philpo
@philpo@feddit.org
- Comment on What's your opinion on Ubiquiti/Unifi gear? 1 hour ago:
Still mediocre compared to OPN/pfsense, IPfire, VyOs,etc.
- Comment on Looking for FOSS server monitoring UI 18 hours ago:
I must admit I can’t find the exact guide I used anymore. Especially not a English one.
But the official guide should help you: www.zabbix.com/de/integrations/proxmox
I think whatever I used was pretty close to it. If you have any issues send me a DM.
(And tbf, I use both the Agent2 and the API in a perverse mixture. And for some nodes IPMI on top of it. It’s really kinky,but it does the job)
- Comment on What's your opinion on Ubiquiti/Unifi gear? 18 hours ago:
Absolutely, but unlike Ubiquiti they did not keep them under the rug that long. (Nevertheless: Both are shit for firewalling. Put a OPNsense before it?)
- Comment on Looking for FOSS server monitoring UI 1 day ago:
Zabbix is extremly nice.
Why?
-
API Monitoring for Proxmox and Docker/Podman. Aka "you don’t need to setup monitoring for every container/LxC/VM. Do it once for the host,then everything gets autodiscovered.
-
Active and passive agents as well as SNMP, IPMI,etc. can be combined as you like. Also does Website/service/application/database monitoring, SSG/Telnet checks and nowadys can even do Prometheus and MQTT/Modbus
-
The proxy is really really worth it. It collects data from nodes you do not want exposed and relays them to the server. This includes all kind of inputs and is really easy to setup.
-
Due to it being around for two decades there are a shitton of templares for devices - and it’s fairly easy to do your own.
-
Unlike other systems (cough checkmk cough Grafana) there are no features that are only available to paying customers.
The most major downsides are the fact that it’s moderately to fairly ressource intensive to run in a small setup(but does consume less than others in large Setups) and it’s far less flashy dashboards. (Which are still powerful,though)
-
- Comment on What's your opinion on Ubiquiti/Unifi gear? 1 day ago:
Not a fan. Absolutely not.
They had multiple security incidents which they kept under the rugs for a long time, they have the tendency to EOL devices without warning (which then means you need to replace your sometimes 9month old device or your whole enviroment can’t be updated), their lock-in into their ecosystem is much more complete as they can’t be used properly without their enviroment.(e.g. Omada devices can work without the Omada stuff, with Unifi you will always need a controller for some functions).
So if you realy need SDN features like Unifi look at Omada,otherwise Mikrotik is a solid alternative. (And OPNsense for firewall)
- Comment on System Redundancy 1 week ago:
My company is a part of critical infrastructure and we provide consulting in disasters (e.g. how to get a hospital back up and running). So we fall under European legislation to have certain precautions. And as I colocate in my companys rack…it’s easier. As the rack is in a room I rent to my company. (We are small and I am the founder,that makes it easier)
But yeah, we put a bit of thought in it. Waiting for Iris2 finally materialise so I can get rid of LTE finally.
- Comment on System Redundancy 1 week ago:
I have a LTE Backhaul,but admittedly if the firewall itself craps out I would also be offline - but I can at least reboot it via a plain old GSM power plug. That thing does not directly reboot the firewall,though, but brings up a old raspberry (usb boot,I don’t trust sdcards) which then checks if outside connectivity is still available (so if the GSM power plug gets compromised it’s not an issue) and if not tries a shutdown or,if that is unsucessful, a powercut of the firewall. If that also doesn’t work it triggers a dry contact in the GSM plug which leads to the plug sending out a SMS so I know I am fucked and need to get someone with a key to the rack.
- Comment on How long does it take for pregnancy to become noticeable? 1 week ago:
Paramedic here with specialised delivery training. Delivered around 30 babies probably. Saw a high three digit number of pregnant patients.
You can’t reliable say that. Until you see the kid.
And I don’t mean the cases were the mother is blocking out the pregnancy mentally until she is crowning. (But tbh, it’s one of the most cherised moment of everyone in my profession if you have the “I am not pregnant,you idiot!” “Ma’am, I literally can see the hair of your baby coming out…oh and here’s the rest of the bub”-discussion)
I literally had a aquaintance not recognise her pregnancy (and she had been pregnant before) until she went to hospital for stomach pain. I saw her the weekend before and did not recognise the pregnancy. And,yes, the baby was full term. Happens, especially if the uterus is not in its usual place.
