• 1 Post
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle
  • While I’ve had similar thoughts, I have to wonder if the reverse is true. We’re seeing an uprising of joy and caring; something as equally infectious as the hateful, controlling rhetoric of the Trump-era Republican Party.

    I think (hope) people see the two options and are drawn to the joy. Being angry is exhausting.

    There is a lot of terrible out there we need to work together to solve. Some of it is sad, depressing, frustrating, wildly unjust-but we can be joyful in tackling these issues. Maybe not all the time, but then no one is ever one thing or one mood or one emotion. Nevertheless, a campaign of joy can make us realize there is indeed another way.

    Looking at Trump’s tragic demagoguery and seeing what’s going on with the Harris/Walz campaign , it’s not hard to believe more and more people are thinking “you know what, I want that.”

    So hearing PP using the same old poor-us, divisive, othering talking points begins to take on some of the same burden. It’s tired. It’s ugly. It’s empty.

    One can dream right?








  • thatsnothowyoudoit@lemmy.catoSelfhosted@lemmy.worldNextcloud zero day security
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    9 months ago

    Nextcloud isn’t exposed, only a WireGuard connection allows for remote access to Nextcloud on my network.

    The whole family has WireGuard on their laptops and phones.

    They love it, because using WireGuard also means they get a by-default ad-free/tracker-free browsing experience.

    Yes, this means I can’t share files securely with outsiders. It’s not a huge problem.


  • Update: I went and had a look and there’s a Terraform provider for OPNSense under active development - it covers firewall rules, some unbound configuration options and Wireguard, which is definitely more than enough to get started.

    I also found a guide on how to replicate pfBlocker’s functionality on OPNSense that isn’t terribly complicated.

    So much of my original comment below is less-than-accurate.


    OPNSense is for some, like me, not a viable alternative. pfBlockerNG in particular is the killer feature for me that has no equivalent on OPNSense. If it did I’d switch in a heartbeat.

    If I have to go without pfBlockerNG, then I’d likely turn to something that had more “configuration as code” options like VyOS.

    Still, it’s nice to know that a fork of a fork of m0n0wall can keep the lights on, and do right by users.


  • If you backup your config now, you’d be able to apply the config to CE 2.7.x.

    While this would limit you to an x86 type device, you wouldn’t be out of options.

    I am an owner of an SG-3100 as well (we don’t use it anymore), but that device was what soured me on Netgate after using pfSense on a DIY router at our office for years…

    I continued to use pfSense because of the sunk costs involved (time, experience, knowledge). This is likely the turning point.


  • Cluster of Pi4 8GBs. Bought pre-pandemic; love the little things.

    Nomad, Consul, Gluster, w/ TrueNas-backed NFS for the big files.

    They do all sorts of nifty things for us including Nightscout, LanguageTool OSS, monitoring for ubiquiti, Nextdrive, Grafana (which I use for home monitoring - temps/humidity with alerts), Prometheus & Mimir, Postgres, Codeserver.

    Basically I use them to schedule dockerized services I want to run or am interested in playing with/learning.

    Also I use Rapsberry Pi zero 2 w’s with Shairport-sync (https://github.com/mikebrady/shairport-sync ) as Airplay 2 streaming bridges for audio equipment that isn’t networked or doesn’t support AirPlay 2.

    I’m not sure I’d buy a Pi4 today; but they’ve been great so far.



  • Detail transfer is something you get by shooting at a higher resolution and then downscaling.

    For example a typical 4k camera will produce a 1080p image that looks significantly more detailed than a 1080p (native) camera (there’s a lot of hand waving here about resolution and lenses but let’s just ignore it all for the sake of the question to on ).

    Sort of like how 35mm films transferred to VHS always looked so much sharper with more detail than video shot on VHS-quality equipment.

    There’s a lot to unpack here but hopefully it’s enough to kickstart clarifying what they’re talking about.




  • Not downvoted, appreciate you sharing your perspective.

    I’ve been successful building trust in remote work settings but it’s a very much about building a narrative that’s much more explicit and communicated in an active way.

    But ignoring that bullshit I just typed, I think “building trust” in a professional environment is largely a trap. Not because you can’t trust anyone but that, if you’re building a good team, trust should be implicit. I was hired to do a job, you were hired to do a job, let’s trust that each other to do it.

    I think it’s also worth bearing in mind that high trust teams can still build trust, I’m simply advocating for not starting from zero.

    Unfortunately so many of the tools and workflows are built explicitly for low trust teams.



  • A bit odd that the article doesn’t mention advertising on cable/sat/fiber/traditional(?) media delivery into the home.

    The single biggest draw, to me, isn’t that I can watch when I want (that’s second). It’s not having to spend my time watching ads. Life is just better without someone trying to sell me something for 20 minutes out of every hour.

    I’m willing to pay for that privilege.

    I value my time - or at least the opportunity to spend it how I want when I’m not making someone already rich, even richer.


  • As someone who runs a self-hosted mail service (for a few select clients) in AWS, this comment ring true in every way.

    One thing that saved us beyond SPF and DKIM was DMARC DNS records and tooling for diagnosing deliverability issues. The tooling isn’t cheap however.

    But even then, Microsoft will often blacklist huge ranges of Amazon EIPs and if you’re caught within the scope of that range it’s a slow process to fix.

    Also, IP warming is a thing. You need to start slow and at the same time have relatively consistent traffic levels.

    Is it worth it, not really no - and I don’t think I’d ever do it again.