Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)CB
calm.like.a.bomb @ clmbmb @lemmy.dbzer0.com
Posts
8
Comments
373
Joined
2 yr. ago

  • [1] siyuan is markdown too but but it’s stored in a database, not your filesystem.

    This is a hard pass for me, then. At the moment I'm using Silverbullet, which uses plain markdown files which I can also edit with my preffered editor in CLI.

  • I hate zscaler. At my company it's set up so that it proxies all traffic through it and comes with its own CA certificates, which breaks a lot of things - I can't install pip packages for python, I can't clone/work with git repos if they're on https only. We are used to temporarily disable it to do these things because corporate won't change the policies.

  • Thanks for the great explanation.

    So, currently, as I said, I'm using nginx proxy manager and do this:

    • reverse proxy to all my services inside the internal network on http: *arr stuff, rss reader, jellyfin and some other minor things. All of them use name.local.home notation. I'm using a local DNS for this, of course.
    • reverse proxy to just two services externally on https under wildcard certificates - both are non-standard names and the names are not related to the services themselves. For both these services I use Authelia with 2FA, so even if an attacker guesses the subdomain name, they'll have to bypass that. As far as I can see in my logs, there are no attempts to breach my services. This is what I want to replicate and I'm planning on testing it.

    On the other hand, You gave me a good idea about using *.lab.domain.com getting resolved by the local DNS and the main *.domain.com by my public DNS. I'll give this a try too in the near future. Another plan for me is to start using Authentik, as I saw it's a bit better than Authelia in some areas, even though it may be overkill for a little project - I'll have to see.

  • XMPP is an old protocol. GTalk (google talk) and Whatsapp used it, then extended it, then didn't give back to the community. So here we are...

    The problem with alternative protocols and apps and whatnot is that people are reluctant to change and won't try anything new if only 2-3 other people use that protocol/service. I can't even convince my best friends to use Signal, let alone XMPP.

  • As other people have commented: why would GTK be so important? A terminal should be a bare window, without any decoration. At least that's what I use: first setting I check in a terminal is "disable window title" or something like that.