First set up your certificate in the SSL tab of NPM. You can either upload a traditional certificate or set up LetsEncrypt. Be aware that starting next spring the maximum length of a certificate will drop to 9 months and continue to decrease over the next few years until its 47 days.

I have mine set up so LetsEncrypt gets a wildcard cert for my domain (via DNS challenge). Some people go with per subdomain certs.

Once you have the cert, go you each of your hosts and switch to its SSL tab. Then select your cert. Then I usually turn on “Force SSL”

Every single story about windows 11 makes me hope I can convince IT to let me migrate my work laptop to linux before October.

I use Nginx Proxy Manager running as a docker container. Its a gui that makes administration more straight forward. It points at all my services (docker and otherwise) and handles the SSL for me. Because I don’t want to have any ports open I use DNS challenge ACME and NPM has built in support for a number APIs from large public DNS providers to automate that.

This looks like the trailer for an ILM remake of CryptoZoo NFTs.

This is why I didn’t buy a wireless android auto adapter when I bought a different car. I figured Gemini was going to get stuffed down our throats there.

I thought I cancelled a couple years ago, so I appreciate them sending me an email telling me they were still getting my money.

For those unfamiliar, Dawarich is a self hosted location tracker / timeline

Thank you for that. Its surprising how long that takes to answer when I see some release announcements. Especially over on Mastodon.

Shortened lives, hastened climate change, and stunted development is a small price to pay for being able to see a nude version of any photo posted to xitter.

Somebody send a gift basket to the Skype CEO, he’s not doing so well.

My experience is with systems that handle nearly 1000 pageviews per second. We did use a spread of haproxy servers to handle routing and SNI, but they were being fed offender lists by external analysis tools (built in-house).

Most often because they don’t download any of the css of external js files from the pages they scrape. But there are a lot of other patterns you can detect once you have their traffic logs loaded in a time series database. I used an ELK stack back in the day.

When I was serving high volume sites (that were targeted by scrapers) I had a collection of files in CDN that contained nothing but the word “no” over and over. Scrapers who barely hit our detection thresholds saw all their requests go to the 50M version. Super aggressive scrapers got the 10G version. And the scripts that just wouldn’t stop got the 50G version.

It didn’t move the needle on budget, but hopefully it cost them.

“Significantly better than ChatGPT” and “Good” aren’t the same. Like ipecac is significantly better to drink than sewage water.

I went long enough without using Google (probably a year-ish) that, when I accidentally made a Google search a few days ago, it was a jarring experience.

It felt wrong the same way other search engines did when I first deGoogled. It was kind of nice actually.

And they didn’t do a heart with a banner in front of it that says “Mom”?

Don’t worry, the oligarchs also want to release any content they own as smart contract so ownership is eternal and a driver of blockchains. Then they want to make breaking DRM or smart contracts more heavily punished. “Protection for me, not for thee”

I use Proxmox because its handy to be able to use both LXC containers and full VMs. I installed it as an ISO so its built on top of Debian. There are helper scripts specific to installing Home Assistant on a VM (as well as a number of other things). And the proxmox UI comes in handy.

I have Home Assistant in a VM so I can run it on top of HAOS. Then the rest of the box is set up as an unprivileged LXC where I installed docker. I run all my *ARR apps straight on my Synology (via docker) so they have fast access to my Library volume, and everything else running on the setup I just described. Then I use Portainer to maintain my containers so I can manage both the syno and proxmox docker installs from one page.

Not true at all. If you want to run Home Assistant on top of Home Assistant OS then it needs to be on bare metal or a full VM because its an OS. Running on HAOS is easy mode, but not required.

A few hosts offer alternative frontends, that’s how I found Alexandrite in the first place. A few will alternatively offer Proton. And I’ve seen a couple that have an old. subdomain where they run mlmym

A locally hosted instance of Alexandrite. I’m almost always viewing on a laptop.