I let CrowdSec determine that. I’m seeing /13
, /12
and even /10
in my decisions list. All seem to be Amazon AWS ranges.
I let CrowdSec determine that. I’m seeing /13
, /12
and even /10
in my decisions list. All seem to be Amazon AWS ranges.
In the Traefik static configuration (usually traefik.yml
), add this to load the CrowdSec plugin:
experimental:
plugins:
crowdsec-bouncer-traefik-plugin:
moduleName: "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
version: "v1.4.2"
(The name for the plugin is defined here as crowdsec-bouncer-traefik-plugin
.)
Then, in your dynamic configuration, add this (I’ve used a separate file dynamic_conf/050-plugin-crowdsec-bouncer.yml
):
http:
middlewares:
crowdsec-bouncer:
plugin:
crowdsec-bouncer-traefik-plugin:
CrowdsecLapiKey: "...YOUR CROWDSEC LAPI KEY HERE..."
Enabled: true
(The name for this new middleware defined here is crowdsec-bouncer
. It uses the crowdsec-bouncer-traefik-plugin
defined in the previous step. Make sure these names match.)
You can get the LAPI key by registering a new bouncer in CrowdSec.
And, finally, make sure all incoming traffic routes through the bouncer plugin. You can do this individually, or in general via the static config:
entryPoints:
websecure:
address: :443
http:
middlewares:
- crowdsec-bouncer@file
- secure-headers@file
The middlewares are processed top to bottom.
Any change to the static configuration requires a restart of Traefik to become active.
I’ve recently enabled banning whole subnets if more than 3 malicious actors from that subnet are on the blocklist. This is great for all those DigitalOcean droplets and other cheap hosters used by those people…
I had fail2ban running for several years before switching to CrowdSec late last year. They both work in a similar fashion and watch your logfiles for break in attempts. With the small difference that CrowdSec also lets you use blocklists from the “crowd” to block malicious actors before they even get to try their luck on your machine(s).
I’m using CrowdSec with Traefik and nftables. But there are some bouncer plugins for nginx and OpnSense, too.
I just followed their example configurations for Docker, Docker Compose and then started tinkering with the config until everything worked as desired.
Well, some people in the “inner circle” might have some idea about the direction they want to take. But I very much doubt that anyone outside of that circle knows anything substantial. And in the end, that website is called MacRumors for a reason. They splurt out various things to keep people speculating and engaging with their site - which earns them money. But that’s about it. I’ve removed them from my feed reader ages ago.
It’s a rumour. Nothing else. Not even Apple knows what they’ll release in 2 years.
I’m using Strongbox on iOS and macOS with iCloud Sync and never had any merge issue. Well, maybe once when I deliberately edited the same entry on two different devices. But during normal use, the sync and merge works great.
The Bitwarden clients cache your data locally. So even if your Vaultwarden goes down, you’ll still be able to access your passwords. Just not sync new ones or make changes.
I’d throw in option 3: use a KeePass2 database, sync it using whatever sync tool you like (SyncThing, iCloud, NextCloud, WebDAV, …) and use compatible apps (KeepassXC, Strongbox, etc.)
Might need some
if (ob_get_level()) ob_end_clean();
before the readfile
. 😉
And if you want some customisation, e.g. some repeating string over and over, you can use something like this:
yes "b0M" | tr -d '\n' | head -c 10G | gzip -c > 10GB.gz
yes
repeats the given string (followed by a line feed) indefinitely - originally meant to type “yes” + ENTER into prompts. tr
then removes the line breaks again and head
makes sure to only take 10GB and not have it run indefinitely.
If you want to be really fancy, you can even add some HTML header and footer to some files like header
and footer
and then run it like this:
yes "b0M" | tr -d '\n' | head -c 10G | cat header - footer | gzip -c > 10GB.gz
I was going by this thread and this comment. Those other websites are mostly selling SIMs for industrial IoT or CCTV stuff and are either acting as a MVNO (where I don’t know how much influence they have on the network configuration) or probably selling foreign cards with free roaming or something like that.
Fixed IP might be a problem as basically all carriers use CGNAT. From what I could gathergoogle, Three seems to be the only one where you can manually change the APN to 3internet
to get assigned a proper IP address.
It seems there is a way to unlock the classic games using PPSSPP’s cheat feature: https://old.reddit.com/r/Roms/comments/ozz4mu/looking_for_castlevania_the_dracula_x_chronicles/h838yfm/
This gives basically no headaches at all. I am running this schema on all my Linux devices. And swap is done using a swapfile instead of a partition. This way, you can easily increase it later on.
Ohh, SQLite isn’t “one” db. SQLite is file-based. I.e. a database in e.g. PostgreSQL (containing several tables, views, indexes, etc.) would translate to one SQLite file (e.g. mydatabase.db3
or myappdata.sqlite
). And each app has its own file/database. If the file corrupts, then it’s only affecting that specific app. (However, SQLite is pretty robust.) And since these are just files, you can backup them together with the application. No need to export data or shutdown the database first.
There are smart valves. You can just unscrew/unclip the existing dumb ones and replace them with smart ones. They usually even report the temperature (well, near the radiator - so you might want to get extra temp sensors for the other end of the room).
Unless you share the boiler’s output with someone, I’d be surprised if you didn’t have access.
But still, if you don’t want to mess with the electrical connections, manipulating the radio waves works just fine. :)
If you like to checkin manually to places, there’s PrivateSquare which will query places around you from Foursquare (so, 4sq will still see whereabout you are), but store the actual checkin in a local database.
If you want some automated tracking, I’m mostly happy with OwnTracks which logs to my DaWarIch instance. (I’ve previously used Traccar and php-owntracks-recorder.)
While I don’t see any battery usage from OwnTracks, my only gripe is that it can’t increase the amount of points logged when it detects movement because of Apple iOS limitations.
(For iOS, there’s also Geory which will log into a local database and CAN increase the logging by spawning a Live Activity. It gives me the most accurate logs so far. But they have to be exported manually to be stored elsewhere and the author wants to keep the app simple and doesn’t want to implement logging to external systems.)