elvith
@elvith@feddit.org
- Comment on She strongly disagrees 3 days ago:
370 to go
- Comment on Microsoft: Windows Task Manager won’t quit after KB5067036 update 1 week ago:
It is. To close the Taskmanager, you simply start a new instance and kill the old ones…
So, just don’t forget to select Taskmanager in the list and kill it instead of clicking X and closing the window. Otherwise you need to start a new instance and use that.
- Comment on Help? Caddy reverse proxy 1 week ago:
No, that’s just another hypothetical app that you’re using a reverse proxy for. I just included it to show how you can also set settings for a single subdomain/reverse proxy entry that isn’t used globally on all domains that get served. I used a hypothetical REST API that needs a CORS Header that other apps don’t need (or maybe serve themselves).
admin offdisables Caddy’s admin interface (which shouldn’t be public and if you’re using config files this usually isn’t needed. So just a bit of gardening)serverssets some general server options.and then I just inserted several blocks that each define a reverse proxy to a different app / backend to show that you can just dump them all in a single Caddyfile. And the last example to show that you can set specific settings only for a specific subdomain instead of globally. As I set headers mostly used by REST APIs, I just called that api.example.com instead of app3.example.com.
- Comment on Help? Caddy reverse proxy 1 week ago:
If you like, I can send you an example of the Caddyfiles, that I’m using (I used the import directive to split every service into its own Caddyfiles, you could just copy and paste everything in the same file). It will take a few hours until I get home, though.
But basically you can just put every subdomain and it’s target in a separate block and the add some things globally (e.g. passing the original IP, switching off the admin API of Caddy,…)
Something like this should work:
admin off servers { client_ip_headers X-Forwarded-For X-Real-IP } app.example.com { reverse_proxy 127.0.0.1:8080 } app2.example.com { reverse_proxy 127.0.0.1:8081 } api.example.com { reverse_proxy 127.0.0.1:8080 header { Access-Control-Allow-Methods "GET, OPTIONS" Access-Control-Allow-Origin "*" } }
- Comment on Microsoft Teams can record office presence from December 2 weeks ago:
I mean… Is it really spying? Your company can detect which AP or Switch you’re connected to (or if you’re using a VPN from home), so they do have that data anyways.
- Comment on Internal domain and reverse proxy 2 weeks ago:
Yeah, that’s exactly why I didn’t use my own CA. There’s a plethora of devices that you now need to import the CA to and then you need to hope, that every application uses the system cert store and doesn’t roll its own (IIRC e.g. Firefox uses its own cert store and doesn’t use the system cert store. Same for every java based application,…)
It’s fiddly with Caddy, as you need a specific plugin to get it to work with anything else than the default challenge. That means using a custom build via caddy - and with docker, you’re SOL. BUT you can just use certbot and point caddy to the cert file in your file system.
- Comment on Internal domain and reverse proxy 2 weeks ago:
I have this setup. I bought a domain (say homeserver.tld) from a registrar that allows zone edits with an API. Then I use certbot with a plugin that supports my registrar to get real Let’s Encrypt certificates. Usually Let’s encrypt connects to your server to ensure that it responds to the domain you’re requesting a certificate for, but this challenge can also be done by editing the DNS record of your domain to prove ownership. That is called DNS-01 challenge and is useful of your domain is not publicly reachable. Google for certbot DNS-01 <your registrar> to find some documentation.
Some of the VMs/LXC now get certificates for a specific subdomain (“some-app.homeserver.tld”), other just get a wildcard certificate (“*.homeserver.tld”) - e.g. my docker host.
- Comment on If you want to be classy and impress people 2 weeks ago:
Wouldeth youeth liketh toeth seeth myeth dicketh?
- Comment on The AWS Outage Bricked People’s $2,700 Smartbeds 3 weeks ago:
Wasn’t it also some kind of DNS problem on top?
- Comment on do it cowards 3 weeks ago:
For effective shitposting, right?
- Comment on English moment 3 weeks ago:
- Comment on Immich 2.1 Released with Better Slideshow Shuffle, New Notifications 3 weeks ago:
Hey everyone has a learning opportunity. Some even have a separate production system!
- Comment on English moment 3 weeks ago:
Our Strange Lingo
When the English tongue we speak.
Why is break not rhymed with freak?
Will you tell me why it’s true
We say sew but likewise few?
And the maker of the verse,
Cannot rhyme his horse with worse?
