
observantTrapezium
@observantTrapezium@lemmy.ca
- Comment on Beszel vs Netdata vs Glances: only Netdata publishes a RAM footprint, and its README and docs give different numbers 6 hours ago:
I came here to say exactly these two things 😂
- Comment on PHP selfhosting list 1 week ago:
Roundcube and Baikal for me. I used Mutt for email today 😂
- Comment on Anyone using 6-day certs yet? 3 weeks ago:
No, and if there was an option for a 20-year certificate I would have taken it.
- Comment on Episode Discussion | Star Trek: Strange New Worlds | 4x04 "A Case of Chiaroscuro" 2 months ago:
I only watched it now since the last two episodes were so bad I didn’t feel any anticipation or urgency to watch. It was a minor improvement though, 5/10
Black and white added nothing other than making it feel like Casablanca. The similarities were too much on the nose, it would have been better if it were just a nod.
The idea of the A plot was fine but as usual the writing is careless and full of holes and implausibilities. The B plot was just a waste of time and the resolution was unsatisfying.
There could have been a small subplot explaining why Number One looked identical to the resistance leader instead of “just a coincidence” (and she matched a retina scan too, very convincing).
- Comment on Anybody here does mTLS? 2 months ago:
Ah, interesting. Looks like using grants does resemble what I envision and probably easier to set up that mTLS. I’ll certainly explore that!
- Comment on Anybody here does mTLS? 2 months ago:
Ah, thanks for the idea. I’ll look into Traefik, I’ve heard of it, but wasn’t sure what it could do.
- Comment on Anybody here does mTLS? 2 months ago:
I’m already running Headscale, and it works great. But to expose individual services to individual devices it feels like an overkill. I don’t actually need all these devices to connect to the tailnet all the time, and some of these devices I don’t even want to be able to access the entire tailnet.
- Comment on Anybody here does mTLS? 2 months ago:
My thinking is to put Immich, Matrix, and CalDAV/CardDAV behind mTLS. So the clients practically do connect via native mobile apps rather than a browser. The devices belong to a small number of users, I don’t manage them, but can distribute the keystores, and plan on doing the PKI manually as it’s really not a lot to keep track of.
Not an authentication replacement for sure, just an extra layer of protection. The goal is mostly so that if there’s a new critical exploit, I don’t have to drop everything I’m doing and immediately mitigate.
- Submitted 2 months ago to selfhosted@lemmy.world | 23 comments
- Comment on Episode Discussion | Star Trek: Strange New Worlds | 4x03 "Human Best Friend" 2 months ago:
Improvement from last week, but at the end of the day it’s what we used to call a filler episode… 3/10, maybe a 4.
Dave Foley from Kids in the Hall is the resort manager.