Just a lvl 28 guy from Finland. Full-stack web developer and Scrum Master by trade, but actually more into server-side programming, networking, and sysadmin stuff.

During the summer, I love trekking, camping, and going on long hiking adventures. Also somewhat of an avgeek and a huge Lego fanatic.

  • 2 Posts
  • 26 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle

  • I recently set up the whole stack (Postfix, Dovecot, OpenDKIM) on a VPS. I wanted to do it from home, but my ISP won’t provide a static IP or open ports 25/465/587 for consumer customers, no exceptions.

    It took me about two days to get everything working, but most of that was because I went in with very little knowledge of how email even actually works. If you’re looking for a learning experience, I’d say go for it. If you just want a working email setup quickly, I wouldn’t recommend it.

    I haven’t noticed any deliverability issues so far. Just make sure you have SPF, DKIM, DMARC, and PTR records all set correctly from the start.


  • Finally took the time to watch the first season of HBO’s The Last of Us. I watched the first episode on Friday evening and then binged the rest over the weekend.

    I never played the game, but I know the basics of its plot. I liked the story for the most part, and I think the amazing cast saved it on parts where the writing was a little meh. I’m not a big fan of the ending tho, seemed very rushed.

    I’m still contemplating whether to watch season two next, given it has received far less favorable reviews.




  • Depends on how strict the rules are. If I’m allowed to grab my camping gear, theoretically I could last a long time. But strictly speaking, it’s not something I can just grab on the way out, and obviously I would need to pack it too.

    Assuming the first scenario, the next immediate issue would be water. It’s very hot here right now, so I would need to find a reliable source of water, and fast. Realistically, initially my only option would be to drink from lakes. Without a water filter, there’s always a risk of contamination, but I could start boiling my drinking water once I get a fire going.

    The second issue would be food. I know nothing about hunting, and I’m a very inexperienced fisher too, plus I don’t have any gear for it. My only options would be berries, and maybe trying to make a crude fishing rod out of a tree branch and string and hoping to get lucky. I don’t trust myself enough to touch any mushrooms unless it’s an absolute last resort.

    In the long run, I think food would be the biggest problem. Most likely I would starve to death long before winter. If I somehow managed to sort out the food situation, I could try to find a protected spot for the winter and gather tons of firewood. My thickest sleeping bag is only rated for -10°C, and it gets as low as -30°C at least once each winter here, but with a fire and a sheltered spot, I think it would be survivable. But then again, food would be an even bigger issue during winter.


  • 6:30 Alarm
    6:30 - 6:45 Check messages, news, weather forecast, Lemmy, etc.
    6:45 Actually get up
    6:45 - 7:20 Shower, get dressed, eat something light, brush teeth, leave the house
    7:20 - 8:00 Walk, ride bike/e-scooter, or drive to the office, depending on the weather and mood

    During the summer, if it’s warm outside, I skip the shower and instead pack my swimwear to take a quick dip and swim at a beach located on the way to the office. During the day, the beach is normally packed with way too many people, but at 7am there’s usually no one there and especially not any screaming children.







  • JRaccoon@discuss.tchncs.detoSelfhosted@lemmy.worldJellyfin over the internet
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    8
    ·
    edit-2
    3 months ago

    I see everyone in this thread recommending a VPN or reverse proxy for accessing Jellyfin from outside the LAN. While I generally agree, I don’t see a realistic risk in exposing Jellyfin directly to the internet. It supports HTTPS and certificates nowadays, so there’s no need for outside SSL termination anymore. (See Edit 2)

    In my setup, which I’ve been running for some time, I’ve port-forwarded only Jellyfin’s HTTPS port to eliminate the possibility of someone ending up on pure HTTP and sending credentials unencrypted. I’ve also changed the Jellyfin’s default port to a non-standard one to avoid basic port-scanning bots spamming login attempts. I fully understand that this falls into the security through obscurity category, but no harm in it either.

    Anyone wanna yell at me for being an idiot and doing everything wrong? I’m genuinely curious, as the sentiment online seems to be that at least a reverse proxy is almost mandatory for this kind of setup, and I’m not entirely sure why.

    Edit: Thank you everyone for your responses. While I don’t agree with everything, the new insight is appreciated.

    Edit 2: I’ve been informed that infact the support for HTTPS will be removed in a future version. From v10.11 release notes:

    Deprecation Notice: Jellyfin’s internal handling of TLS/SSL certificates and configuration in the web server will be removed in a future version. No changes to the current system have been made in 10.11, however future versions will remove the current system and instead will provide advanced instructions to configure the Kestrel webserver directly for this relatively niche usecase. We strongly advise anyone using the current TLS options to use a Reverse Proxy for TLS termination instead if at all possible, as this provides a number of benefits




  • As someone living in a green country, could someone explain how things work in practice in the yellow or orange countries? I understand that in places like Russia or China, journalists can end up in prison, or worse, if the government doesn’t like their writing. But how exactly is the press not free in countries like Canada or most European nations that are labeled yellow here?

    And why is the US labeled orange? As far as I know, the media there is highly politically polarized, with most major news organizations openly supporting a particular agenda. That’s certainly a serious issue and not how the press should operate, but even Trump’s government isn’t actively limiting the freedom of the press to report on issues like they see fit? Or am I mistaken? I’m genuinely asking.


  • That’s reassuring to know. What I don’t understand is why you have the /api/v3/post/like/list route. You say you don’t want votes to be snooped on, but then you add an endpoint that makes it very easy for instance admins to do exactly that if they choose to? Also worth pointing out that the tool linked here wouldn’t work in its current form if this route didn’t exist.


  • JRaccoon@discuss.tchncs.detoOpen Source@lemmy.mlIntroducing Lemvotes
    link
    fedilink
    arrow-up
    12
    arrow-down
    4
    ·
    5 months ago

    Compare your actions to releasing a 0-day exploit for a security vulnerability instead of responsibly disclosing. It doesn’t help, it just causes chaos until the people who do the actual work can figure out a solution.

    This comparison is not fair at all. It’s not like the devs are unaware of this. They could start by removing the API endpoint that lists a post’s votes, but they haven’t, which means they seem to think it’s okay for the instance admins to snoop on votes if they so wish.