In other people you see it after 8 weeks (and well,it is often not the belly that is the first indicator which grows suddenly).
Other people look like "13 months pregnant with triplets"at the beginning of their second trimester.
Anyway: What is the reason for your question? (And: If you or anyone needs support in that case write me a messge. More than happy to guide you in the right direction if you are in a tight spot.)
- Comment on World's largest particle accelerator begins warming thousands of local French residents with waste energy from the 16-mile Large Hadron Collider 1 week ago:
Datacenter heat is actually a very good source for local heating networks and a lot of European countries either already mandate to consider it when feasible, have introduced legislation that will make it mandatory over the next years or are at least supporting it financially.
It’s actually fairly common to do so for a long time here - from waste incineration, steel mils, nuclear plants, etc.
Personally I heat my office from my server rack and my old job did heat one of their office buildings from the heat generated by the data center in the basement. (And funny enough also did partially cool it from that source)
- Comment on Looking for a European news service 1 week ago:
Excellent points,just a few things added:
-
Sueddeutsche has a english section as well that also includes some articles from the Atlantic
-
TAZ.de is also an option,it’s free but mostly German (but also has a small English section). It’s bit like the Guardian but more left leaning.
-
heise.de is a reasonably good news source for tech news both in German and English
-
France24.com is a good english speaking choice for world news,especially as they often cover topic not heavily covered by other news outlets,e.g. things in Africa,Asia,etc.
-
Sadly only German speaking but ver good: Der Falter (falter.at) from Austria.
There is a directory of European newspapers at newspapers-europe.eu.
Another protip: You can get registered in a library and a lot of them provide free access to a LOT of magazines to read for free online. And you often don’t even have to live close to said library to register and can register online.
-
- Comment on YSK that a general strike is one of the most effective ways to push for change. There is a general strike in the works across the US for this Friday. 1 week ago:
Technically they are not illegal here - they are just not protected under the (very strong) strike protection laws.
So workers in Germany could go into general strikes but they would not be covered by strike law and therefore just absent from work. Which of course is an issue - but in case of a proper general strike, what are they gonna do, fire everyone? Especially in times when there are countless positions open?
So one would only get into trouble work wise,but not otherwise - one would not get arrested, cannot get sued (besides a very limited scope worklaw wise),etc. Only certain kind of civil servants (similar but not as common as the Pubblico Impiego in Italy) will get in trouble if they go on strike. E.g. cops, fireman, teachers, municpial clerks (but not muncipial workers and not all kind of clerks),etc.
Which I find somewhat fair as our strike protection laws are far reaching (afaik even a bit further than in Italy) and the employer is often as fucked by politics as the staff. So it’s a somewhat tradeoff I personally can live with. (Seen from my time as an employee. These days I am a small employer,but as left as ever,and from a employers point of view wouldn’t care to much - but the nature of my business supports it.)
- Comment on If a Space Elevator became a reality, wouldn't the cable act as a kind of wick for all of the unfiltered radiation from outside our atmosphere? 2 weeks ago:
And tbf, her ovaries worked fine for quite some time it seems - she had two daughters who both were exceptional people in their fields as well - one got a nobel prize in chemistry, the other was a Pulitzer prize nominee, fought the nazis, was a war correspondent, had role in the establishment of NATO and UNICEF and -as a representative of UNICEF and together with her husband received a nobel peace price for the organisation. The later one died in 2007,btw.
(The whole family is totally crazy,btw. Both on her sisters and cousins side, but also her daughters and grandchildren and now grandgrandchildren. Everyone excelled in their scientific field)
- Comment on Reproducible alternatives to nextcloud? 3 weeks ago:
Have a look at open cloud.
- Comment on What's a good printer for ASA filament? 4 weeks ago:
Sooo…as promised a feedback about the U1:
-
it did print a small (10x10x5mm) test cube without issues even without a hood. (Black Forest Filament ASA HF)
-
with a improvised hood that was anything but airtight I achieved 57° degrees inside the hood (measured with a temp probe 10cm above the plate). (I literally just chucked my kids toy basket on it)
So. With a proper hood it should be no issue to print ASA in larger prints. But there are two downsides, well,one. The other one might be helpful.
-
There is very little room inside the build chamber that is not used, very different from the P1S for example. That will make it hard to just chuck a heater in - it very likely would need to go in the top cover or somewhere else. I have ordered the Panda Breath,but that will take another month to arrive.
