KairuByte

I want to mention, bit rot is real. The data can be read, that doesn’t mean it hasn’t degraded. Tape has a much lower chance of the data just… changing.

Now, does it truly matter? It depends.

If you are truly worried that your precious photos are going to rot away, then it may be worth it to invest in tapes. Irreplaceable data is priceless, after all.

This is what immediately came to mind for me.

We are cut of the same cloth.

mouse not pictured

Got my hopes up for nothing!

My major complaint about the Planka move is that the change was implemented in a minor version number, with less than a week of notice.

I normally update minor version numbers when past 1.0 without reading the notes, because you typically don’t expect major changes like “you’re going to get locked out of your instance” to be handled like that.

I’d stay away from Planka for one major reason: They have started to claw back features that were previously in the community version, and moving them behind a paid tier. OIDC is such a feature, their reasoning being support load, and despite the many calls to just not provide support for OIDC they have assured the community that the consensus is that it’s an enterprise only feature.

tl;dr: Avoid Planka.

My dude, look into tailscale. Same concept, just as easy to set up, and likely more features. And it’s human made, human tested, and used by a large number of different type of end users.

Just be glad it gets a second season at all. The number of anime that are dead on the vine for no apparent reason is crazy.

Yes, it’s also how I run all my services. I checked just this moment, and locally my certs verified by field is Let’s Encrypt, while remotely that field is Google Trust Services

I have never personally provisioned a cert from Google. I have only ever utilized Let’s Encrypt. That leaves just one involved party that could have requested, received and presented this cert: Cloudflare.

Tunnels aren’t inherently CDN, you can tunnel UDP info for instance (if you use cloudflared on both sides) and inherently transient things such as websockets.

I’ve had none of my media be cached in their CDN for instance. In fact you’d likely have to do some hoop jumping to make it happen.

No it was definitely removed, they now have essentially “don’t be an ass with the bandwidth.”

Does this hot end smell like chloroform to you?

They don’t care, that line in the ToS was removed years ago now.

How is your DNS set up for that subdomain? Is it on a wildcard DNS record?

I mean, if you put restrictions on the requirement sure. At that point it kinda becomes a loaded question though.

If you remove the restriction, just use a cloudflare tunnel.

Have you actually confirmed that is the case? My understanding is that cloudflare pretty much always re-signs with their own SSL cert. and I’m fairly certain that would be absolutely required when using their DNS proxies.

Oh… boy, that’s an angle I hadn’t considered.

Doesnt any dns challenge currently just look at domain.com to see if it can create the lower cert?

Cloudflare doesn’t pass the cert you have through, it generates its own cert (or uses one you provide).

Oh this looks very promising, thank you!!

I’m not currently using kubernetes but its something I’ve thought of looking into before. I’ll definitely give that a look for better terminology though!

I’m looking for a way to both get a sub wildcard (I don’t know the exact wording but *.sub.domain.com would be an example) and push it into cloudflare. So a direct certbot install with manual distribution, while technically possible, sounds absolutely abysmal. I’d rather forget the entire idea than deal with that.

I’ve always wondered, doesn’t Backblaze cut exfiltration costs to zero if you proxy it through cloudflare? Why isn’t that an option so you’re only paying for storage costs and not bandwidth?

Honestly, the one major thing I want from Authelia is the ability to add to it without deauthenticating the entire userbase.

Well, that and an easier way to organize than everything in one single file…

HTTPS traffic is still HTTP traffic. There’s just an encryption layer in there.

And yes cloudflare absolutely supports https.

My understanding is that there is no hard limit. At some point they will decide “this is business level traffic” at which point they will start harassing you to purchase a business plan.

That cutover point is unknown. I’ve never even seen an estimation of when it happens, so it could very well be the type of traffic instead of the amount.

They also only allow HTTP traffic for the free tier, which is another way they push you towards business tiers.

Not to mention, the amount of data you can run through it is nuts. I’ve been running Stremio web through it for months without issue to watch content at work.

Personally I didn’t want to have to hand out VPN credentials to everyone, so I went with a cloudflare tunnel with Authelia as the method of authentication.

Doesn’t the DS… just have a browser? Meaning you’re just pointing at a web page here?

Very much in the same vein as Azure.