shiftymccool

joined 1 year ago
[–] shiftymccool 6 points 6 days ago

It's almost like punctuation was made for a reason...

[–] shiftymccool 10 points 1 week ago (2 children)

I, apparently, have the pleasure of introducing you to Cave Johnson: https://youtu.be/NyLUU3O4zW8?si=FQy2MbPEy2_xEzzG

[–] shiftymccool 5 points 1 week ago

Oh no, they might have to flip over another couch cushion to find that kind of money

[–] shiftymccool 3 points 1 week ago (1 children)

I used nextcloud for a while but ended up with a combo of syncthing and filebrowser to similar effect

[–] shiftymccool 9 points 1 week ago

Multiple sag layers? What is this, the early 90's?

[–] shiftymccool 5 points 1 week ago

You're the reason we can't have nice things

[–] shiftymccool 1 points 1 week ago

...to understand Donald Trump...

I'll just stop you right there, nobody needs this

[–] shiftymccool 13 points 2 weeks ago (1 children)

In this case, it appears that Gmail's AI search tool will be optional.

Until they quietly turn it on by default after the initial news had cooled down

[–] shiftymccool 10 points 3 weeks ago

The LLM generates software, freeing the programmer from having to write and debug the underlying code

Aaaaand this is the problem. Sure, go ahead and let the slop machine generate the code, but you definitely have to debug that shit.

[–] shiftymccool 7 points 3 weeks ago (1 children)

It's really the same definition. The first time i heard it in this context was with modding/rooting smartphones (in the early days). If you fucked up a step, your device could end up in a completely unusable and unrecoverable state. At that point, its only use would be as an expensive brick

[–] shiftymccool 62 points 3 weeks ago (6 children)

People sure like to just toss the word "brick" around. These printers are still functional enough to get another firmware update to fix them. You know what can't? Bricks

20
submitted 8 months ago* (last edited 8 months ago) by shiftymccool to c/[email protected]
 

Hey all! I'm having an issue that's probably simple but I can't seem to work it out.

For some history (just in case it matters): I have a simple server running docker and all services being defined in docker-compose files. Probably doesn't matter, but I've switched between a few management UIs (Portainer, Dokemon, currently Dockge). Initially, I set everything up in Portainer (including the main network) and migrated everything over to Dockge. I was using Traefik labels but was getting a bit annoying since I tend to tinker on a tablet. I wanted something a bit more UI-focused so I switched to NPM.

Now I'm going through all of my compose files and cleaning up a bunch of things like Traefik labels, homepage labels, etc... but I'm also trying to clean up my Docker network situation.

My containers are all on the same network, and I want to slice things up a little better, e.g. I have the Cloudflared container and want to be selective about what containers it has access to network-wise.

So, the meat of my issue is that my original network (call it old_main) seems to be the only one that can access the internet outbound. I added a new network called cloudflared and put just my Cloudflared container and another service on it and I get the 1033 ARGO Tunnel error when accessing the service and Cloudflare says the tunnel is down. Same thing for other containers I try to move from old_main, SearXNG can't connect, Audiobookshelf can't search for author info, etc... I can connect to these services but they can't reach anything on the web.

I have my docker daemon.json set to use my Pi-hole for DNS and I only see my services like audiobookshelf.old_main coming through. I also see the IP address of the old_main gateway coming into Pi-hole as docker-host. My goal is to add all of my services to new, more-specific networks then remove old_main but I don't want to drop the only network that seems to be able to communicate with the web until I have another that can.

I'm not sure what else to look for, any suggestions? Let me know if you need more info.

20
submitted 11 months ago* (last edited 11 months ago) by shiftymccool to c/[email protected]
 

Hey all!

I have a bunch of services running on my home server and was looking to expose some of them publicly via Cloudflare tunnel. This is done and working great using the origin server certificate and strict TLS.

Up until now, I've been using self-signed certs internally but now I don't want to deal with the "proceed anyway" crap on browsers. I have Traefik set up to get certs from Cloudflare using DNS challenge and that seems to be working.

So, now my problem is: how do I switch between these certificates for the same URL when I'm internal vs public? I'd rather keep that traffic local if I'm at home, which is also working, I just can't figure out how to get Traefik to use the appropriate certificate depending on if the request is coming from my LAN or Cloudflare.

Any suggestions? Is there a better way to accomplish what I want to do?

EDIT: Looks like I'm just going full Cloudflare on this one, thanks for your help everyone!

view more: next ›