Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)L

LordKitsuna

@ LordKitsuna @lemmy.world

Posts
3
Comments
151
Joined
3 yr. ago

  • Discord Alternatives, Ranked

    Jump

  • I think you misunderstand. They are making technical decisions that are incompatible with ux decisions. In order to make a better user experience they would need to change how the protocol was made, thus undoing thing that they chose for technical reasons.

    Like the way they chose to do the custom emoji makes sense on a technical level for a de Federated protocol but it also is fundamentally incompatible with a good user experience. Same with the forest verification of devices that's bad ux even if it is technically better

  • Discord Alternatives, Ranked

    Jump

  • No it doesn't, matrix was designed by people with no concept of ux. It focuses on things that are technically correct but something average people won't put up with. Like the forced verification of devices, normal people don't care and don't understand what that even is and will be annoyed that every time they try to log in they are prompted to insert a stupid key just so that they can see their chat history.

    Doesn't help that tons of the clients especially the web one can't be bothered to remember being authenticated and you have to do it literally every time but even with that fix just having to do that in general is going to put people off.

    Then there's just a bunch of base protocol stuff that's dumb the way they finally implemented custom emoji is the stupidest thing I've ever seen and makes what should be a simple easy click to add a sticker and then use it turn into this complicated mess that nobody's going to bother with. On a technical level it made sense sure but on a user experience level it makes no sense at all.

    And I say this is someone that self-hosts basically anything I can get my hands on, I've got Seafile, immich, piped, jellyfin, microbin, among various others. I keep trying matrix and keep finding myself getting annoyed enough to stop using it

  • TIL: Besides offering a free compromised email check, haveibeenpwned.com also offers a free password compromise checking service (It's also fun to see what weird passwords have been used/leaked.)

    Jump

  • This functionality is built-in to bitwarden, they can safely check your entire vault for known breaches

  • This EV Was Already Cheap, Then Dacia Knocked Off Nearly $6,000

    Jump

  • Because propaganda has convinced people that a car is useless if it can't go 300+mi AND only take a few minutes to be ready to do it again. Range anxiety, even though they only fill up maybe once a week and could easily charge an ev at home with just a standard outlet not even a special charger and keep up with their actual real daily use

  • Solid advice.

    Jump

  • Was surprised to see this here. But yes absolutely, they are expensive don't get me wrong. But they are worth it. Their shit just works, i have their washer and heat pump dryer, dishwasher, and CX1 canister vacuum. Each are the best version of that thing I've ever used. Dishwasher will clean anything no rinse/soak needed even for baked on pasta or cheese, vacuum is powerful but also shockingly quiet, dryer sips power (700w avg load) but dries everything just fine.

    Had em for the years now, i am NOT gentle with the vacuum i drag it outside to clean the car and other various things it's not really for, toss it around use it as a footstool sometimes and it shows no signs of the wear. You get what you pay for with them

  • Self hosting with subdomains

    Jump

  • Eh, i just use pubkey only Auth config (so password entirely disabled as an option) and put ssh on a non standard port to reduce script kid noise. (and no 2222 is not non-standard it may as well be the default)

    Fail2ban triggers false too often for my taste in a high traffic environment.

  • Self hosting with subdomains

    Jump

  • If you ran nginx as a non privileged user it wouldn't be able to bind to 80/443 as those are privileged ports. So you would need to use iptables to forward them to an unprivlaged port

  • Self hosting with subdomains

    Jump

  • I mean it WOULD work you would just need a von on every device you wanted to use.

    The REAL answer is never host them DIRECTLY, always use a reverse proxy like nginx. Many projects (i believe jellyfin is one of them) explicitly recommend this for better security. Which it looks like you did so congrats

    For extra bonus points you can setup nginx to run as a non privileged user and use iptables to forward the lower ports (80/443). A pain but closes out a large chunk of nginx as a risk.

  • Where are you running your wireguard endpoint?

    Jump

  • https://spartanhost.org/ owner is super chill will make custom spec deployments and they actually have a really nice management panels with nice easy custom iso support

  • Where are you running your wireguard endpoint?

