Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

Klox

@ Klox @lemmy.world

Posts
0
Comments
57
Joined
3 yr. ago

  • Self Hosting- Security recommendations

    Jump

  • Your really need to define your scope first. Is it just you? Family? Extended family? Strangers?

    After understanding that, the best bang for your buck is a private mesh/tunnel VPN. Tailscale, Netbird, Pangolin, or plain wireguard. If you want real public routing, then you need to understand reverse tunnels and your app's lifecycle/quality. After that, all the security guidelines are basically trying to reduce blast radius. And that depends a lot on how you're running the app, what it has access to, etc. DMZ network for isolation goes a long way.

  • Removed

    Inclusion coordinator fired for being close-minded; court dismisses her whiny lawsuit

    Jump

  • Headscale and DNS questions

    Jump

  • Does that bypass my DNS server when the client is connected to the tailnet?

    Yes. A search path is installed so that the OS queries MagicDNS. MagicDNS is a DNS resolver within Headscale and nodes that are on the tailnet will use it to get the tailnet IP of the names being queried under your MagicDNS domain. You MagicDNS path can be a subdomain of your domain (hs or ts.mydomain.com) or anything (.magic). https://photos/ -> check with MagicDNS does it have photos.magic? Return the photos node IP 100.x.x.x.).

    It doesn't need to go to your AdGuard DNS server because every node will query the search path that is added to the OS when joining the tailnet. It's the reason why your MagicDNS domain name needs to be unique, and why it doesn't technically need to be a subdomain of your internet routed domain.

    Should I still leave it on for local traffic?

    Depends on what you want. Is your local traffic expected to go over the tailnet? If every device isn't on the tailnet then you probably still want the local network setup you have.

    And if I'm connected to the tailnet from outside, how do I propagate all the addresses?

    Every tailnet node has a node name. You can spin up extra nodes so that they resolve a node name to the service it's managing. You can do this pretty easily with containers. The alternative is to configure MagicDNS with extra_records so that multiple A records resolve to the same tailnet IP. Then you either need the services to be on different ports or have a reverse proxy split out based on the connection header (e.g. to route photos to Immich and music to Navidrome).

    This is ignoring all "exit node" scenarios. Exit nodes can help bridge your local traffic to the tailnet, or bridge your services to the public.

  • Federal court strikes down New Jersey ban on assault rifles and large-capacity magazines

    Jump

  • I'd be fine with this if the people responsible for these guaranteed future outcomes were held to account. Until we have a justice system that reflects fair penalties on poor leadership, we're fucked.

  • Federal Agents Were Told F.B.I. Will No Longer Investigate ICE Confrontations

    Jump

  • I reported people dressed as ICE taking someone in a parking lot to my state police and they said it's a federal matter. It's as fascist as it gets.

  • It Sure Looks Like Trump Was the One Who Damaged the Reflecting Pool

    Jump

  • I should have known, but it's still unbelievable he has a quote saying the pool is industructible and can't be cut with a knife. THEN he proceeds to charge "Antifa" for cutting the pool?! Of COURSE he was guilty of fucking it up back in May. The guy's lies are so transparent it's kind of refreshing. What's fucked up is the system being totally fucking broken and letting this guilty piece of shit keep making an ass out of America.

  • Meta Caps Internal AI Token Spending After Costs Approach Billions in 2026

    Jump

  • Lmfao, but they had zero budget for the tens of thousands of employees they let go. The people need to kill this corporatocracy.

  • Oracle sues Wisconsin utility regulators over financial requirements for data centers

    Jump

  • Guarantee not the ones owned by Oracle.

  • Deleted

    Permanently Deleted

    Jump

  • They would 100% charge people with criminal conspiracy to commit terrorism if they had the evidence. There are plenty of those charges too, just from actual police. They fucking just charged antifa protestors with it. Our government is just fucking stupid, ugh.

  • Trump’s $14M reflecting pool project couldn’t stop algae from blooming in the DC heat

    Jump

  • Don't you mean Trump's swamp?

  • Removed

    AI Poop Analysis App Offers to Sell Database of Its Users

    Jump

  • That poop.ai domain is looking pretty solid right now! If this isnt a load of crap, they should have $70k in the tank to dump on this shit. They better watch their rear or their competitor will get the drop on them and they'll be number two.

  • ICE Agents Barred From Wearing Masks in New York Under State Budget Deal

    Jump

  • Generally when people say big government they mean excessive, intrusive, overbearing, controlling. I would rather the focus be on fairness, equality, safety, justice; and to achieve that you do need a "big government" with highly qualified people leveraging science and evidence to drive decision making. But a large government doesn't have to imply violating personal autonomy, privacy, etc. /shrug

  • teriyaki rice and chicken.

    Jump

  • The number of times I've fucked up friedrice should make me embarrassed, and I am, but I refuse to give up! Yours looks great.

  • ICE Agents Barred From Wearing Masks in New York Under State Budget Deal

    Jump

  • I mostly meant it tongue-in-cheeck. I also don't really consider social safety nets, equality, and fairness to be "big" government personally.

  • ICE Agents Barred From Wearing Masks in New York Under State Budget Deal

    Jump

  • How will this relate to the case against California? I'm so sick of the big government party, aka Republicans.

  • Deleted

    Permanently Deleted

    Jump

  • Reminds me of one of my elementary school English teachers. We were all given a blank hardcover book and had to make a story with illustrations. Mine was called "The Loose Kitty". Every page basically had the kitty on the loose in different areas of a city, running into other animals that had some rhyming. I spent so much time with the art, proofing it, etc. This teacher took hard red ink and strikes through loose and put "lost" ON EVERY PAGE. I tried to tell her no it is loose because EVERYTHING IN THE BOOK related to being "on the loose". Nope. Got like a C- on that thing.

    Am I still sour about it 30 years later? Yes, I still loose my shit.

  • Deleted

    Permanently Deleted

    Jump

  • When did computer science turn into pop psaichology? Calling this research is blasphemy to the scientific discipline.

  • YouTube locked my accounts and I can't cancel my subscription

    Jump

  • I had read doing a chargeback might trigger them to suspend all services, including free ones like email. I can't exactly remember the context of those, but it might have been developer account related.

  • Donald Trump cheers former special counsel Robert Mueller’s death

    Jump

  • It really is amazing. Mueller thought he was protecting our institutions. Instead he got to see his vacuous, largely fake, idealism go up in flames. And now tweet in chief mocks him in his grave.