brownmustardminion

joined 3 years ago
[–] brownmustardminion@lemmy.ml 8 points 2 days ago

I've been on Lemmy for years and have yet to see a single nsfw post.

I didn't realize they even existed.

[–] brownmustardminion@lemmy.ml 2 points 4 days ago

Settle down, partner.

[–] brownmustardminion@lemmy.ml 6 points 5 days ago (4 children)

First thing I tried but I think you need to provide it with your YouTube login cookie to download age restricted content.

 

I realize this is a really silly request, but I absolutely refuse to watch YouTube videos without a proxy frontend let alone logging into a google account.

I've been wanting to watch dnsl's "Fallout RP is serious business" but it's age restricted.

Does anybody know either of a way to bypass the age restriction or can just send me the video? I've tried everything I know short of giving in and signing into YouTube.

[–] brownmustardminion@lemmy.ml 5 points 6 days ago* (last edited 6 days ago) (1 children)

I can honestly say Ive never used x or twitter. I absolutely hate the format and it seems like a waste of life to scroll through a feed reading quick snippets of text.

At least with a reddit or Lemmy style social media platform, I can click on the text snippet and be brought to a more in depth post about it. And it's simple to navigate replies for useful information.

Twitter is like somebody yelling something from a megaphone, then a crowd of people screaming over them randomly.

Discord is the next platform that needs to die. Online forums were perfect for what they did, then discord came along and now it's a nightmare to comb through any type of community or support system for useful information. Again, people screaming into the void...

[–] brownmustardminion@lemmy.ml 2 points 6 days ago

I use nginx for static websites and TLS passthrough servers.

I use traefik as a reverse proxy for sites with many services and SSO.

Nginx is definitely easier to configure for simple things. But I prefer traefik for more complex setups.

[–] brownmustardminion@lemmy.ml 1 points 1 week ago

Love the simplicity and self reliance to this solution. Thanks

[–] brownmustardminion@lemmy.ml 1 points 1 week ago (2 children)

Haven't made it yet but am planning a very basic HTML input for name, email, and message with a submit button and some css styling.

 

I'm looking for a simple way to make my contact form functional. So far it seems like emailjs would do the trick.

I'm curious if there are any other recommendations? What would you use and why?

Realistically I can't see the form getting more than a dozen submissions per month.

[–] brownmustardminion@lemmy.ml 1 points 2 weeks ago (2 children)

I'm not disagreeing that a Nazi salute is hate speech. Im disagreeing that it's a sensible course of action to give the government the power to put a human being in a cage for doing it.

Using racial slurs is also hate speech, should a person be imprisoned for using the n-word?

Where it becomes punishable via government intervention to me should be a direct threat of violence on a group of people or call to action to do so.

I'm trying to comprehend what the intended outcome of this type of punishment is anyway. Out of sight, out of mind I guess?

[–] brownmustardminion@lemmy.ml 0 points 2 weeks ago (4 children)

Yes, stripping somebody of their freedom for using a hand gesture is dystopian. Maybe consider that you thinking otherwise makes you a radical on the other side of the spectrum.

There's a reason fascism is becoming more popular across the globe and it's accelerated by these overreactions. It feeds into right wing narratives and pushes people on the fence into becoming radical right more than just letting these idiots babble their bullshit and be seen for the fools they are.

[–] brownmustardminion@lemmy.ml 4 points 2 weeks ago

I didn't know that. Thanks for the info.

[–] brownmustardminion@lemmy.ml 4 points 2 weeks ago (16 children)

I'm sorry but why is this so heavily upvoted?

Anit-semitism and any other form of hate speech is abhorrent, but imprisonment for a gesture is absolutely dystopian.

[–] brownmustardminion@lemmy.ml 1 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

To my frustration, I've tried both your method with ISC and a run_script hook with Kea, and pfsense just overwrites the custom configs. There's a PR on their github but it's been sitting there for months.

 

I'm looking to automate/script my pfsense wireguard tunnels so that each wireguard tunnel only goes up if there are one or more clients connected to the subnet associated with that tunnel and goes down once all clients have disconnected. I was wondering if there is already a plugin that accomplishes this or can be adapted, otherwise what is best practice for running scripts on the pfsense box?

My initial thought was to have a cronjob monitor the various DHCP servers for each subnet, then initiate a script to connect the associated wireguard tunnel if it detects any active DHCP leases on that subnet.

I have multiple subnets on this box, each with it's own wireguard gateway. I like the idea of only making the VPN connection if there is a client calling for it.

 

I run a qemu/KVM setup in which I have different VMs for different use cases/profiles. Very similar in theory to something like Qubes OS. So far when I want to swap to another VM I have to first un-fullscreen, then click the other VM display window and fullscreen that. I was beginning to work on hotkeys and scripts to allow switching between VMs by assigning Ctrl+NumPad# to specific VMs and then having the triggered VM appear in full screen. But I'm imagining there's probably already a VM display manager that streamlines this.

