Adding my voice: Podman is great
observantTrapezium
- 3 Posts
- 93 Comments
Ah, interesting. Looks like using grants does resemble what I envision and probably easier to set up that mTLS. I’ll certainly explore that!
Ah, thanks for the idea. I’ll look into Traefik, I’ve heard of it, but wasn’t sure what it could do.
I’m already running Headscale, and it works great. But to expose individual services to individual devices it feels like an overkill. I don’t actually need all these devices to connect to the tailnet all the time, and some of these devices I don’t even want to be able to access the entire tailnet.
My thinking is to put Immich, Matrix, and CalDAV/CardDAV behind mTLS. So the clients practically do connect via native mobile apps rather than a browser. The devices belong to a small number of users, I don’t manage them, but can distribute the keystores, and plan on doing the PKI manually as it’s really not a lot to keep track of.
Not an authentication replacement for sure, just an extra layer of protection. The goal is mostly so that if there’s a new critical exploit, I don’t have to drop everything I’m doing and immediately mitigate.
observantTrapezium@lemmy.cato
Mildly Infuriating@lemmy.world•This Avocado Oil that claims to be “0 Calories” 🙄English
1·11 days agoIn Canada we also have nutrition facts per serving bullshit
Both are arbitrary but only one is an international standard
observantTrapezium@lemmy.cato
Ask Lemmy@lemmy.world•What song lyrics did you mishear that completely changed the meaning of the song?
9·15 days agoIf you wanna be my lover, you gotta get rid of my friends
No issue if the info gets hashed and the service’s database is only searched for the hash à la have I been pwned, it’s probably legit 😜
It’s certainly your right to feel this way. But interesting to wonder why you feel like you need work and home too be a whole hour commute apart.
Wouldn’t it be better to spend this hour getting into home mode, idk, at home? And what’s so great about commuting to work for an hour in the morning, so you could wind up and get into work mode?
Work commute is time you aren’t really free to do what you want, yet you generally don’t get paid for.
Yes, but also a leftist…
observantTrapezium@lemmy.cato
Selfhosted@lemmy.world•What's your favourite thing to self host and why?English
21·1 month agoSo hard to pick a favourite. I’m especially proud of having the mail server.
They might be trying to detect ban evasion in various ways, but at least since Android 10 (released 2019), the OS restricts app access to non-resettable identifiers. That being said, Meta is known for dirty tricks, so simply using another phone number may indeed not be enough.
Effectively, they are getting paid by you, landlords factors that fee into the rent. But I get the point that the market favours landlords where you live and you might not have the privilege to ask for accommodations like communicating over SMS. This WhatsApp situation is fucked up, that your basic life functionality depends on a single unaccountable commercial entity.
My practical advice would be to buy an eSIM with a new number, there are very cheap options (like one used for travel) and you would practically need it just one time to get a verification code.
I was talking about the packaging, not the brand. However setting my VPN exit node to a US location and looking up pictures of the product, most results do indeed have the same English-French labelling, funny.
Funny how my brain recognizes Canadian packaging before I consciously register the bilingual labelling.
observantTrapezium@lemmy.cato
politics @lemmy.world•Kash Patel draws flak for posting FBI case details on social media ‘to make himself look good’
8·2 months agoI saw his ugly face and automatically read “draws a flask”
Age might be a factor though. Recently I found a stash of floppies from around 2002, which were definitely good when they were stored. I think I was eventually able to extract only about 20% of the data.





Arch has, in parts, Canadian roots and was originally developed by a Canadian programmer. For that I, as a Canadian myself, want to strongly say “you’re welcome” in the name of the Canadian people!!