irotsoma

joined 10 months ago
[–] irotsoma@piefed.blahaj.zone 2 points 20 hours ago

With a reverse proxy there's no need for hoops unless you add some authentication mechanism on top of that. I use reverse proxies for several things so that they flow through filtering like crowdsec or fail2ban. It just routes the single port to the device on question as is. The idea is to make it indistinguishable from a fully exposed port to the user. Just have to make sure whatever system runs the reverse proxy is secured. I always make sure that nothing significant is on the system that is exposed to the internet other than the reverse proxy server and all other ports are closed internally and externally. Ideally a device that has multiple Ethernet ports works well so you can keep an ssh port open on the internally facing ethernet port for troubleshooting. Nice if they are 2.5Gbit or 10Gbit ports, too, since they route a lot of traffic. But not needed.

[–] irotsoma@piefed.blahaj.zone 2 points 20 hours ago (1 children)

Yubikeys work great for me for 2FA or passwordless auth. NFC and USB interfaces. Very secure. Pretty durable, though USB-C is inherently less durable due to the size and complexity than the USB-A footprint. But I've never had an issue with mine in my pocket or purse right with my keys. But if you bend it while it's inserted in something it can be an issue.

[–] irotsoma@piefed.blahaj.zone 19 points 20 hours ago* (last edited 20 hours ago) (3 children)

It's easier to start conversations but more difficult to end them when you appear femme in my experience. Depends on your intentions, sexuality, if you "pass", and the type of bar of course. So I can't give specific advice, but I am AuDHD, so I definitely get the trouble with social etiquette, but especially when switching gender roles after learning the other side my whole life.

I don't go to bars often, but only go to ones in progressive areas like the city I live in and rarely dive bars or "singles bars". So, it's rare for me to have to deal with aggressive or malicious men that most women have to deal with in bars or anti-trans sentiments. Of course #notallmen, but when you take on the role of a woman in public you of course face the much higher threat against us than male-appearing people do, which is more just a threat of physical violence rather than drugging, rape, torture, and murder that women need to prepare for. Just know to protect your drinks, finish a drink before going to the bathroom or give it to a bartender to put behind the bar, etc. Find out ahead of time if the bar has any other safety tips that they are trained to watch for, especially in "singles bars". They're also sometimes posted in women's restrooms as well. And don't open a tab in case you need to leave in a hurry. Pay for each drink separately. Also, knowing how to shut down a conversion is a good skill. The male role is to approach which sometimes leads to frustration and aggression, and the female role is to fend off such aggression or accept welcome advances. Sucks that the society works that way, but it is what it is. Though, fortunately or unfortunately, for us neurodivergents we often actually give off that shutdown signal by accident anyway as we're conditioned to be more concise with answers. Hard habit to break. Anyway, lots of those kinds of tips on safety are the place to start if you've never been to a bar as a woman. Safety first. And of your area is not safe for trans-women, I can't help as much with that as I avoid bars at all costs in those areas, but not all of us are privileged to live in progressive places.

With that out of the way, really the best way to get people to talk to you in a bar is to appear friendly. Sit at the bar rather than a table, if possible. Arrive earlier if bar space is often full. Be sure to have a smile at all times and make eye contact with people close to you if you feel like you might want to talk to them at some point. Try to avoid closed body language like crossing your arms or hovering over and thus looking down at the bar/your drink (but keep it in view as mentioned in the safety stuff). It can be more difficult if you're taller. If someone starts to sits next to you, look up at them and if they look at you, smile and say hi or even better, use some open ended greetings like "hey, how's it going?". Being a woman and being friendly generally makes people less on guard than as a man or if you aren't smiling. And basic small talk skills like answering questions with answers that give a little information and/or end in a question will keep the conversation going a lot of the time if that's what they're also looking for. And as I mentioned don't use short concise answers that you might be used to giving as ND masking as that doesn't allow for conversation to flow. I mean don't info-dump, at least not at first, but show interest by not using simple positive/negative replies.

Anyway, it's really not that bad and I find I enjoy it way more as a woman. But I enjoy a lot of social things a lot more as a woman. LOL. Be friendly, be safe, talk, smile, stay away from politics or negative subjects, at least at first, and remember that if your fuck up, it's ok, you'll probably never see that person again, especially if you live in a decent sized city, but it's also a reason I avoid dive bars other than the sometimes conservative vibes, since they often have a lot more regulars, and I usually am not looking to become a regular. 😁

All of this might be regional as well. I live in the US, so if you don't then etiquette might be different, but overall I tried to keep it relatively universal socializing advice. If there's something in particular that you are concerned about, I can try to answer, but again I'm not a big bar person anymore and I was male appearing when I used to visit more, so my knowledge might be hit or miss. Lol

[–] irotsoma@piefed.blahaj.zone 3 points 1 day ago (1 children)

I avoid relying on it too much and don't make any especially custom configurations. I honestly don't like it. But the alternatives just never really seemed much better, so I use it by default. If there were a truly good replacement with good documentation and examples, I'd adopt it.

Copyright hasn't benefitted creators in centuries, it's for publishers who then gatekeep the money from the vast majority of creators.

