In my current setup, I think my reverse proxy does not detect certificate updates (done by a different service), and I am just lucky that usually the service restarts because of some update before the old one expires.
Once that is solved, I am tempted to try the six-day expiration.
Did you consider the DNS-PERSIST-01 ACME challenge? You have to add a persistent TXT entry to your DNS, and then you are independent from provider support for renewals.
Kommt jetzt endlich anständiges Peering?
I use both ULA and global addresses. Servers set a token to make the last 64bits predictable, which simplifies dyndns. For some critical internal communication, I hard code the ULA address in my hosts file, for everything else, I rely on DNS (with global addresses). No DHCPv6.
I usually just disable IPv4 on my VMs, unless there is a specific need for IPv4. Most container networks are single stack as well. I have a squid proxy that services can use to access IPv4 http/https destinations if really necessary (combined with some additional filter rules); ideally I would like to have 464xlat/a nat64 gateway, but I never bothered to set that up yet. I will likely do that when I buy a new router (end of year?). I expect all my devices to support CLAT by then, so that will be the end of IPv4 on my network.
Pictures and Videos typically refer to personal media, whereas music would refer to professional media. I don’t think grouping them into a single media directory would usually make sense.
They are still useful for user data. For the nixos system itself, not so much.
I had the same idea, but the solution I thought about is finding a way to define my DNS records as code, so I can automate the deployment. But the pain is tolerable so far (I have maybe 30 subdomains?), I haven’t done anything yet
deleted by creator
Gleiches Problem hier. In Firefox auf meinem PC ist mein IP-Bereich angeblich gesperrt. Die Anmeldung am Handy in Fennec hat funktioniert. Daraufhin habe ich eine E-Mail erhalten, Betreff: „Neue Anmeldung – bist du es?“. Ich habe den enthaltenen Link „Login bestätigen“ in Firefox auf meinem PC geöffnet, und jetzt bin ich dort auf einmal auch angemeldet.
Selten so einen Unsinn erlebt.
Have you tried this? I run NixOS on my server, Aurora (immutable Fedora distro based on Universal Blue) on my desktop PCs, and this sounds very interesting. Unfortunately, it seems that this is explicitly not supported on ublue-os systems.
The graph shows weekly active users. So you wouldn’t be counted unless you actively boot Bazzite.
One has to find the right balance between security and comfort, and this entirely depends on the threat model one has. Nowadays, I will always enable full-disk encryption on all of my devices, even if I then decide to store the keys in TPM and unlock the disk at boot.
I have at least 5 half-broken HDDs sitting around, completely unencrypted, I have no idea if they still work, but they are surely full of private data that I would like to have purged. I fear mechanical destruction might be the only solution for some of them, but just wiping them manually is more effort than doing nothing, so I guess they will still be around for some time. And with SSDs, there is no reliableway delete all data.
With encryption? Just delete the key and you are done.
The threat model changes in the future? Easy, the data is already encrypted.
That is not correct, gsconnect has no dependency on KDE Connect, it is an independent implementation of the same protocol, not a wrapper
Wait, so 0.2% of all Aurora Users are me?
Auf DroneMaps24 kann man Flugverbots- und Kontrollzonen einsehen.
Die Deutsche Flugsicherung hat auch eine (äquivalente?) Karte.
Auf beiden fehlen aber die von /u/philpo@feddit.org angesprochenen Radio-Mandatory-Zones? Ah, die Kontrollzonen (CTR) scheinen in ihrer (lateralen) Ausdehnung äquivalent zur RMZ zu sein
No, Audacity is licensed as GPLv2+.
Audacity was bought in 2021 by Muse Group, and a few weeks later, they announced that they would introduce Google Analytics and Yandex-based “telemetry”. After strong criticism by the community, Muse Group backtracked, emphasized their commitment to the GPL license, dropped their plans to include Google/Yandex tracking, and instead opted for a self-hosted solution for bug reports and update checks. Both can be disabled, and some distributions disable them by default.
Still, a few forks emerged, Tenacity is the only one that is still actively being maintained. The last commit is from today, but their repository is at 16k commits, compared to 21k commit for Audacity, so it seems the two projects have diverged.
I did the same last week (and am still in the process of setting up more services for my new server). I have a few VMs (running Fedora CoreOS, with podman preinstalled), and I use ansible to push my quadlets, podman secrets, and static configuration files. Persistent data volumes get mounted using virtiofs from the host system, and the VMs are not supposed to contain any state themselves. The VMs are also provisioned using using ansible.
Do you use ansible to automatically restart changed containers after pushing your changes? So far, I just trigger a systemctl daemon-reload, but trigger restarts manually (which I guess is fine for development).
No, there is no fix released for this PHP vulnerability