-
The printer is very open in the bottom.(Literally jusf grated metal) On one hand this might be an issue if too much cold(or dusty) air comes in through that or too much air goes out through that that is then unfiltered.
So my current idea is to actually use the space below the printer for heating or to remix the hood from srinn to have space for the Panda Breath.
-
- Comment on Do drug dogs ever get addicted when working or during training? 4 weeks ago:
You’re so right. I mean…I used to work with people who were K9 handlers and anyone who even brought his dog in a situation that would allow direct contact would be scrutinised. Repeatly? You are no longer a K9 handler and probably no longer a officer.K9 training is expensive and a handler who let’s that happen would not be in control obviously. But training here is done on a state level (we have no local law enforcement in my neck of the woods), regulated on a national/federal level and passive signaling is preferred these days anyway.
So… As you said… Even a dog getting an OD would be so crazy here it would probably make national news if the media got wind of it.
Crazy.
- Comment on What are good option for self hosting home security camera? 5 weeks ago:
Have a look at Agent DVR. Works locally and the “pro” features that one would need to pay for are basically just Plugins. Everything else works nice without it. Additionally it accepts basically everything you throw at it camera wise and is far easier to configure than frigate, also has a (good) HA integration and is extremly mighty if your system grows over the years.
- Comment on What are good option for self hosting home security camera? 5 weeks ago:
Did you just seriously recommend port forwarding to a NVR login? Even worse with a consumer grade router? With HTTPS,non Standard Port and a strong password as the only security tips?
Please,people,for the love of god: Don’t do that. Really. Don’t. This is really bad advice,sorry.
Unless you are very very sure that your NVR solution is impecable in terms of security (none are), you are 100% sure you stay up-to-date all the time (including reviewing updates for issues) and have additional measures like fail2ban, IDM/IDS,etc. in place this is a very bad idea. HTTPS is only helping in terms of password transmission/spoofing,which is an unlikely vector here, a non standard port doesn’t help one bit here(have a bit of fun with shodan and see yourself) and while a strong password helps it only helps if the auth of the system and the OS below itself is watertight - a hard task.
It is always a bad idea to port forward unless you really really cannot avoid it.
Use a VPN - as you said, wireguard.
- Comment on Linux Slicer 5 weeks ago:
Orca as a flatpak/AppImage works without any issues here.(Debian 13, Fedora 43) There is also a LinuxServer.io version which I tend to run on my server and simply use a browser.
- Comment on What's a good printer for ASA filament? 5 weeks ago:
Yeah. But with any hood (aka the famous ikea hood) it seems to ve already working reasonably good.
In theory the P1S is also not good for ASA due to it’s lack of chamber heating.
In reality I print 50% of my prints with ASA and besides some preheating via plate it is a walk in the park. (Which by now is automated via Home Assistant for me).
And of course there are always external heaters available. A friend has his P1S in a basement that has 5° all year round. A 30€ heater did it. Simply chucked into a corner and done.
But yeah. Out of the box it is an issue,yeah. I will report back.
- Comment on Croutons are just stale, dry bread with good PR. 5 weeks ago:
Good,selfmade and freshly made ones, are heavenly.
- Comment on Croutons are just stale, dry bread with good PR. 5 weeks ago:
Wtf? I know multiple french people (I live right at the border) who make them themselves and taught me how to. (And freshly made is a huge difference)
- Comment on What's a good printer for ASA filament? 5 weeks ago:
The Centauri was designed to be a price breaker and has some drawbacks,but currently it is mainly so cheap because they did not manage to get a proper multicolour system going (which they promised). For someone who mainly prints ASA it’s a decent choice and relatively open software wise. I have a few friends who have it and none had issues - and all were new to printing. (Tbh, if I had the WAF and the room I would have one for ASA/technical printing only…but well…)
For the Snapmaker everything I read in terms of ASA would make it “workable”. (Even with a 12$ hood from a Ikea basket). If you send me a DM around the 15th or 20th of January I can tell you more,by then mine should have arrived and I should have had to run tests for all my technical filaments. (Even if you just want to print ASA/technical a toolchanger has its merits,e.g. for mixing materials or -this is not yet implemented but like to follow- different nozzle sizes). It’s very very unlikely that it will take hundreds of hours of work to print ASA - all the people I spoke with basically chucked some kind of hood on it and were good to go and from the technical parameters it should not be an issue. And if it is then it’s "chuck a external heater in some corner and your donex(they come prebuild these days).
