Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)CH
Posts
1
Comments
105
Joined
2 yr. ago

  • Oh man! I'm using FreeIPA and I'm way in over my head. lldap looks like a great replacement! Question: do you know if/how I can migrate my (little) directory without recreating every user and group (AND resetting their passwords)?

  • I see. Sure, that's a valid way to manage networking. I personally don't like to do this manually anymore, just like I don't drive stick shift anymore.

    If you want to expose a service to the WWW I'd recommend using a reverse proxy. E.g. I use Traefik 2; it gets the config needed automatically from 5-6 labels per container and I don't need to bother with IPs, certificates, NAT and what have you. It just creates virtual hosts procures a LetsEncrypt certificate and directs the traffic to the target container completely on its own.
    Spinning up a container and trying it out with its own subdomain with correct SSL certificates immediately never has been easier. (I have a "*" DNS entry to my Treafik server).

    You also could try installing cloudflared and create a Cloudflare tunnel. This way you don't even have to forward any ports in your router.

    Just some tips, if you want to explore new things :)

  • Yes, but your title hinted at something else: You say "lazy motherfucker" because someone put the trash only next to the container, but you stop mid exclamation because you noticed something else...

    That's how I interpreted it.

  • My service provider lets me download messages as audio files.

    I'd download them and pop them into a player that can display waveforms, so that you can skip those pocket dials with a bunch of silence. Or so that you can speed up the audio to 1.5x, which will be 33% faster than listening at normal speed.

    OR if you dont feel like working for a few days, play the stuff back at 0.75x for a 33% increase of your billable hours.

  • Usually you can just send a second DNS server by separating the IPs with a comma.

    That said, I'm running two PiHoles for the exact reason OP noted. These two PiHoles settings are synced with GravitySync.

    If I update one PiHole or it goes down for any reason, the second one is there to pickup the slack.

    Regarding DHCP: I'd probably turn off the stupid FritzBox DHCP because you really can't set 2 DNS servers (WTF!) and instead use the PiHole(s) for DHCP.

  • Keepass all the way. Checks all the boxes. Access via browser: If you have a Nextcloud instance, theres a NC-Addon to open kdbx files in the browser.

    re: Bitwarden I tried it and it wasn't sufficient for me. Is it now possible to also store and generate TOTPs? Can you store SSH keys and retrieve them directly from the password storage?

  • Only because they write something in their shitty corporate document doesn't mean that it holds up later. Sure they can write, that you sold your soul to them, but that doesn't mean that it is binding at all.

    After all you never signed any contract with them. Not even via Docusign (which wouldn't even be binding in my country, lol... worthless).

    Yes they can send you a bill, but there's always room for more toilet paper. Or just send them a fantasy bill back yourself 🤷