I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
The ARR tools are basically a search engine website you host. The interact with a few other tools you have to have access to/pay for. Namely an indexing service and a (for some) a download service. They can use torrents, so you dont HAVE to pay for downloading, but using something like newsgroups is really nice and add reliability and security.
THe “ARR’s” basically then are just a fancy UI and scheduler and just search the indexing service, download the files you want, re-assemble them and copy them to the location you want (often a file share that your media player like Plex or Jellyfin will use).
You can set them to continually look for something too. So for Sonarr, it will auto-download new episodes as soon as they appear in the index. Or if you see a commercial for something upcoming, you can add it and monitor it and as soon as it starts showing up in the indexes it will download.
All the aarrrs. Saturates my isp bandwidth, have no issues with finding stuff, no takedown or piracy warnings…
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
Ah. That makes sense.
Interestingly the game is downloading for me. I have had it in my library for some time now.
Is it saying its been pulled for new sales only?
Honestly the only thing I can think of is the competition recently to hack a satellite, maybe has drawn the ire of some script kids, or rather interest. [1][2][3] I LOT of educational and research stuff is quite open, and often very resistant to change as they value access/transmissibility over security in many cases where theres no real grounds (ie: its not national secrets etc). Some of these datasets are quite large.
Even still basic things like firewalls, key based access etc should be setupo. Heck if its a multi-million dollar instrument airgapping is probably worth its time. But i dunno. Just conjecture on my part.
The competition definately brought some attention [4]
FWIW he says this in the beginning of the video.
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
Yeah. Like I said, i have no idea what the conditions are. Maybe its Cloudflare threatening/applying pressure and LW has been getting smacked with DDOS etc.
But maybe not too. I strikes me as a excuse but honestly i dont know all the details or variable and frankly i dont care all that much.
Beeper does want you to proxy your iCloud account through a Mac on their network for iMessage. You are logging into your iCloud account through their site. They are in effect using Mac minis in a farm to provide the service based on what I looked into (including self hosting it, but then you can’t use a beeper app, you need your own)
https://help.beeper.com/chat-networks/imessage?from_search=125277302
Text is copied. Media is simply linked back to the original location I believe.
Also dmca just means that the admin has to make a reasonable effort to remove things reported as no compliant. Aka they ban or remove offending posts and they are in the clear.
I’m gonna be honest. And I run my own instance, albeit solo, this content isn’t my concern. It’s the CP/CSAM shit that folks like burggit.moe we’re spreading that got my liability concerns up. The feds go hard on that shit (as they should) and will hold a hosting admin accountable as if they were the ones viewing and reading it.
Dmca is pretty clear cut and toothless. I’ve dealt with it plenty as a network admin. As long as you remove it when notified, you are in the clear. This strikes me as the admins having a political opposition to it and using their made up code of conduct as a reason and when pressed just saying “well liability”.
That said I don’t know where they live and the laws for me may not be the same as someone hosting in Germany, who may go hard on that stuff. So who am I to judge? Just saying dmca isn’t really a concern.
Also they’re hosting provider could just cut them for “abuse” especially if they are already using a lot of resources and if that’s a concern I get it. .
I would agree with most of what you said.
There are also a not-insignifigant number of people that struggle when at home 100%. Some people are rock stars and able to just get stuff done. But a lot of people are not, sadly, organized enough to handle such an unstructured environment and able to still be effective.
This isnt a new thing due to covid or the move, but a LOT of folks just do better with a hard separation of work/life and a lot of folks arent self aware enough to know they need it.
As someone that can and has worked remote, and chooses to come back, it can be frustrating working with people that struggle with these things, and I definitely see differences between home work and office work in some. I actually work in an office because its much easier to maintain balance. I tend to work too much from home and it causes burnout but I also have kids/family that come home early and dont really understand that just because im home doesnt mean i can sit down and talk at their convenience. What I mean is that work/life balanace is harder. So i choose to commute 99% of the time and can WFH when needed.