Beard is not the same as heard
Cord is different from word.
Cow is cow but low is low
Shoe is never rhymed with foe.
Think of hose, dose,and lose
And think of goose and yet with choose
Think of comb, tomb and bomb,
Doll and roll or home and some.
Since pay is rhymed with say
Why not paid with said I pray?
Think of blood, food and good.
Mould is not pronounced like could.
Wherefore done, but gone and lone -
Is there any reason known?
To sum up all, it seems to me
Sound and letters don’t agree.- Lord Cromer
- Comment on I don't mean to brag, but I made a killer joke on my company Teams group 😎 4 weeks ago:
My boss makes a dollar
and I just a dime
that’s why I post jokes
on company time - Comment on I don't mean to brag, but I made a killer joke on my company Teams group 😎 4 weeks ago:
😆
- Comment on We'll never have anything like the DVD screensaver ever again 4 weeks ago:
Remember “After Dark”?
- Comment on [deleted] 5 weeks ago:
This is a nice demonstration - and it probably isn’t even much work to run this segment in the show. Those people do not think about covering their tracks, as they do not have “anything to hide”. Also you only need to find a few easy targets in the whole audience group.
As for shooters and such - some have a message to broadcast with their actions and make it easy to link those posts to them. Others may not grasp the amount of tracking and surveillance and may be just bad at covering their tracks. Also they probably didn’t factor in OpSec that much. Granted, they might cover up in the days or weeks before, but there may still be some (years) old posts that they didn’t think about that makes them easy to identify.
- Comment on SearXNG doesn't load the settings ... 5 weeks ago:
@maki@discuss.tchncs.de - I finally got around to be on my PC, so… Maybe this helps? Thats basically my setup on podman. I hope I didn’t break anything, when I scrubbed the files from secrets and also removed everything related to all other deployments (especially the Caddyfile). See the included Instructions.md
- Comment on it's time 5 weeks ago:
I lose hair, have no feathers, but will accumulate fat. So at least that’s going for me…
- Comment on SearXNG doesn't load the settings ... 5 weeks ago:
I’m also using podman to host SearXNG on a cloud vps. If you’d like, I can provide you my quadlet and config files to get it running with podman’s systemd generator.
With those you can just
systemctl enable/disable/start/stop/restart searxng. Also my files do have podman’s auto update activated for the SearXNG stack. - Comment on SearXNG doesn't load the settings ... 5 weeks ago:
uwsgi isn’t used anymore since a change from about 2 months ago IIRC, so this file will probably not be created.
- Comment on Which timezone would win in a conflict? 5 weeks ago:
GMT+3 would like a word
- Comment on The Problem of Writing Poems in the Shape of Deciduous Trees 1 month ago:
Found the LLM bot /s
- Comment on Hardest piano piece ever. 1 month ago:
- Comment on The Video-Game Industry Has a Problem: There Are Too Many Games 1 month ago:
Yeah. When they announced the new Silent Hill I was somewhat interested - although I felt the peak was back then with SH2. But having read about the remaster of SH2 and some reviews that said, it’d return to the roots? Nice!
Then I saw a streamer play it early, watched a bit and it looked promising. So I went to wishlist it. Then the release day comes and steam lists it for 70 bucks (available in two days) or 90 bucks now. Well, no. Let’s see how long the price will be that high, but WTF? I don’t wanna know what’s the price on console for it - usually it’s 10-20 bucks more?!?
- Comment on Public toilets in China demand ad views for loo roll 1 month ago:
Please wipe verification ass to continue
- Comment on Public toilets in China demand ad views for loo roll 1 month ago:
In store:
Clerk: "Well, then… I’d guide you to ShinyBrand. They tick all the marks for what you’re looking for and…
Customer: aren’t those the guys that made me watch a 7 minute unskippable ad, when I was in town on a public toilet suffering a spontaneous and explosive diarrhea, while waiting for a new piece of toilet paper to wipe my sore ass from all that shit?!
- Comment on Managing memes 1 month ago:
- Comment on How many hands long do they get? 1 month ago:
Maybe they’re as tall as bicycles are long?
- Comment on Apple Photos App Corrupts Images 1 month ago:
Oooohhhh, diese Erinnerung - damals als beim Googlen immer ExpertSEXchange als Ergebnis kam und der Firmenproxy das wegen Pornographie gesperrt hatte 🤦
