It's good to use SSL even if you don't plan to use it externally. At some point you may change your mind, or you may need to access it via VPN and there may be one hop between your browser and the VPN that will then be in plain text. Plus, not all devices are trustworthy anymore. An Android or iPhone device might have "malware" (including from reputable companies like Google trying to track you for ad purposes but recording unsecured http traffic to do it.) Or a frienday bring a bad device over and connect to your wifi and inadvertently capture that traffic. Lots of ways for internal traffic to be spied on.
Google: "how to create self signed certificate authority on
<your workstation OS>
"
And if that article doesn't have it, google: "how to create a domain certificate from a self signed certificate authority".
It doesn't have to be a valid external domain, just use ".internal" as the top level domain which is reserved for this kind of thing, like "vaultwarden.internal". You can also just use IP addresses in the certificate, but I find that less desirable.
Then google: "how to add a trusted certificate authority on <all your OS's of all internal devices>”. Depending on what web browser you use, you may need to add it there as well. Once the certificate authority is trusted by your devices and browsers, then the domain certificate created by that CA will be as well.
You can set your expiration dates to be far in the future if you want, to avoid having to create new ones often, but be sure to document how just so in 5 or 10 years or so, if it's still that way, you'll know how to update them.
Apparently not if it's territory you illegally occupy or a neighboring country that one time sent terrorists to your country. Then the whole country is terrorists and everything is a military target. Helps if some of your citizens steal the "abandoned" land and build on it after you destroy everything.
Always has, in fact there's a ton of controversy in places like where I live that made laws that high-speed chases for most crimes were not allowed as well as shootouts in public for most crimes if the criminal doesn't have a gun, since they kill bystanders more often than catch criminals with both of those. But the police unions and NRA have stirred up the conservatives against nonviolent capture.
This guy probably wouldn't have hurt anyone if he hadn't been fleeing. Sounds like he was just trying to avoid a DUI and they could have just took his license plate number and gone to his house/workplace to pick him up.
Stark self sufficiency and individualism is their philosophy. Too bad they forgot what their parents gave them so they could reach that point. Including the political atmosphere of unions and good paying jobs.
At first glance I thought this post was a bit facetious, but after thinking about it and reviewing some research around people manufacturing the bullets and how it affects them and understanding that detonating them in confined spaces probably is just as if not more problematic. And if you have a job that requires you to do it often, say a cop, does that create even more of an effect? Lead exposure causes a loss of impulse control as well as intelligence effects. Could that be one reason why cops are so much more violent than the average person? I'd love to see a study on lead content of blood in cops, especially ones who murder people they capture, but unfortunately, the NRA is probably too powerful to allow that to happen. And conservatives hate masks, so I doubt it would be easy to convince cops to wear them while practicing.
They think death, media popularity, and being remembered is going to dissuade others who are facing a lifetime of severe pain because their heath insurance won't pay for treatment?
I watch stuff in the background to satisfy my ADHD. And when I'm burnt out I watch stuff as it keeps me entertained while not taking much mental energy.
It will affect their paychecks. Same with the military and other essential services. Generally, they can't shut down those offices, but they also can't pay them except in cases where the money was already put into accounts for paying those things.
I mean, yeah, otherwise they'd want regulations that prevent it from being manipulated by individual rich people, but they have always been against anti-monopoly regulation and other protective regulations.
"Free market" doesn't mean free from regulation, it means free from interference in the supply and demand of the product. But there's still a need to prevent other forces from interfering with supply, including from those participating in the market. If a single company prevents any competition from entering the market, that is what's not "free market".
The idea that your vote doesn't count in a strongly red or blue state is total propaganda to get people to not vote and make it so that they don't have to spend money on campaigning in those places. There are way more people who don't vote than there are people who voted for either candidate in most places. If everyone voted it could easily overcome any perceived majorities. Especially if city people voted. Problem is that there isnt enough capacity to vote. And cuts to funding that capacity in red states have been a big way to discourage voting in cities. Most people can't afford to take an entire day off of work to wait in the lines and employers wouldn't allow it. They're only required to give 1 hour which is barely enough to get to a poling place and back with no lines. And that isn't enforced so many don't even give that hour. And mail in and early voting has been framed by Republicans as unreliable with fake movies and such as propaganda even though it works great in many Blue states.
Cloudflare DDNS updated by ddclient on my OpnSense router. Cloudflare happens to be my current domain registrar. Honestly, my IPv4 doesn't change that often. And when I used to be on Comcast, they assigned a block of IPv6 addresses and the router dealt with that. Unfortunately, I now have Quantum Fiber who only assign a single IPv6 address, so I gave up on IPv6 for now.
Very. Most don't even know how much a dozen eggs cost, much less how much rent costs, much less how little disposable income people have. Money is just numbers to them. It's not necessary for their survival only for their status. So it's a totally different reality for them.
They can be good negotiating points, though. Often, they will reduce the price of the vehicle more than the cost of the add on because they make more profit on the add-on than the difference in price of the car. And often the add-ons are preinstalled, so they have to give them to you anyway. Not true for all brands or dealers, but works for some.
With my last car there was a windshield coating, leather seat coating and bumpers on the door edges. After getting them nearly at the price I wanted, I told them I'd buy the seat coating if they'd lower the price another thousand below my previous price. The windshield coating and bumpers were also on the car when I finally got it. But I didn't get the warranty on them, of course.
I'm sorry the current state of things has made it necessary for you. It's especially frustrating when so many medical procedures are called "unnecessary" by the health insurance industry, but truly unnecessary surgery is being made necessary by the same people's political choices.
irotsoma @ irotsoma @lemmy.world Posts 0Comments 721Joined 2 yr. ago
It's good to use SSL even if you don't plan to use it externally. At some point you may change your mind, or you may need to access it via VPN and there may be one hop between your browser and the VPN that will then be in plain text. Plus, not all devices are trustworthy anymore. An Android or iPhone device might have "malware" (including from reputable companies like Google trying to track you for ad purposes but recording unsecured http traffic to do it.) Or a frienday bring a bad device over and connect to your wifi and inadvertently capture that traffic. Lots of ways for internal traffic to be spied on.
Google: "how to create self signed certificate authority on
<your workstation OS>
"And if that article doesn't have it, google: "how to create a domain certificate from a self signed certificate authority".
It doesn't have to be a valid external domain, just use ".internal" as the top level domain which is reserved for this kind of thing, like "vaultwarden.internal". You can also just use IP addresses in the certificate, but I find that less desirable.
Then google: "how to add a trusted certificate authority on <all your OS's of all internal devices>”. Depending on what web browser you use, you may need to add it there as well. Once the certificate authority is trusted by your devices and browsers, then the domain certificate created by that CA will be as well.
You can set your expiration dates to be far in the future if you want, to avoid having to create new ones often, but be sure to document how just so in 5 or 10 years or so, if it's still that way, you'll know how to update them.