Does anybody have any suggestions?

The biggest factor is that the display needs to be responsive as I'm using these VMs for daily tasks.

Bonus points if the display manager can output a variable for the currently focused VM so I can script the keyboard backlight to change to an assigned color as well as change the power profile of the base operating system to match the currently highlighted VM better.

144
submitted 4 months ago* (last edited 4 months ago) by brownmustardminion@lemmy.ml to c/selfhost@lemmy.ml
 

I accidentally attempted to SSH into one of my servers from a device that did not contain my ssh key. I configure all of my servers to only allow authentication via cryptographic keys. Root ssh as well as password auth are disabled.

To my surprise, I was able to log in to my server with a password despite this. Baffled, I first tried some other servers. 2 of the 5 other servers I tried were accessabke via password.

After some swift investigation the culprit was found, a cloud-init ssh config in sshd_config.d/ with one line: password_authentication Yes.

So TLDR PSA....if you run a server in any type of virtualized environment, including a VPS, check your /etc/ssh/sshd_config.d/ folder. And more broadly, actually thoroughly test your ssh access to confirm everything is working as you intend it to.

 

I'm curious what the benefits are of paying for SSL certificates vs using a free provider such as letsencrypt.

What exactly are you trusting a cert provider with and what are the security implications? What attack vectors do you open yourself up to when trusting a certificate authority with your websites' certificates?

In what way could it benefit security and/or privacy to utilize a paid service?

And finally, which paid SSL providers are considered trustworthy?

I know Digicert is a big player, but their prices are insane. Comodo seems like a good affordable option, but is it a trustworthy company?

 

For those of you that know, I'm trying to find a niche community, forum, chat room, whatever of individuals that could give me some pointers on cracking an OFX plugin. My knowledge ends at simple standalone exes and the communities I know of seem largely focused on game cracking.

If you know of a community that you think would help me on my journey, feel free to share. You can also send me a private message if you need to be discrete.

 

What do you recommend for an at-a-glance access log dashboard? Kibana and Grafana seem cool but overkill.

All I want is a dashboard that can ingest and parse syslogs from various services and neatly display a list of currently connected IPs and usernames if applicable as well as a IP connection history.

 

With the EOL of PVEv7 and my need for more storage space, I've decided to migrate my VMs to a larger set of drives.

I have PVE installed baremetal on a dell r720 RAID1 SSDs. I'm a bit nervous about the migration.

I plan on swapping the SSDs, installing PVE8 from scratch, then restoring VMs from backup.

Should I encounter an issue, am I able to swap the old RAID1 SSDs back in, or once I configure the new ones are the old drives done for? I'm managing RAID on a dell RAID controller.

I also have my data hard drives passed directly into a TrueNAS VM which supplies other VMs via NFS. Is there anything I should be concerned about when I've migrated, such as errors re-passing the data drives to the TrueNAS VM. Or should everything just work again?

Is there a master PVE config file I can download before swapping drives that I can reference when configuring the new PVE install?

 

I was listening to a Bazzell podcast where he mentions his company self hosting and maintaining a database of personal data and credentials for use in OSINT investigations. Some acquired through public sources but others acquired through leaks. Then of course there are data aggregate companies that do the same but are going on to sell this data for a profit.

What is the legality of this? Obviously acquiring publicly available data is legal, but how are these companies able to hold on to leaked usernames, passwords, and other confidential personal information. Especially those that were initially acquired through illegal means?

 

Is there something like Spotify Downloader or yt-dlp for Lidarr?

I got spotify playlists imported into Lidarr, but the artists I listen to don't seem to have any torrents.

I don't mind the quality hit of something like spotifydownloader which pulls from youtube. Is there anything like that or yt-dlp integrated into Lidarr for automated downloads?

 

I'll start by stating my threat model is avoiding corporate tracking, profiling, and analytics. For anything beyond that scope I believe tor is ideal.

Correct me if I'm wrong but my understanding is that Newpipe is a frontend to provide an alternative to the awful YouTube app and/or youtube account. However, your IP along with other device information may still be exposed to google servers. Any ideas as to what info beyond IP is sent to google?

Whereas invidious instances act as a proxy in addition to what is offered by Newpipe, but you are trusting your privacy to the instance owner.

My idea for utilizing these services is the following: Newpipe for managing subscription based YouTube viewing. Google would have my IP, but this IP would be a VPN IP address that periodically changes. Much more reliable than invidious and better quality. App is great.

Invidious for random video searches as well as content I may want to be slightly more cautious about associating with.

I'm looking for feedback on this conceptual setup. I've also been considering making a public invidious instance that I can use but hopefully obfuscates my viewing through its usage by others.

view more: next ›