Skip Navigation

User banner

BlueÆther

@ BlueEther @no.lastname.nz

Posts
4
Comments
274
Joined
3 yr. ago

  • So Reddit has decided that plain HTML is unsafe

    Jump

  • so why was I getting hit with over 1,400,000 request a day to the web URI and not the API by some bot farm in China the other week. They were also hitting other lemmy instances.

    I blocked the fuckers, no qualms at all.

    Even if they were using the API they were not being nice about their shit.

  • Locked

    Am I using PieFed wrong?

    Jump

  • i use All and scaled

  • Under Trump, hundreds of America’s wild horses are being sold for as little as $25 and being sent to slaughter, report says

    Jump

  • Yes the flavours may bit a bit more, but here in NZ our beef is generally outside all year and grass fed so tends to be richer/stronger than some meat that I've had overseas.

    And like any meat, treat it well to get the most out of it

  • Under Trump, hundreds of America’s wild horses are being sold for as little as $25 and being sent to slaughter, report says

    Jump

  • There is nothing wrong with wild meat, nor cheval

  • Trump vows to 'bomb the s*** out' of Oman if it 'gets in the way' as Iran ‘finalises Strait of Hormuz deal’

    Jump

  • his full diapers?

  • A trillion and one questions about laundry please help?

    Jump
  • Removed

    Rimu deletes users to hide criticisms

    Jump

  • You probably don't want to know

    Both party's have miss-stepped, Rimu seems to be trying to put across his side of the story. At least one of the comments removed was a real rant towards Rimu on his server, he removed it.

  • Good resources for setting up a domain name to a local Caddy instance

    Jump

  • I have AdGuard Home running on OPNSense as a local DNS with a wild card for for the 'local domain' pointing to Caddy

    in Caddy I have this section:

     
        
*.<domain>.net {
#header X-Frame-Options "SAMEORIGIN"
        tls internal
        encode gzip
        import sec-headers
        @sub1 host pve.<domain>.net
        @sub2 host kasm.<domain>.net
       ...
       handle @sub1 {
                import sec-headers
                reverse_proxy * https://10.1.1.11:8006/ {
                        transport http {
                                tls_insecure_skip_verify
                        }
                #       header_up Host {host}
                       header_up X-Real-IP {remote}
                       header_up X-Forwarded-For {remote}
                       header_up X-Forwarded-Port {server_port}
                       header_up X-Forwarded-Proto {scheme}
                }
        }
        handle @sub2 {
                import sec-headers
                reverse_proxy  https://10.1.1.119/ {
                        transport http {
                                tls_insecure_skip_verify
                        }
                #       header_up Host {host}
                       header_up X-Real-IP {remote}
                       header_up X-Forwarded-For {remote}
                       header_up X-Forwarded-Port {server_port}
                       header_up X-Forwarded-Proto {scheme}
                }
        }
...

  • JD Vance demands that the DOJ investigate hospitals caring for transgender patients

    Jump

  • Lets just ban Viagra - as it affirms your 'masculinity'

  • Trump urges Americans to accept higher gas prices as he escalates Iran rhetoric

    Jump

  • maybe about a year a go I read an interview with a Iranian official - it was basically "If the US brings a war to us there will be unbelievable hurt in reply - they have no idea what we are capable of"

    Turns out it was right on the money

  • 3 days ago I said I needed a new hobby...

    Jump

  • Back up the server then work through:

    Just follow the guide https://iocaine.madhouse-project.org/documentation/3/getting-started/ Bind the iocaine service to 0.0.0.0:42069

     
        
cat /opt/iocaine/etc/iocaine/config.d/00-server.txt.kdl 
http-server default {
  bind "0.0.0.0:42069"
  use handler-from=default
}

    expose interface to Docker (make sure not to expose it to the world). 