But i have one guy that had had this issue chronically for years where he often struggles to communicate, is easily distracted, often needed to be micro managed or have his tasks organized, prioritized and in some cases, even steps spelled out. He does well enough to mostly be of help (so hes not gonna get fired), but he complains about lack of upward mobility or lack of raises, but when the SHTF, hes always got excuses locked and loaded about why hes behind or cant complete a project/task.
Conversely I have a guy thats AMAZING from wherever. Never has issues and is always way ahead of the curve. Hes also full time remote but excels at it.
It just depends on the person in a lot of cases and frankly, in my very small use cases, many/most arent the type that are capable of the self discipline needed for the task. Now that said Im not at google or one of those places that hires rockstars in buckets, so they reasons they are RTO are likely different from my orgs.
Of my team, i would say at least a cool 60% are just much less…themselves from home and easily distracted. Either because they segment their life (which is fine and awesome, i do that too), or because they dont have a good setup at home, or because they are just too easily distracted at home.
I have NSFW unchecked on my instance, so no porn is ingested/federated. Also because its just me, i have to seek out communities to federate with via search.
I did this via https://lemmyverse.net/communities and changed the linked names to my domain and just ran searchs to start the federation for the specific communities i found interesting.
It does mean things like “Local” is useless and subscribed and all are the same filters since its only stuff i subscribed to.
Occasionally I will browse one of alts on a different instance and check all, or local there and see if theres anything interesting. I have also re-run through the link above here and there to find new communities to join. Those are probably the biggest “pain points” in that it takes more effort to find new communities. But once you start the feed its fine.
I also use different default filters on my alt’s in different instances (ie: ALL:HOT on lemmy.world) or whatnot if im feeling like finding new stuff. But honestly the lemmyverse stuff gets like 99% of the content here, and theres been a dip in participation, so some communities are idling (which just means I dont see anything)
Are you hosting it on personal hardware?
Not currently, though I am considering it. Right now I host mine on a VPS in linode. Though i need to downgrade it, I built it with the expectationg of allowing joins, but recently decided just to keep it private.
Can you just choose any free name for the domain if it’s on your own hardware or do you need to rent one regardless?
This wouldnt work. You not only need to have a routable/real domain name, but the server likely needs access to the internet to allow fro federation, specifically ingress traffic, to work.
Do you keep it active all the time or turn it off for the night/other periods of time where you know you won’t use it?
Mine runs 24/7. Even if i hosted it at home it would be 24/7. Only issue is
I already use port 80/443 at home. So i would need to reconfigure NGINX to use a proxy, which could also break federation. I could do that, in fact I am pretty sure the ansible config uses NGINX proxy commands, just that I would have to customize it and Im lazy. I already have stuff on VPS systems in linode (blog, teamspeak etc) so its no biggy to have another one.
My internet at home can be flaky. For example I currently dont have power at home and while I normally run on UPS for a time, and can cut to generator when I am home, my network just went into auto-shutdown.
Excatly why I never opened my instance. With it just being me, i can control what is on it and what is synced. There was too much risk with CP/CSAM type stuff. Heck I didnt even want to risk my linode account (aka they shut my other VPS systems down) due to TOS from shenanigans.
That said, I can still contribute just fine with my own instance and dont have to be involved in these drama defederation actions.
I would encourage anyone that is willing to criticize an instance maintainer for their decisions on risk to just roll out the lemmy-ansible setup and go your own way. If you troll or act in bad faith, you will get defederated. If you act like a reasonable person, no one will even notice. And that way you are in control of uptime, patch cadence, backups etc.
Any company that I have to give my username and password for a third party service (and especially one as important as icloud/imessage) ill take a hard pass.
Yep. They just pull things you monitor as they show up in your feeds (in my case Usenet newsgroup indexes)
For example. My wife like Billions, new episode/season came out and it jus popped up in my plex server the other day
It’s fine but a lot of forms and sites won’t work with it. Like legit will say someone@something.email is not a valid address.
So I would suggest a “normal” .com, .net., or ccTLD like .us. Those I haven’t seen that issue for.
Also some gTLDs will get automatic spam scores and stuff. .zip is probably gonna be on a ton of blocklists etc.
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.