Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)DA
DarkSirrush @ DarkSirrush @lemmy.ca
Posts
0
Comments
205
Joined
2 yr. ago

Pi-hole client filtering without DHCP?

Jump

  • I am definitely not the best at networking, but can't you do that through your current dhcp client?

    • I self hosted a World of Warcraft server.

    Jump

  • The server has been reverse engineered for literal decades at this point.

    • 🔒 Setting Up Headscale & Tailscale on NixOS: A Zero-Trust Networking Guide for ❄️ NixOS - YouTube

    Jump

  • I can share my traefik setup - note I am doing this on my phone at work, so I might miss something

     
        
compose.yaml

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.middlewares=authwares@file"

  
     
        
  GNU nano 7.2                      /config/traefik/dynamic/middlewares.yaml
http:
  middlewares:

    limit:
      buffering:
        memRequestBodyBytes: 5000000000
        memResponseBodyBytes: 5000000000
        maxRequestBodyBytes: 5000000000
        maxResponseBodyBytes: 5000000000

    authwares:
      chain:
        middlewares:
          - default-headers
          - authelia
          - limit

    default-headers:
      headers:
        accessControlAllowHeaders: "content-type,authorization"
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
          - POST
          - DELETE
        frameDeny: true
        accessControlAllowOriginList: "*"
        accessControlMaxAge: 100
        addVaryHeader: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        referrerPolicy: "strict-origin-when-cross-origin"
        customRequestHeaders:
          X-Forwarded-Proto: https
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
          server: ""
          X-Forwarded-Proto: "https,wss"
        hostsProxyHeaders:
          - "X-Forwarded-Host"

    authelia:
      forwardAuth:
        address: http://auth/api/verify?rd=https%3A%2F%2Fauth.example.com%2F
        trustForwardHeader: true
        authResponseHeaders:
          - "Remote-User"
          - "Remote-Groups"
          - "Remote-Email"
          - "Remote-Name"

  
     
        
  GNU nano 7.2                            /config/traefik/traefik.yaml
global:
  checkNewVersion: false
  sendAnonymousUsage: false

entryPoints:
  web:
    address: :80
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: :443
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      tls:
        options: modern@file
        certResolver: letsencrypt
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  providers:
  docker:
    exposedByDefault: false
    network: compose_proxied
    allowEmptyServices: true
    endpoint: "http://socket:2375/"
    defaultRule: "Host(`{{ index .Labels \"com.docker.compose.service\"}}.example.com`)"
  file:
    directory: /config/dynamic
    watch: true

api:
  insecure: false
  dashboard: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: acme@example.com
      storage: /certificates/acme.json
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"

log:
  level: DEBUG
  filePath: /config/logs/traefik.log
  format: json
accesslog:
  filepath: /config/logs/access.log
  bufferingSize: 100
  format: json

    • Self-hosted meteo apps ?

    Jump

  • Guess I am making this in excel now.

    • Danielle Smith says Canada is punching Alberta in the face

    Jump

  • Can we punch her harder?

    • 🔒 Setting Up Headscale & Tailscale on NixOS: A Zero-Trust Networking Guide for ❄️ NixOS - YouTube

    Jump

  • Note that its also possible to set up service auto discovery with traefik, the only traefik related config I do on new containers is 

     
        
Traefik.enabled=true

    • Just how visible is your butthole to a gynecologist?

    Jump

  • Pretty sure Lemmy has a display name feature, yes

    • Hmmm who could it possibly be?

    Jump

  • Only if you are an alcoholic.

    • I use Arch btw

    Jump

  • I gave up and used endeavouros instead.

    • Hmmm who could it possibly be?

    Jump

  • I know someone who did go into food science to get into a chocolate production factory - they were done eating chocolate for good after their first 6 months.

    Turns out all you can eat samples is a great way to get food fatigued real fast.

    • I told my friend that my dad got 3 DUI's

    Jump

  • DUI = Driving Under Influence (ticket/license suspension). He got caught driving drunk 3 times.

    • Everybody poops

    Jump

  • Merperson touring a human city - presumably they have both lungs and gills so can spend a day out of water.

    • I've got a Void

    Jump

  • I have never had my eskie mistaken for a husky, it's always either a Pomeranian or a Samoyed.

    That being said I do also have an orange braincell, a void, a tortie and a good girl.

    • Share a script/alias you use a lot

    Jump

  • I have a few:

     
        
loginserver
    • 3 of these, 1 for each of my headless vm's/computers that's just an SSH command
     
        
dcompose(d/pull) - docker compose (down/pull)

    3 scripts that are just docker compose up/down/pull, as scripts (remind me in 6 hours and I will post the scripts) so that it will CD to my compose folder, execute the command (with option for naming specific containers or blank for all) and then CD back to the directory I started in.

    • ingrown big toenail solution. does it exist?

    Jump

  • I did this twice in both big toes, as the first time they only did the sides.

    Now I gross out coworkers and fascinate small children when I wear sandals, and haven't had big toenails in close to 20 years.

    • We live in a society or smth

    Jump

  • I'm too poor to replace the things that got covered, so this still doesn't work.

    • Malphabet.

    Jump

  • Light mode keyboard and dark mode app? Shame on you

    • Malphabet.

    Jump

  • Why not Dvorak? I have been told its way more efficient typing, though also completely incomprehensible.

    • Just found this 2,64TB Playstation 2 Collection. What a madman.

    Jump

  • Why not use myrient? It seems to have every ps2 game individually and is also easy to mass download from (at least with a download manager) and the speeds are great in my experience.

    • My experience with Discord on Linux

    Jump

  • That's good to know for others, especially if that update check setting isn't found in-app and only in the config file itself.

    For me, I don't think I am going to try again with the app.