Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)W

wildbus8979

@ wildbus8979 @sh.itjust.works

Posts
3
Comments
393
Joined
3 yr. ago

  • Self hosting with subdomains

    Jump

  • Absolutely. Simply use ACME with the DNS validation method. Using bind you'll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn't exclusive to bind, ACME tools supports dozens of other backends. That's all you need the actual domain doesn't need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.

  • Self hosting with subdomains

    Jump

  • Except it isn't. Saying it is trivial is just gross generalization. It's trivial to configure bind to have internal zones that aren't resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.

    You can have (sub)domains that are listed in the certificate lists and yet aren't resolvable externally as well.

  • Self hosting with subdomains

    Jump

  • It'd be better and more accurate say the list of certificates then.

    Sub domains aren't public unless your DNS server has XFER on.

  • Self hosting with subdomains

    Jump

  • Worth noting about this approach is that the global list of subdomains is publicly searchable.

    Can you expand on this? What is it that you call the "global list of subdomains"?

  • Is there any legal justification for the US attack on Venezuela?

    Jump

  • Contract for self-hosting help

    Jump

  • It’s not rocket surgery

    Easy to say for a rocket appliantist.

  • [SOLVED] Send commands to Linux box via e-mail?

    Jump

  • I'm not sure that's a good idea security-wise.

    You could always sign the messages with GPG or S/MIME.

  • TMNT

    Jump

  • Fed on a diet of pizza (totally wrong for a tortoise) and kept out of the sun for the majority of the time by that psychopath of a rat, it's unlikely these kids don't have massive developmental issues and stunned growth.

  • How cold is too cold for storing in a garage?

    Jump

  • It should be fine to well bellow freezing, you just want to make sure it heats back up slowly(ish) and try to prevent condensation. Most electronics is rated to -20°C for storage.

    Worst off maybe the belts don't survive, but that's unlikely. Remember this stuff get transported all over the world in barely conditions planes and vans. Left at the doorstepzof houses in Canada at -30°C.

  • Removed

    How many of you are actually fine with living in USA or are you planning on moving some where else?

    Jump
  • Deleted

    Permanently Deleted

    Jump

  • Have you ever looked at the available packages in a Linux distribution like Debian or a BSD? There are thousands and thousands of library packaged to support software releases. Like I said, that had been the distribution model for the better of twenty+ years until this new, shittier, model.

  • Deleted

    Permanently Deleted

    Jump

  • That's essentially how most distributions of Linux and Unix work. You package an app with a list of depencies like "libcaca >= 1.2.3" and that's that. If that dependency isn't available in the distro you need to have that packaged (and thus have a maintIner for said package) first. The distro's package maintainers are responsible for keeping an eye on the upstream sources and provide reviews. Often there's also a security team that watches for packages requiring expedited attention, and security backports.

    Then this sort of crap like NPM came along and it became popular for devs to package their own dependencies.

  • Deleted

    Permanently Deleted

    Jump

  • I'm not super familiar with Maven so I could be wrong, but doesn't Maven still pull depencies from upstream? That doesn't fix the problem. Having depencies packaged in the OS means there is in theory some level of overview and review by the package maintainer(s).

  • Deleted

    Permanently Deleted

    Jump

  • Debian does as well for anything that is packaged; python, golang, rust, etc.

  • Deleted

    Permanently Deleted

    Jump

  • The first issue is NPM specific sure, but the second is true of all the languages I mentioned. Even golang which originally had a goal of having a built in library so vast you didn't need much depencies has devolved into a large and fractured community.

  • Deleted

    Permanently Deleted

    Jump

  • This truly has grown past a JS problem. NPM was kind of the first time dependencies were installed by the project rather than through the OS. But nowadays this has become the norm, golang, rust, and to an extent python also work by installing dependies directly from git for the most part. This isn't going to get any better unless we revert to OS based dependencies which noone wants to do because developers want the latest and greatest model.

  • Deleted

    Permanently Deleted

    Jump

  • Anything that supports bind's built-in nsupdate.

  • Umami is vulnerable - upgrade immediately

    Jump

  • What microcontroller options do I have?

    Jump

  • It sure does, with its in-house display library, nexion displays, or LVGL.