    Jump

  • One end is a local VPS with insanely good peering pretty much round the damn world, other end is my opnsense router. I actually pass a block of ipv6 through the vpn and my router hands it out to devices which is a nice little bonus

  • reverse proxy over vpn without docker?

    Jump

  • That sounds like a lack of port forwarding on at least one side. Ensure the vpn port is properly open on both sides. There is also an option you can add to the wireguard config for keepalive set it to something like 1min

  • reverse proxy over vpn without docker?

    Jump

  • I feel like im missing something here. This is pretty trivial and the comments i see are over complicating the hell outta everything. All you need is your VPN tunnel working. Personally i use wireguard for this. Then you just use nginx as the reverse proxy it talks to services on the other side of the VPN.

    The nginx server config looks like

    server { listen 443 quic; listen [::]:443 quic; listen 443 ssl; listen [::]:443 ssl; server_name my.domain.tld; http2 on; http3 on; quic_gso on; tcp_nodelay on; error_log /var/log/nginx/jellyfin.access.log; ssl_certificate /path/to/ssl/fullchain.pem; ssl_certificate_key /path/to/ssl/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; add_header Alt-Svc 'h3=":$server_port"; ma=86400'; add_header x-quic 'h3'; add_header Alt-Svc 'h3-29=":$server_port"';

     
            location / {
        proxy_pass http://10.159.4.12:8096/;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forward-Proto http;
        proxy_set_header X-Nginx-Proxy true;
    }

    }

    I have no idea how to do the proper code block i guess so have a paste from my reverse proxy hosted pastebin lol https://paste.kitsuna.net/upload/snail-seal-pig

  • Arch Linux Website Hit by DDoS and Temporarily Limited to IPv6

    Jump

  • I feel like this all started around that time that there was that article that mentioned the most popular desktop environments on Arch Linux from repo stats where KDE plasma was the highest with over double gnome.

    Clearly gnome foundation salty

  • 'Tis the season

    Jump

  • There's nobody for me to join, the only family that are not horrible manipulative monsters are beyond my means of travel, currently it's just me and the dog so there's really no point in making an elaborate dinner for myself. So today is just me being bored and alone till friends become available again.

    I don't not celebrate it because Christian or whatever. I don't celebrate it because there's nobody to celebrate it with

  • Hardware Home Button

    Jump

  • It just creates unnecessary complication. It's not particularly memorable, it's a pain to even just lookup tye syntax imo compared with v4, and I genuinely do not see the benefit at the home level to getting rid of NAT. Carrier and backhaul? Oh yeah nat is a fucking plague. But home level? Literally causes no issues it's trivial to work with, 98% of people do not need ports forwarded ever. Those that do it's not hard. IPV6 necessitates more careful control of a firewall now that every device is globally reachable and means that it won't even make opening a service any easier. It's just firewall instead of NAT forward which on most routers will more or less be the same process

    6to4 exists and could handle translation of the backhaul 6 to a local 4. Only the router itself need be directly addressable imo.

  • Hardware Home Button

    Jump

  • I'm not, and I'll never give it up on any network i control. It's simple, easy to remember, i don't personally need 255 ip addresses so ipv4 space is just fine for me. And i don't need my devices to be individually addressable globally i can port forward if something needs to be accessed externally.

    IPv6 makes sense at the carrier level but at the endpoint networks especially just for homes there is literally nothing wrong with ipv4

  • Samsung reveals first tri-fold phone

    Jump

  • Have you never used a modern-day LED flashlight they can make them tiny with small dials and still make them brighter than the goddamn Sun lol

  • Zero Trust Architecture

    Jump

  • Imagine not having an opnsense firewall deployed as an IT professional

  • Decreasing Certificate Lifetimes to 45 Days

    Jump

  • Can you not just setup an nginx reverse proxy at the network edge to handle the ssl for the domain(s) and not have to worry about the app itself being setup for it? That's how I've always managed all software personal or professional