How does programmatic access tie into the desire for a login form?
Either way, you can do a login form -> basic auth forwarding page by rigging up some simple JS, or access programmatically in a direct way by simply setting a manual Authorization header.
Tape drives are the keytars of the tech world. They seem cool and a pro can really jam with them... but they're not the most practical and you should really get a guitar or a keyboard until you know what you're doing.
Yeet your shit onto rsync.net or sth else simple and call it a day, unless you're in it for the meme.
It’s absolutely not a given that an OS that’s been battle-tested in prod for five years is less secure than one receiving hot supply chain injections every week.
The only major RCE I can think of since EOL in May is the recursive git clone one.
I’ll happily spin up a public 20.04 box if you wanna prove me wrong.
I respect the spirit you're going for, but FYI, Libby/Overdrive are private-equity owned and just as exploitative (if not more so) than the major publishers were.
Libby does not give libraries an unlimited license for digital books, but rather makes them pay what they would for a physical book, and allows them to loan out the digital copy a relatively small number of times (usually around ~4-5 IIRC) under the guise that a physical book would have been irreparably degraded after that amount of use. There's a stream of billions of dollars being moved from non-consenting taxpayers going right to a monopolistic gatekeeper.
If we're talking physical books, libraries are definitely still great for that, but I find that the vast majority of the time I look to check if they have a specific book I'm after, there are zero physical copies anywhere in the system, and all the digital "copies" are already "checked out". E.g., I went looking for a copy of PKD's Valis last week, and my options were: library audiobook (vomit), wait two weeks for a "checked out" digital copy from the library (vomit), buy from Amazon (vomit), or sail the seas.
So no, that's a shitty substitute — libraries have been co-opted into an extractive, for-profit system and utterly perverted into a shell of what they were in the 20th century.
Amazon may take action against egregious mass-scanning offenders per the “…to violate the security, integrity, or availability of any user, network…” verbiage of the AUP, especially if they’re fingerprinting services or engaging in more sophisticated recon, but OP’s complaints are nowhere near meeting that threshold.
You’ll get used to it eventually, but you can e.g. tweak your PS1 to an all-caps hostname, or use a custom tmux layout with dedicated panes for each box you connect to.
However, the hardware market is in a weird spot right now; you’ll get far more bang for your buck with an Intel N150. You can find a 16GB DDR5 w/ 1 TB SSD around the $200 mark, and that’s what I’d roll with in your shoes, assuming you don’t mind living without a spinning disk. Your Jellyfin and Immich instances will run far smoother.
The TLDR is that a history podcaster started doing a martian sci-fi arc on his podcast series about political revolution, but delivered it 100% straight without any fanfare. It’s quirky but very good.
Please tell me more, which firewall would you recommend that plays nice with Docker?
Firewalld
No NAT?
Another user in this thread suggested DMZing, so combine your advice with theirs and boom. It’s not uncommon, and it’s fine if you firewall the box yourself. Most people don’t knowingly choose to use a firewall that they don’t intend to work, like you would.
why would you copy paste a docker compose without reading it?
There’s more than one way to use docker. Spinning up an official mysql image using the official docker run OR docker compose calls suggested by the docs would start up a server wide open to the entire internet if DMZ’d.
How does programmatic access tie into the desire for a login form?
Either way, you can do a login form -> basic auth forwarding page by rigging up some simple JS, or access programmatically in a direct way by simply setting a manual Authorization header.