I’m surprisingly level-headed for being a walking knot of anxiety.
Ask me anything.
Special skills include: Knowing all the “na na na nah nah nah na” parts of the Three’s Company theme.
I also develop Tesseract UI for Lemmy/Sublinks
Avatar by @[email protected]
Well, removed yes. Deleted, not always.


I’ve been looking into crowdsec for ages now and still haven’t gotten around to even a test deployment. One of these days, lol, and I’ll get around to it.


Oooooh. That’s smart. I mostly host apps, but in theory, I should be able to dynamically modify the response body and tack on some HTML for a hidden button and do that.
I used to disallow everything in robots.txt but the worst crawlers just ignored it. Now my robots.txt says all are welcome and every bot gets shunted to the tarpit 😈


I’ve got bot detection setup in Nginx on my VPS which used to return 444 (Nginx for "close the connection and waste no more resources processing it), but I recently started piping that traffic to Nepenthes to return gibberish data for them to train on.
I documented a rough guide in the comment here. Of relevance to you are the two .conf files at the bottom. In the deny-disallowed.conf, change the line for return 301 ... to return 444
I also utilize firewall and fail2ban in the VPS to block bad actors, overly-aggressive scrapers, password brute forces, etc and the link between the VPS and my homelab equipment never sees that traffic.
In the case of a DDoS, I’ve done the following:
Granted, I’m not running anything mission-critical, just some services for friends and family, so I can deal with a little downtime.


I used to use HAProxy but switched to Nginx so I could add the modsecurity module and run WAF services. I still use HAProxy for some things, though.


I have never used it, so take this with a grain of salt, but last I read, with the free tier, you could not secure traffic between yourself and Cloudflare with your own certs which implies they can decrypt and read that traffic. What, if anything, they do with that capability I do not know. I just do not trust my hosted assets to be secured with certs/keys I do not control.
There are other things CF can do (bot detection, DDoS protection, etc), but if you just want to avoid exposing your home IP, a cheap VPS running Nginx can work the same way as a CF tunnel. Setup Wireguard on the VPS and have your backend servers in Nginx connect to your home assets via that. If the VPS is the “server” side of the WG tunnel, you don’t have to open any local ports in your router at all. I’ve been doing that, originally with OpenVPN, since before CF tunnels were ever offered as a service.
Edit: You don’t even need WG, really. If you setup a persistent SSH tunnel and forward / bind a port to your VPS, you can tunnel the traffic over that.


I’m always wary of any .news domain because literally anyone can run a blog and buy a cheap .news domain to point to it.


Yeah, I expanded my hard drive (unofficial methods) in my 360 and “installed” all of my games to it. That way if the optical drive starts to go or my discs get messed up, all it’ll have to worry about is reading the disc initially to allow it to play from the hard drive. I did similar on my soft-modded OG Xbox but I don’t even need the disks for that one anymore (and the DVD drive is kaput anyway).
I haven’t messed with x360 emulators as I never had anything powerful enough at the time, but I saw not long ago there was one available for Android now, so I may look back into it.
But yeah, something like XLink Kai that somehow satisfies the cloud connectivity would be cool. But I’m not sure how that would work since it’d have to have valid certs for the hardcoded domains the system and games would connect to.


I didn’t even remotely get the assumption it was implying cartridge-based consoles connected to the internet. The next sentence is even “That beautiful feature fell away when consoles joined the Internet”


Did you read TFA or just react out-of-context to the intro paragraph?
Notice what you don’t see: Any scratches or dirt on it nor mud on any of it’s 6 tires. Total pavement princess.


Literally that.
Growing up, I always loved going to Grandma’s house because it always smelled so good because she was always cooking something. Later in life, I realized it was just a faint onion smell because she put them in everything.
On these, yes, but the batteries are not integrated like in modern laptops.


It only takes one to ruin your day. You can filter out all the dedicated political meme communities (time well spent, IMO) but you can’t filter out the ones here because no one tags anything, no one puts any alt text, and the titles are just generic snark.


If it’s about a political figure (or group of), yes.
My record is 9.9 years (and going). This is my old Thinkpad T420 which lives on my equipment rack to act as a SSH / web console for my equipment. I just close the lid and put it to sleep when it’s’ not in use. It doesn’t even connect to the internet, just my isolated management VLAN.

My HomeAssistant server (also an old ThinkPad) is the next longest at just under a year. It also lives on an isolated VLAN.
Both of these are repurposed laptops with batteries in good condition and thus have built-in UPS (in addition to the UPS they’re plugged into).
The rest average about 4-7 months depending on power outages (rare but when they do occur, they’re longer than my UPS can provide) and rebooting for kernel updates.


You can also self host it: https://github.com/schlagmichdoch/pairdrop
At best. And it’s probably gonna be a <= $2 Google Play Store gift card.