Your ISP might make you go through another layer of NAT. Can you find the WAN IP address of your router and compare it to your public IP address from a website such as ipinfo.io ?
If they do not match, you're probably out of luck and will need to forward your port from an actually public IP in order to achieve what you want
More details : CGNAT (Carrier Grade Network Address Translation) is basically a second router between your router and the public internet. This second router is configured in the same way as your personal one, the main difference being that your ISP fully manages it. From the viewpoint of this second router, your WAN IP is a private IP, and you share one actual public IP with several other customers (the same way all devices on you LAN share one single WAN IP)
Performing port forwarding from the public internet to your LAN, when behind a CGNAT, would require you to be able to configure a forwarding rule in the ISP's NAT, which you usually cannot do.
Something's odd with the numbers from fediverse observer. Numbers shown in monthly graphs should be about 30 times higher than numbers shown in daily graphs, but they are about the same
A blog post I wrote got shared there a while back, but I did not ask for an invite back then. 2 years later, and I don't feel legitimate to ask for an invite anymore
Having a certificate for any subdomain has implications for other sibling domains, even without a wildcard certificate.
By default, web browsers are a lot less strict about Same Origin Policy for sibling domains, which enables a lot of web-based attacks (like CSRF and cookie stealing) if your able to hijack any subdomain
I did not have the money to pay the insane amounts these greedy for-profit certificate authorities asked, so I only remember the pain of trying to setup my self-signed root certificate on my several devices/browsers, and then being unable to recover my private key because I went over the top with securing it.
I did not expect such a detailed code review (the fact that you wrote it on mobile impresses me even more), but I strongly agree with everything you mentioned. I think I was so caught up learning GLSL and its quirks, then playing and experimenting with the simulation, that I "forgot" my coding standards. Anyway, I'll make sure to take some time to update both the code and the article following your recommandations.
Thank you for the feedback. I had a lot of fun playing with the model (and still have some improvements on my mind that might require porting it outside of Shadertoy)
Is there any part that was especially hard to understand ? I'm trying to make it as clear as possible for developers without a scientific background.
I can recommend some stuff I've been using myself :
Dolibarr as an ERP + CRM : requires some work to configure initially. As most (if not all) features are disabled by default, it requires enabling them based on what you need. It also has a marketplace with a bunch of modules you can buy
Gitea to manage codebases for customer projects. It can also do CI but I've not looked into it yet
Prometheus and its ecosystem (mostly promtail and grafana) for monitoring and alerting
docker mail server : makes it quite easy to self host a full mail server. The guides in their doc made it painless for me to configure dmarc/SPF/other stuff that make e-mail notoriously hard to host
Cal.com as a self hostable alternative to calendly
Authentik for single sign-on and centralized permission management
plausible for lightweight analytics
a mix of wireguard, iptables and nginx to basically achieve the same as cloudflare proxying and tunnels
I design, deploy and maintain such infrastructures for my own customers, so feel free to DM me with more details about your business if you need help with this
It's not that I don't believe you, I was genuinely interested in knowing more. I don't understand what's so "precious" about a random stranger's thought on the internet if it's not backed up with any source.
Moreover, I did try searching around for this and could not find any result that seemed to answer my question.
This has existed since at least 2018 according to their Twitter, and is related to crypto currencies through its Radworks DAO
Edit : I'm not saying OP themselves is a shill. Radicle did a pretty goog job at hiding its cryptocurrency ties. They even renamed their token from Radicle to Radworks a few years ago. It seems like cryptobros are adapting to the fact that being related to cryptocurrencies hinders adoption among technical people.
You're probably behind a CGNAT, check out the other comments