Good that you take it seriously. Sadly there are a lot of people onlinr who claim “ASA is not toxic, I sleep next to my unfiltered ASA printer all the time”,etc. The reality is: A longer ASA print is deadly enough to kill a small bird in a small room. While filaments have improved, the filtering solutions used by printers are often,well, not much more than a marketing buzzword and none eliminate the risks - which is an issue as ASA has some potentially cancerous compounds (in theory they are not used normally - but formulations differ between batches), stryrenes are always airway inflamming and ASA is the worst offender for ultrafine particles. So your solution is basically the best thing you can do but sadly my garage has no power and is far to prone to thieves.
And yeah, ask me about Bambu being a shame. They were always “doubtful and not open”, but their shit worked. A few month after I got mine they went full enshitification mode and did their crazy lockdown thing. (Only when facing legal consequences they at least backtracked a bit - but it’s still not all the way). And their support is pure evil (my favorite story: They did not send me part of an order - somewhat expensive spare part and required a video of me not getting the part - how in hell I should have done that is still a mystery - A stronly worded legal letter helped). And their new product lines are somewhat buggy,artificially limited (like the actively heated AMS that cannot print and dry at the same time), the spare parts that don’t exist in the required amounts and the very strange design decisions that seem to be mainly driven by “doing things in a way that keeps the ecosystem closed”.
- Comment on What's a good printer for ASA filament? 5 weeks ago:
If you just want to print ASA and no multicolour the Centauri Carbon is actually not a bad choice - it brings everything to print ASA and works relatively reliable. And it goes pretty cheap at the moment.
Not quite in your price range but the current hot shit (would need a improvised top cover and maybe even a external chamber heater) is the Snapmaker U1,but while it seems a decent machine so far it is clearly meant for PLA/PETG/PCTG. Nevertheless I am also using my P1S (Bambu) as a very sucessful ASA printer which in theory shouldn’t be possible (it is,just needs more time and preparation).
BUT: please, for the love of god,the spaghetti monster and everyone else: Still get a proper ventilation/filter solution. While ASA is less toxic than ABS it is still far from healthy.
And stay away from Bambu,imho. Not only is their whole environment becoming more and more walled garden like, their support and spare part availability is simply shit.
- Comment on Are there any documentaries on what government mental hospitals are like when a defendant is found Not Criminally Responsible/Insane/Not guilty on account of medical status? 1 month ago:
Each patient had either a double (2 patients per room) or single (one patient per room). Each room is a regular psych ward room if you do not account the doors and windows. (We still had iron bars but these are phased out in favour of high security glas). The doors are similar to prison doors, the windows are shatter proves high security glas.
This is a good representation: wz.de/…/w709_h483_x354_y241_bed737e9084c58b2.jpg
Additionally there are multiple “special isolation rooms” per ward. These contain nothing but a ground integrated toilet (which can only be flushed from the outside) and a matress - and a lot of cameras. Patient who are in crisis can be seperated in there as an alternative to bed bound fixation.
In terms of activities: Patients have some form of therapy almost every day - either group, individual, work, ergo, etc. - as the main goal is healing/making people so healthy again that they are either no longer a danger and can step by step be released or can be transfered back into the prison system. (Tbh, both goals do not happen that often) Besides that: They can go into the yard, we also had a little veggie garden (which technically was illegal as the veggie were not allowed to be used for human consumption), meet with other patients in communal spaces, we had a open kitchen so they could cook. (Similar to prison they could order things every other week from a store) and well, if they have a TV (must be rented by the patient) can watch TV or borrow a book from a library(more on that below). The lower security wards also had a small gym and “communal activities” room with a billiard and so on, we didn’t.
Sounds nice? It isn’t. It js far worse than prison for most people and besides a few long termers who simply did not want anything to change after so many years absolutely every patient I have seen would have preferred prison
Why? While superficially the regime in forensic psychiatry sounds much more relaxed it isn’t under the surface. Almost half of all patients face measures under direct force (e.g. isolation, forced medication, fixation) within the first 4 months upon being admitted. That is MUCH more than regular prison (afaik their percentage in max sec is 5%).
