with the Linux tools. All the required tools are in the base image, and they have a great official guide:

https://www.openbsd.org/faq/pf/example1.html

Yep. Firewall, routing, dhcp, dns, everything you’d expect from a gateway device. Plain Debian (or really any distro) can do it all. With a 1gbps bi-directional connection fully saturated it will run at about 10% cpu on my very crappy low power Celeron CPU.

Plus, there’s no web UI full of janky and insecure CGI scripts to exploit, and software updates are forever (well, until x64 is deprecated, so basically forever).

IPtables on Debian because I like my life to be boring and unchanging.

For about a year I was running a full out of band IPS on my network. My core switch was set up with port mirroring to spit out a copy of all traffic on one port so that my Suricata server could analyze it. Then, this was fed into ElasticSearch and a bunch of big data crap looked for anomalies.

It was cool. Basically useless because all it did was complain about the same IP crawler bots as my nginx logs. But fun to setup and ultimately good for my career lol.

Great… another nine ton brickmobile to spontaneously catch fire in a tunnel

I mean it is possible to run your own authoritative nameservers on a server you own with a static IP. It’s a pretty irresponsible thing to self host, but it is possible :)