But even then it was never really meant to be a "welfare system" for creators, but a way to incentivize creators to keep creating by allowing them a short term boost in income while they create the next thing. Create one popular thing and never have to create again as well as your kids and grandkids never having to contribute to society was never meant to be the point.

I mentioned in the other reply that I was thinking more on military grade fuels since that's where my knowledge is from, but even those aren't really good examples. Better would have been pure hydrogen or "rocket" fuels used in the space industry or similar. But that's wasn't meant to be the point.

I don't want to get into guns, that's a special case in the US due to money in politics.

But, ok, yeah "jet fuel" I was thinking more of military jet fuels, I was in the Navy for a while and never in the aviation industry. Though even they don't approach the energy density and instability a reactor would have. Maybe I should have said "rocket fuel" or even pure hydrogen. Anyway, point is cars could use fuels that are more energy dense, but even missiles don't use the most energy dense fuel available because there's a need to balance stability and potential for explosions with energy density.

A miniaturized fission reactor like I mentioned or even more, a miniaturized fusion reactor like in Ironman, would have problems if sold unregulated, both in accidents as well as malicious use as a weapon.

[–] irotsoma@piefed.blahaj.zone 6 points 1 day ago (6 children)

Also, it's good to note, that producing that much power in a small device would mean that device is very, very volatile. There was some research I read about a long time ago to design a small nuclear fission device that would ideally replace batteries with a much more long lasting energy cell that also would greatly increase output wattage. Besides the obvious miniaturization issues, the other problem was that if that much energy is release all at once, such as from a drop or being in a fire or something else catastrophic, the explosion it would create would be significant and do a lot more damage than any battery not to mention the heavy shielding itself as shrapnel would be way more destructive than the explosion alone.

Take that and then think about people who are likely to use these things as weapons and you can't really sell that kind of thing commercially. This is one reason that for example, gasoline is not more energy dense which would make it way more efficient. Imagine if gasoline was as energy dense as jet fuel. It would mean way smaller fuel tanks and thus significantly less weight both of the tank and the fuel and thus more efficient cars. But the danger in widely selling jet fuel to consumers is significant.

The more confusing thing I've had to explain to too many developers is that it's not a directory regardless of what it looks like on the AWS website view. It's a "prefix" meaning the entire thing, including the slashes, is just part of the filename, there is no real structure inside a bucket. So there's no such thing as relative paths to search for things. When you call the list objects function with a prefix it's the same as doing a "starts with" on a string. You can't give it a partial "path" relative to another object that appears to be in another "folder".

[–] irotsoma@piefed.blahaj.zone 1 points 2 days ago

This would be the 3rd time since I've been using it that it has broken compatibility with Vaultwarden, but Vaultwarden always fixes it pretty quickly. But usually browser plugins end up updating before I get around to updating Vaultwarden.

[–] irotsoma@piefed.blahaj.zone 2 points 2 days ago

Yeah it has both onetime and subscription. I got the one time for around $15.

And yeah the app is available in multiple places. For Android, I get it from a custom Fdroid repo but Obtanium would work as well. I use that for a few apps.

[–] irotsoma@piefed.blahaj.zone 1 points 2 days ago

Yes they can both be used at the same time, though KeyPass stuff is new and beta. I've never used it.

There is both a subscription model and a one time payment model. I bought it with the one-time payment. I believe it was $15. But don't quote me.

 

cross-posted from: https://piefed.blahaj.zone/c/trans_joy/p/880112/selfie-from-a-couple-of-weeks-back

I've been having fun with simple eye makeup like this since doing it right always ends up making me not want to do it. Lol.

And yeah, my nose is always a bit red, but my sunscreen had partially failed me the day before, so it's extra red.

 

So, I am on the spectrum and have recently had to start using a medication that requires periodic intramuscular injections. I'm fine with the little bit of pain and the rest of the process, but there is an intense hesitation to do the initial jab. If I don't use enough force to penetrate the muscle, I have to push again or start over and that is way worse of a sensation and pain.

No matter how many times I've done it, I can't get over that intense hesitation. My brain just won't let me do it. It's not the pain since I have a really high pain tolerance. It's just some inability to intentionally use force to injure myself or something like that.

So, anyone else had similar issues or have any tips for tricking my mind into allowing me to do the jab?

Thanks!

 

I'm looking for some actually working examples of using Flux to deploy at least Immich and Jellyfin with Traefik ingress using Flux CD preferably that use NFS shares for storing data and/or configs, and prometheus monitoring. I've found a few just from searching, but usually it seems like they aren't actually working, just demonstrating something.

Also, what UI do you use for Flux?

Some background: I use k0s with MetalLB and Longhorn and all db storage on a separate postgres server. I've gotten a good repeatable installation of all of that as well as the FluxCD Operator via kOsctl and helm charts which allows me to simply launch k0sctl and provide it a single config that is well documented that deploys all of that across all of the servers. But Flux has been a challenge, especially since I don't really care to learn Kustomize. I already have lots of other things to learn, LOL.

