GreenKnight23

a burn so severe it will lead to stage 11 cancer.

boom headshot

Ubuntu is notoriously finicky as a server. multiple issues with how system configuration is different from other servers like Debian, redhat, etc. firewall used to be an absolute terror. also, as described, your patch levels are tailored to the whims of a corporate entity that historically has sided with desktop stability and experience over server stability and performance.

while we’re at it, canonical captures and sells system information like Microsoft does. by using Ubuntu, you become the product. IDK how much you know about companies that sell their consumers data, but typically they put profits over security.

I’ve worked for a handful of MSP/CSP vendors over the years and they only offer Ubuntu as a server option with one big caveat. you are responsible for the maintenance of the system. lo and behold, four years later they always come crying about how they’re about to fail an audit because it’s never been updated, or is misconfigured, or was hacked because they installed a bad library, ad nauseam.

from my own experience using it, though aged, it came with a service that was listening on port 3306. was it mysql? nope. what was it? dunno. I killed everything on that system that wasn’t required by the kernel. still listening. couldn’t install a database on it, so it was wiped and I never used it again.

simply put, Ubuntu is a desktop first OS. if you use it as a server you’re going to have a bad time because statistically speaking only amateurs use it that way.

if you run Ubuntu as a server nobody should take you seriously.

Debian literally exists as a server first while Ubuntu exists as desktop first.

the only valid excuse to using Ubuntu server is if your hardware is a RPI or rpi-clone and at that point you’re at a hobbyist level which makes more sense why you’d be using Ubuntu at all.

does this guy count?

1000004804

you know what would be cool?

physical media.

not sure, but I know what sound a Russian cat makes.

futon

👆 install that, and go to that 👇

DemonicScans - Mushoku Tensei

it should as long as it’s got that 1gbps Ethernet. 100mbps just won’t be enough for video streaming with jellyfin.

I have three services which are public. Jellyfin, Seer and BookOrbit (for syncing Kobos).

1000004791

don’t expose services to the internet. expose a proxy.

Imagine if your house had doors to the outside for every room in your house. not very secure, right?

I’m going to hope when you mentioned NPM you were referring to nginx proxy manager.

also, use a separate host for your proxy that is firewalled off from everything else on your network other than the host with your services and only on those specific ports. it doesn’t have to be powerful, just has to have a fast network connection. I wouldn’t use anything less than 1gbps. you could vlan as well, but that would require advanced routing or a second NIC for your services host. don’t forget to firewall your services host off the rest of your network.

finally, monitor the shit out of that proxy host. use SIEM tools like graylog, wazuh, splunk, etc. you cannot make an impenetrable fortress, it’s only a matter of time before you experience a penetration. setting up proper logging and alerting is imperative to securing your network.

you can also run them in the same container with a multi-stage build and some finesse with S6.

simplex

same person created them, Shinichirō Watanabe.

his other works are supposedly in the same universe.

• Cowboy Bebop
• Samurai Champloo
• Space Dandy
• Terror in Resonance
• Carole & Tuesday

can’t say anything for the last three as I haven’t seen them though.

His wiki page also warned not to confuse him with Shinichi Watanabe, which created Excel Saga. I can confirm it’s absurdly funny and remember getting drunk watching it with friends in the early 2000s.

if that’s your jam, I’d also recommend Colorful by Torajirō Kishi. it’s a sex comedy centered around perverts objectifying women and their panties.

exposure is unchanged. automated patching and upgrades are working. rollbacks, etc are working. minimal attack surface exposed and properly blocking traffic by geography. rotation of keys/passwords as well as short lived rotated TLS certs.

not one of those things alone is a solution, but together can make a solid dent in securing your infrastructure.

I have a digital dial indicator with a printed mount that just hooks onto my printhead.

1000004755

thats the exact one I have.

it’s helpful in debugging issues like this and attempting to identify if the issues are with your printbed or your gantry.

if the issue is with your printbed surface, the dial will change greatly at seemingly random places across your printbed.

if the issue is your gantry, it will consistently change regardless of where its at on the bed in the y position. the x position will likely result in slop because thats the direction of travel for the gantry.

if you see problems on the y position travel, it’s likely an issue with your printbed track/travel. tension your belts or tighten any collars.

it can even help debug some z travel issues if you can get creative.

highly recommend getting one.

for slowburn action/drama might I second

• cowboy bebop
• samurai champloo

Should I take it down?

depends. do you want to deal with a simple patch in 24 hours or do you want to rebuild an entire legacy system from nothing (assuming you don’t take proper backups).

here’s the neat thing. terraform won’t push anything if nothing has changed.

so no. no recurring unconditional pushes.

in my defense I bought the majority of that in 2024 for around $300.

I was surprised to see it’s currently listed at over $2000.

• 96gb ddr5
• intel i7 12th gen
• RTX 3060

it also doubles as my media ripper. I initially built it specifically for that before AI was even a thing.

I use a terraform script that pushes my IP up to route 53 every hour. been good enough for me for the last six years.

1000004726

I’ve been at this since Napster was a thing, so imagine my surprise to hear that folks are paying to pirate.

Usenet I get, but private trackers? only real benefit would be a risk reduction of being caught by your ISP, but that’s easily overcome by using a VPN.

last I checked it was at 2.5kwh so now it’s probably around 3.5kwh

as was designed.

they don’t want you to own your hardware.

they want an excuse to stop manufacturing hardware so they can replace it with cloud computing. why make $500 once when they can make $5000 a year from you until you die.

huh. who knew the answer to gun violence in the US was to regulate 3D printers!

I have wireless wyze cameras in my house that are connected to a private network segmented away from internet access.

because of that, it’s impossible for them to retrieve updates. So I wrote a proxy in crystal-lang that can proxy web requests over my private network to the public internet.

this allowed me to pull the new hacked firmware and installed them from github while maintaining network privacy.

a year or so later I began selfhosting gitlab and now I just have a job that pulls a clone there and all the cameras pull from within my networks.

they are this decade’s “hey, I have an idea for an app” people

I was running mango for awhile. even forked and managed to develop some fixes and new features for it.

after the online manga purge of 2025 and sites were taken offline I stopped fucking around with it.

now I use futon.

it’s better than any selfhosted solution I have ever used. highly recommend.

they do get subbed properly, on dubs.

when you watch it dubbed, flip the sub’s from English-cc to just English. most the time the text is translated.

it’s dumb, like really dumb, that they can’t just include them on one sub.

yeah, it’s not a problem because you can fix it.

it’s a skill issue.

no idea it even had a manga. I would assume all of it because the second season took quite awhile to be released.

didn’t finish it though. the second season felt broken and unfinished or rushed.