     
        
sudo iptables -I INPUT 4 \
  -s 172.18.0.0/16 \
  -d 172.18.0.1 \
  -p tcp --dport 42069 \
  -j ACCEPT

    add the interface to the proxy service in a custom/docker-compose.yml.template

     
        
proxy:
    {{COMPOSE_CADDY_IMAGE}}
    env_file:
      - ./caddy.env
      - {{ CADDY_EXTRA_ENV }}
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    extra_hosts:
      - "host.docker.internal:172.18.0.1"
...

    add iocaine to caddy in a custom/Caddyfile.template

     
        
{$LEMMY_HOSTNAME} {
        import caddy-common

        ######################################
        ########## iocaine  code ##########
        @read method GET HEAD
                reverse_proxy @read host.docker.internal:42069 {
                @fallback status 421
                handle_response @fallback
        }
...

    rebuild all the docler images (at least the caddy one ./deploy.sh -f) and test

    I think that should work

    CrowdSec

  • 3 days ago I said I needed a new hobby...

    Jump

  • Well done on getting it up and running, federation seems to be working https://moplemmy.fyi/instances & https://phiresky.github.io/lemmy-federation-state/site?domain=moplemmy.fyi

    You shouldn't have to put instances in the Allowed Instances, just use blocked list for stuff you dont want to see

    Yes email is a pain in the arse. More so if you are having to deal with dynamic IPs

    Now just wait for the scrapers to turn up. Both Dave (lemmy.nz) and I are getting well in excess of 500k requests from content scrapers per day atm and they are tyring to pull in whole comment trees and walk through all posters.

    Have a look at Iocaine to help tarpit some of them if you dont want to route through something like cloudflare.

  • Picky eaters of Lemmy: Why?

    Jump

  • Oh a good steak tartare. That and seared duck breast (when I ordered that the head waiter came over and explained how rear it would be served)

  • Picky eaters of Lemmy: Why?

    Jump

  • That's celery for me, I'll eat just about anything and have eaten lots of weird stuff (insects/dog/horse/donkey/sheep's brain (before prions were really wildly known about)/etc)

    Celery and hard boiled eggs (with them it the smell and texture)

  • Google's classic Search button is gone in a new AI-first homepage

    Jump

  • yes github

  • I need a new hobby, I'm going to set up my own Lemmy instance. Am I an idiot?

    Jump

  • those ~2000 blocks were in the hour after turning on the full proxy, still getting a fair few from china hitting the real IP address that they must have cached.

    Grep'd the logs and had 250,000 requests from china in the last 20 hours asking for full threads via the api

  • I need a new hobby, I'm going to set up my own Lemmy instance. Am I an idiot?

    Jump

  • up untill now I've not had too much bot traffic, but I'm betting hammered atm. Make sure to have some good firewall rules for when it happens:

  • I need a new hobby, I'm going to set up my own Lemmy instance. Am I an idiot?

    Jump

  • Yes you are mad, I know as I did that over 3 years ago. Went from at home => a cheep VPS => paid for Oracle VPS.

    If you go down the lemmy route (vs piefed) then I would deply with Lemmy-Easy-Deploy by @ubergeek77. this makes setting Caddy and mail simple

  • Trump Openly Mulls Dystopian Plan for Stealing the Midterm Elections

    Jump

  • is it time that the UN starts to talk about putting [armed?] observers on the ground to make sute that the elections are not tampered with, like they do for other 3rd world countries?

  • Today I Learned @lemmy.world
    BlueÆther @no.lastname.nz

    TIL that I18n is Internationalization, and why

    en.wikipedia.org /wiki/Internationalization_and_localization
  • Selfhosted @lemmy.world
    BlueÆther @no.lastname.nz

    FFS Plex, the server is on my local network

  • FoodPorn @lemmy.world
    BlueÆther @no.lastname.nz

    A Wild Thyme soup (Think of this a erotic short story vs OnlyFans)

  • Dad Jokes @lemmy.world
    BlueÆther @no.lastname.nz

    On this very special day, ask you self "What would Jesus do?"