I want to avoid having to use lots of CLI commands that I then have to make sure to document and takes a while to remember all of the issues that can come up and all of that. I'm basically looking for easy disaster recovery. All files and configs are stored on a NAS that is then a single point of all offsite backups. It has worked well with docker, but I want better dynamic distribution of services to take better advantage of the few small servers I have. And docker Swarm ended up being difficult to implement with a lot of applications, and I don't trust Docker not to further enshitify as well as the number of GUIs that support it well is limited, mostly just to Portainer which has been also enshitifying lately. So I've been looking to k8s.

 

I'm looking for some good socks for around the house. I work at home and the weather here is not super cold, but not exactly warm most of the year, so I spend a lot of time in them.

In the past I've usually just worn white crew socks, but I'd like something new since the Under Armor socks I have been using have moved away from cotton and aren't breathable despite the venting they added. I'm posting here because I'm really sensitive to discomfort in my feet and most people just don't get it.

The traits I'm looking for, mostly in order of priority:

  1. Minimal feeling seams, especially at the toe
  2. Material that's not itchy and is breathable, cotton has been the best traditionally, but those keep getting harder to find and still not violate #1.
  3. Thick enough to keep warm, but not so thick they aren't breathable. I dont want athlete's foot from them, lol.
  4. Size, they need to either come in multiple sizes, or not be huge and end up with the heel halfway up my Achilles tendon, and not so tight that they imprint on my leg. I wear a US Women's size 8.
  5. Low priority, but cute/feminine would be nice. But since these are mostly for the house, not a huge priority.

I'd like something relatively affordable, but long lasting is more important than cost, within reason. And I'm in the US, so something available here or online with reasonable shipping costs to the US.

Any suggestions, or even brands you prefer would be helpful. I know it's a lot to ask from a sock, but I'd love any help.

Thanks so much.

 

I'm looking to build a low-end ollama LLM server to improve home assistant voice control, Immich image recognition and a few other services. With the current cost of hardware components like memory, I'm looking to build something small, but somewhat expandable.

I have an old micro-atx form factor computer that I'm thinking will be a good option to upgrade. I'd love recommendations on motherboards, processors, and video card combos that would likely be compatible and sufficient to run a decent server while keeping costs lower, basically, the best bang for the buck. I have a couple of M.2 SSDs I can re-purpose. Would prefer the motherboard has 2.5Gbit Ethernet, but otherwise I'm open.

Also recommendations on sites to purchase good quality memory at reasonable prices that ship to the US. I'd be willing to look at lightly used components, too.

Any advice on any of these topics would be greatly appreciated. The advice I've found has all been out of date especially with crypto fading so video cards are not as expensive, but LLM data centers eating up and reserving memory before it's even manufactured.

 

I've mostly stuck with IPv4 in my LAN, but ive been wanting more and more to more to move to IPv6, if only for the learning experience. Since my ISP only uses 6rd and so I can't get a static IP much less a GUA subnet to use, I'm trying to decide strategy for setting up the network, NAT, etc. And I know it's probably not worth the effort, but again at this point it's more a learning exercise.

I have an OpnSense router and use Unbound on it for DNS, Kea for DHCP, and Caddy for reverse proxy, so I am pretty flexible. What strategies have others employed? I use static addresses assigned at the router's Kea DHCP service for IPv4 for all known devices. I have 4 VLANS for guest, mostly trusted devices like my phone and laptop, private stuff like my NAS, Home Assistant server, and Kubernetes cluster, and IoT for stuff that is private but I don't have as much control over like light switches, cameras, and the TV. I use a pihole on the VLAN my personal devices are on to allow for ad, tracking, and malicious site blocking. And I use Pangolin for external access to some private services. And I have a domain dedicated to LAN devices and another for externally hosted VPS servers. Though I dont host much externally now that I finally got access to fiber and no more asymmetric, slow up speeds from Cable service.

I use static IPv4 addresses in Kea DHCP, mostly to assign devices to VLANs and give devices domain names. I'm guessing that will still be necessary. I rarely use the IP addresses in service setup or browsing to services if I can help it, just domain names. What other concerns should I consider?

Any experiences or advice for similar IPv4 to IPv6 LAN conversions would be greatly appreciated, so I can plan ahead.

 

I've been wearing cuffs for a while, but I finally got around to piercings this afternoon. Got both lobes and the conch on one side done so far. Have to wait for the conch to heal before getting the other side done, so I don't sleep on it and mess up the angle before it heals. The pain was minimal, even less than I expected, since it was a pro that did it, and the soreness so far is much less than the soreness after wearing cuffs for a few hours, so I'm super excited for it all to heal so I can wear more interesting earnings.

 

I've been using Termius for a few years for an SSH client. Have have a lot of self-hosted servers both in my home lab and on VPSs. I'm looking to cut some costs since it's $120/year and really the main thing I use it for is syncing my SSH accounts and credentials between a laptop, a desktop, and my Android phone. So I'm looking for a new method to sync these things.

I'd prefer a single application, but I'd settle for a good, secure way to sync the credentials and recommendations for applications on Fedora and Android.

Edit: I'm OK with a one time payment application, but prefer open source or a solution I can self-host the sync server. And I don't want a subscription.

view more: next ›