Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)E

Err(()).unwrap()

@ rtxn @lemmy.world

Posts
9
Comments
468
Joined
3 yr. ago

Partisanship is a cancer. Inaction is a choice.

Singular they. Or whatever you like, I won't take offence.Proud member of the Banned By Tesseract Club.

  • Painful Sideloading

    Jump

  • Realistically, I don't think any year will be the year when Linux for mobile takes off, ironically for the same reason why Windows Phone failed, and that is app availability, or the "will my banking app work on it?" problem.

  • Painful Sideloading

    Jump

  • Is 2026 going to be the year of the Linux handheld? /s

    (No, Android is no more a Linux OS than the PlayStation is a BSD fork.)

  • Opencloud is reachable from external internet but not by local IP

    Jump

  • Open config.php and look for the entry named trusted_domains. Make sure it contains both the domain name and the local IP address:

     php
        
'trusted_domains' => array(
    0 => 'nextcloud.your.domain',         // the public FQDN
    1 => '172.22.?.?',                    // the local IP address
    2 => '...',                           // other addresses, like if you're using a VPN
),

    If the web app is opened using an address or DNS name that isn't included in this list, the browser will connect, but the app will refuse to work.

    Nevermind, I completely overlooked that the service is Opencloud, not Nextcloud. Nevertheless, you should investigate whether Opencloud has an equivalent config variable.

  • Removed

    Claude-powered AI coding agent deletes entire company database in 9 seconds — backups zapped, after Cursor tool powered by Anthropic's Claude goes rogue

    Jump

  • PocketOS founder blames ‘Cursor running Anthropic's flagship Claude Opus 4.6’

    Fuck that. I'm blaming the PocketOS founder and every person in the chain of decisions that led to a clanker being given this level of unrestricted access to the database and the backups.

  • Deleted

    Any danger in enabling SSL/TLS in tailscale?

    Jump

  • https://tailscale.com/docs/how-to/set-up-https-certificates#machine-names-in-the-public-ledger

    Your machine names and tailnet domain name will be added to a list that is publicly accessible when a new certificate is issued to one of your machines. CT is meant to verify, through one or multiple third parties, that a certificate was issued to a particular DNS name. This isn't unique to Tailscale -- all other CAs do this, and modern browsers will refuse to connect to websites if they can't verify the certificate through at least one CT ledger.

    This doesn't expose your systems any more than getting a DNS entry and a certificate from other sources. If you don't want your tailnet and machine names out in the public, you'll have to use self-signed certs and self-hosted HTTPS-capable servers or proxies.

  • It's self hosting Sunday! What's up selfhosters? Infrastructure edition

    Jump

  • Right at this moment, I'm rebuilding my homelab after a double HDD failure earlier this year.

    The previous build had a RAID 5 array of three 1TB Seagate Barracudas that I picked out of the scrap pile at work. I knew what I was getting into and only kept replaceable files on it. When one of the drives started doing the death rattle, I decided to yank some harder-to-acquire files to my 3TB desktop HDD before trying to resilver the entire array. Guess which device was the next to fail. I could mount and read it, but every operation took 2-5 minutes. SMART showed a reallocation count in the thousands. That drive contained some important files that I couldn't replace, which were backed up to the (now dead) server. Fortunately ddrescue managed to recover damn near everything and I only lost 80 kilobytes out of the entire disk. That was a very expensive lesson that I've learned very cheaply.

    The new setup has a RAIDz1 pool of 3x 4TB Ironwolf disks (constrained by the available SATA sockets on the motherboard), plus a new SSD for the OS and 16GB RAM (upgraded from literally the first SSD I ever bought and 10GB mis-matched DDR3).

    Mounting it was a bit of a dilemma. The previous array was simply mounted to the filesystem from fstab and bind-mounted to the containers. I definitely wanted the storage to be managed from Proxmox's web UI and to be able to create VDs and LXC volumes on it. Some community members helped me choose ZFS over LVM-on-RAID5. Setting up the correct permissions wasn't as much of a headache as last time. I've just managed to get a Samba+NFS+HTTP file server and Jellyfin running and talking to each other. Forgejo and Nextcloud will be next.

  • Any tech wizards available know how to boot a F-35 into Safe Mode? Speedy replies appreciated

    Jump

  • Looks like the ejector switch. Imagine trying to scratch your balls mid-mission and immediately shooting out of the plane pulling break-your-fucking-spine Gs.

  • Any tech wizards available know how to boot a F-35 into Safe Mode? Speedy replies appreciated

    Jump

  • Just install linux bro, it's not that difficult. You'll have to compile the F-35 drivers from source, but that's just the cost of having a reliable system.

  • How should I mount my storage HDDs in Proxmox?

    Jump

  • ZFS uses the RAM intensively for caching operations. Way more than traditional filesystems. The recommended cache size is 2 GB plus 1 GB per terabyte of capacity. For my server, that would be three quarters of the RAM dedicated entirely to the filesystem.

  • amneziawg-installer: one-command VPN server that works where WireGuard gets blocked

    Jump

  • Read my comment again, it has the answer. Most VPN services do not provide end-to-end tunnelling. If the exit node is located outside Russia, then what enters the Russian internet will be simple HTTPS traffic.

  • amneziawg-installer: one-command VPN server that works where WireGuard gets blocked

    Jump

  • Been running it from Russia where stock WireGuard stopped working mid-2025.

    Sounds like the issue is ISPs within Russia blocking outgoing Wireguard traffic from customers.

    If the traffic exits the tunnel without hitting a Russian ISP (e.g. a Mullvad exit node in Sweden that routes the unencrypted traffic to the destination), you won't be affected. If the exit node is behind a Russian ISP, it might get filtered by DPI depending on which direction is subject to the filter.

  • Moving to rust

    Jump

  • The person behind their twitter account is a notorious shitter.

  • I've had some of my browser bookmarks since 2022.

    Jump

  • It's less the length of time and more the number of times it should have been deleted, considering it has no value to me.

  • Tailscale serve and sharing devices

    Jump

  • Tailscale serve and sharing devices

    Jump

  • If the other person has a Tailscale account, it sounds like the most expedient method is to simply invite them to the tailnet as a non-admin user with strict access control.

    You could share a node with an outside user, but I don't know how much the quarantine would affect its functionality. You could also use Funnel to expose the node to the internet (essentially like a reverse proxy), but there are obvious vital security considerations with that approach.

  • Probably want to stop using Booklore...

    Jump

  • The treekie in me wants BookData.

    (edit) This made me remember The Measure Of A Man and now I'm fucking depressed. They had such high hopes for the future.

  • Remote KVM recommendations

    Jump

  • Fuck, I'm an idiot. I really shouldn't be giving advice when I'm sleep-deprived like this. I completely forgot that when I used RDP, I did it through an SSH tunnel.

    Removed.

  • Remote KVM recommendations

    Jump

  • SelfHosting Guilty Pleasure(s)

    Jump

  • Three important factors:

    • Gigabit ethernet
    • SATA-attached storage
    • My family not knowing what the fuck USB 3.0 is, and why blue USB is better than black USB.