Skip Navigation

Posts
5
Comments
154
Joined
2 yr. ago

  • I’ve been using Thunderbird with the OWL and TBSync plugins for exchange for years with good results. Obviously some things won’t work (teams integration, provisioned signatures, mail merge, etc) but it’s good enough that I only need proper outlook/OWA less than once a month.

    Another option is “installing” the webapp as a PWA. I tried that for a bit but found notifications to be unreliable.

  • It’s fine. RAID is not a backup. I’ve been running simple mirrors for many years and never lost data because I have multiple backups. Focus on offsite and resilient backups, not how many drives can fail in your primary storage device.

  • Wait… you’re telling me that these devices are connected directly to the CAN bus and also have default root passwords? Did nobody involved in this ever stop and think it might possibly be a bad idea??

    This brings a new meaning to the old phrase “war driving”

  • Not sure how to do that in docker, I’ve run mine as a plain old PHP-FPM site for years and years. It might be something that can be tweaked using config files or environment variables, or might require building a custom image.

    ClamAV is slow and doesn’t catch the nastiest of malware. Its entire approach is stuck in 2008. It’s better than nothing for screening emails, but for a private file store it won’t help much considering that you’ll already have the files on your system somewhere. And most importantly, it slows down file uploads 10x and increases CPU load substantially. The only good reason to use ClamAV for nextcloud is if you will be sued if you don’t!

  • It needs some tweaks to be snappy. The defaults are really bad.

    • change database from SQLite to a proper database like MySQL or Postgres, and configure the database server to use your memory fully
    • increase the PHP memory limit from the default (128M on many distros) to >1G, the more the better
    • install APCu in-memory cache for PHP
    • add Redis as additional cache
    • turn off the antivirus extension, if installed (ClamAV is useless)
    • use http/2 on Apache/nginx to increase performance with multiple connections

    https://docbot.onetwoseven.one/services/nextcloud/

  • They’re not going to jail for you. Never assume a service provider will put themselves at risk on your behalf.

  • Gonna paint this on my roof to break some spy satellites

  • Yep. Firewall, routing, dhcp, dns, everything you’d expect from a gateway device. Plain Debian (or really any distro) can do it all. With a 1gbps bi-directional connection fully saturated it will run at about 10% cpu on my very crappy low power Celeron CPU.

    Plus, there’s no web UI full of janky and insecure CGI scripts to exploit, and software updates are forever (well, until x64 is deprecated, so basically forever).

  • IPtables on Debian because I like my life to be boring and unchanging.

  • For about a year I was running a full out of band IPS on my network. My core switch was set up with port mirroring to spit out a copy of all traffic on one port so that my Suricata server could analyze it. Then, this was fed into ElasticSearch and a bunch of big data crap looked for anomalies.

    It was cool. Basically useless because all it did was complain about the same IP crawler bots as my nginx logs. But fun to setup and ultimately good for my career lol.

  • Sadly the Canadian mint takes a loss on every coin and bill. Every $50 note they create actually costs about $65 (with the tip).

  • I just got my first Chucky Buck this weekend, we can’t switch to a new currency this quickly! Our economy is in shambles!

  • Yeah, this will actively discourage the most experienced baristas. It takes ~15 seconds to pour some drip coffee out of a carafe, but it takes ~90s for a good quality latte or cappuccino. If your least experienced employee is “6x more productive” then your most senior, that creates a hilariously bad incentive to fire people who know what they’re doing.

    Not to mention that this disincentives cleaning.

  • Great… another nine ton brickmobile to spontaneously catch fire in a tunnel

  • Not an arch user, but it’s possible they moved dbus to a user scoped unit now. Might be possible to start it like this (or something similar)

     
            systemctl —user start dbus.service