WolfLink

I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.

This is an officially supported kind of setup for Immich, so I would consider it secure: https://docs.immich.app/administration/reverse-proxy/

I don’t have all of my homelab services exposed publicly though; I VPN in for those.

General tips for exposing a server to the internet:

• only expose the ports you need for services you intend to be accessible. Use a firewall and/or your router’s port forwarding settings to enable only what you need, with blocking as a default.
• update all software regularly
• only expose programs that are built to be exposed. For example, if you make a Flask website, they will warn you several times not to expose it directly, but to proxy it through something like nginx

Weren’t the extra graphics from the remaster update an optional setting?

Eh breath of the wild was huge but empty

Here’s a class assignment from UC Berkeley that is somewhat similar. They provide a VM image of a vulnerable computer and you have to break it. I believe all the (student side) resources are publicly accessible:

https://sp25.cs161.org/proj1/

He’s on Lemmy, it’s too late for that already

CDPR created GOG (although it’s now run separately).

At least docker works

This meme was inspired by my frustration from trying to switch. I like the idea of podman, but it just doesn’t work. Tbf the bugs I encountered this time were with podman compose rather than podman itself, but still, I’d rather use the tools that work. I’ve had similar experiences when I’ve tried to switch to podman in the past.

Podman is unironically the better choice.

I like the idea of podman, but it’s just not stable. This meme was inspired by my frustration of trying to switch.

Just try to make docker comply with your firewall.

I literally did this yesterday and it wasn’t that hard. You just add iptables:False to the docker config file.

Yes that’s stadium pricing. Pay $10-$15 for a hot dog that makes the Costco $1.50 hot dog look gourmet.

Ofc it’s going to run Linux, it’s default OS is going to be some variant of SteamOS

https://docs.docker.com/engine/network/packet-filtering-firewalls/#prevent-docker-from-manipulating-firewall-rules

Basically put:

{
    iptables: False,
    Ip6tables: False
}

In /etc/docker/daemon.json

I literally yesterday dealt with that. There’s an option to just turn off Docker’s firewall manipulation so you can do it manually.

This isn’t even touching the scene in the second d game where they forcibly implant her with a chip that puts ads in her vision

I’ve had a leather wallet for three past ~10 years and it’s been wet a handful of times (not submerged, but things like being in my pocket when I got caught in the rain) and it still is in great condition.

That’s the worst rendering of la Sagrada Família I’ve ever seen

They’ve scanned your dick, Mr. Bond, to disappear you will need to transition…

I keep having the issue where I ask AI to do one small but tedious task, e.g. a refactor, and it sloppifies the rest of the code while it’s at it

It’s a long CGI tech demo, similar to Avatar (the blue people one)

502 typically means something along the lines of the app serving the website wasn’t up when nginx started. Sometimes this is simply a case of programs starting in the wrong order, and restarting nginx will fix the issue. It could also mean the app serving the website is broken.

Whatever the issue is, it’s something for the admin to fix.