Unlike prison it’s it’s much harder to get drugs in, as patients and visitors are screened much more and, even if you do, you get drug tested regularily (daily on drug rehab wards, weekly as a new entry on others) and due to staff being medical professionals (and there is much more staff per patient) the chance of getting high without anyone noticing is slim. And if you get caught ones liberties are gone, therapy will change,etc.
For medication it’s the other way around: We would monitor very very closely if patient take their medication (up to checking patients mouth with a dental mirror, regular blood tests,etc.) or switch to i.v./i.m. medication. A small percentage (afaik around 2-5%) are also medicated against their will.
The lack of activities is also an issue: Unlike prison where most people will try to get a job this is not an option in forensic psych. So if you don’t have therapy, you don’t have much to do and that is something that bothers a lot of people. This is especially valid as the access to media is also much more restricted compared to prison and that is much more individually regulated. In prison everything that is not seen as security risk must be allowed by law in terms of books. That is not the case here - it’s the opposite. Everything is forbidden unless it’s deemed that it is not impending the therapy goal - makes a big difference and is also a common source of trouble because some people are allowed things others aren’t. Another issue is the lack of education options. While I hear that has improved recently back in my day there was not much to do in that regard - while in prison you can regularily get apprenticeship, GED or even distant education uni degree. Overall basically everyone described the boredom as much worse than prison (but to a certain degree this is required for therapy to work). Adding to this is the lack of perspective - in prison you know how long you will be there. Life sentence here is 15 years and then they decide how dangerous you are. Only very few people get preventive custody or “special gravity” which means they get indefinite sentences/prolonged sentences. This is different in forensic psych. You will only get out once you are considered “healed”/sane. That can be in 15 months. Or 15 years. I had an arsonist on my ward who in prison would have had a max sentence of 5 years. He was there for 15 years and I am not sure he will be out by now.
Last but not least therapy itself is something on its own. People there first and foremost are patients. Any chance of liberties are directly connected to that (unlike prison where “behaving” is enough). So if you don’t play along you won’t get that TV. Less physical contact upon visitation (e.g. no hug allowed), you won’t get in a lower sec. ward or even have supervised trips to the outside. There are ocassional patients who try to trick the staff and manage to play along even though they really are still as sick as ever - but that has become incredibly rare. Generally speaking,though, the average patient will have less liberties than a average prison inmate. And of course therapy itself, even if you play along, is taxing. Very much so for these cases. I had a grown man cry in the fetal position on the floor for hours, another shift had a man trying to cut of his genitals with kids paper scissors (afaik he had a realisation what he has done and why and his sexual desire was a big part of it) or a man who plainly told me “my dad beat and raped me daily. They say the brain damage brought me here. I hate him for not doing it properly so I would be dead”.
So overall: It’s not a happy place and it is surely not a easy way out, not “easier” than prison.
(And as people always think they are clever and claim “yeah I will do this and that and play like I am insane and then get out after 15 months.” It doesn’t work like that - People working in forensic psych. are highly trained to find these cases and each possible inmate is screened while still in the entry ward or prison. I have yet to see someone who has sucess with that. Additionally: If you do this and get caught your sentence starts back on day 0 under some circumstances)
- Comment on Are there any documentaries on what government mental hospitals are like when a defendant is found Not Criminally Responsible/Insane/Not guilty on account of medical status? 1 month ago:
While it’s might not be what you might be looking for,but I used to work in a forensic psychiatry (including high security ward) in a central European country.
- Comment on [deleted] 1 month ago:
Yeah. You are not a nurse.
- Comment on Do rich people in landlocked countries have yachts? 1 month ago:
Yeah? The Rhine allows 2500t load and up to 110m long ships, with special permits up to 5000t and 185m.
10% of all swiss trade and 40% of all hydrocarbons are brought through there…
So yeah, kind of ocean-going. There are numerous private ships there that are fully ocean going.
- Comment on What are some cool infections? 1 month ago:
Yeah. Worms are what I wanted to write as well…the Guinea worm (Dracunculus medinensis),sometimes also called medina worm, is one of these and was once really common. The Asclepius rod is possibly coming from it.
If your character has a backstory that brings him to southern Europe, Asia or Africa in these times it’s basically perfect.
Another disease to look up: Larva migrans cutanea
- Comment on What are some unique Games to host server's of? 1 month ago:
Absolutely the best.
- Comment on Recommendation for Android File Manager 1 month ago:
Same