Mara

u/mara@pawb.social
14 posts · 38 comments

Recent posts

Recent comments

I still reserve the right to be astounded. One of my beta readers said I needed to add a disclaimer that this talk is satire, so I went through a few rounds to make the warning right. I guess we didn't expect someone to get caught up in the title!

on Https on tailnet? · c/selfhosted · 4 pts · 2y

No prob! If you run into any problems, feel free to DM me or /u/tailscale@hachyderm.io. We're more than happy to help.

on Https on tailnet? · c/selfhosted · 5 pts · 2y

Note my bias as I work for Big VPN (Tailscale), but I don't think that teaching people to ignore security warnings is a good thing to do. The CA system is kind of a scam in general, but I think that at least in its current implementation it's better for us to encourage people are aware of those errors and what they mean.

As the sacred texts say: self-signed certificates beget the use of curl -k beget the use of self-signed certificates.

on Https on tailnet? · c/selfhosted · 13 pts · 2y

Tailscalar here. Use tailscale serve. It is a reverse proxy inside tailscaled. It will handle HTTPS certificates for you too. As an example, here's a sample HTTP server proxied to both my tailnet via tailscale serve and to the world with Funnel.

Also as far as I know you need to use Serve in order to use Funnel.

on *Permanently Deleted* · c/localllama · 2 pts · 2y

What would an ideal prompt for summarization look like with this model? I've tried a few summarization prompts but they haven't panned out into something consistent (MacBook Pro M2 Max, llama.cpp, q4_S). I know this is fundamentally more random technology, but it's not even coalescing into a consistently relevant output.

This is true with ARM in general. There's no "standard Linux" to boot because every board needs its own device tree and set of core kernel modules for detecting important things like local storage. It's fairly intractable due to how different the hardware is.

on Crane · c/photography · 1 pts · 2y

I absolutely love the vibes in this shot. Amazing work!

I personally shove Transmission into Docker:

services:
  wireguard:
    image: ghcr.io/linuxserver/wireguard
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Stockholm
    ports:
      - 9091:9091/tcp
    volumes:
      - ./config:/config
      - /lib/modules:/lib/modules
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=0
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped
  transmission:
    image: ghcr.io/linuxserver/transmission
    container_name: transmission
    ulimits:
      nofile: 1048576
    environment:
      - PUID=1000
      - PGID=996
      - TZ=Europe/Stockholm
      - USER=azurediamond
      - PASS=hunter2
    volumes:
      - ./config:/config
      - /data:/data
      - /data/Torrents/dl:/downloads
      - /data/Torrents/inbox/start:/watch
    network_mode: "service:wireguard"
    depends_on: [ "wireguard" ]
    restart: unless-stopped

Make sure your mullvad config is called wg0.conf in ./config.

Generally when you download files over torrent through your ISP, you end up getting love letters from rightsholders. I personally use a homelab NAS as my seedbox and for my public tracker stuff (as well as anime downloads over XDCC) I use Mullvad. I don't seed overly much on public trackers because of it, but my ratio on private trackers is sky high because ISPs won't send love letters for private trackers.