Why do podcasts have preroll ads now?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    IIRC they mentioned is next to impossible without actually processing the video and guessing when then ad stops on your client (since the ads will change per user, so it can't be done on a server for all users)

    1
  • Why do podcasts have preroll ads now?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    Yes, most podcasts are hosted outside of your podcast player and distributed via RSS (even if this is Spotify which already hosts music).
    So when a service has the podcast it means it lists the response from the RSS feed, but usually they just copy the text data, including the URL where the actual audio is stored.
    This audio is served by whatever other service the creator of the podcast uses, which means you're a free user to that service even if you pay for Spotify, which means the wonderful benefit of ads.

    And these are ads you can't block since they're included in the audio stream (yay! /s).
    Podverse (the player I use) mentions this as an issue when creating clips of the podcasts because they can't know how much the timestamp has been offset by those ads, so your clip probably only sounds good to you.

    13
  • Mexico’s First Female President Takes Office | A climate scientist and former mayor, Claudia Sheinbaum will be inaugurated on Tuesday as the first woman to lead the country.
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 90%

    As long as you mean a landslide win by a party lead by a guy who said a religious charm was better during the pandemic than any medication, vaccine or any countermeasure, a guy who said "women deserve to go to heaven" when asked if he's feminist, a guy who has said all the power should be concentrated in the government, not in independent entities, a guy who said eolic turbines make the landscape ugly, and who made two big investments in refineries during his administration... Yeah, it's a good thing to see the left-wing in the power.

    9
  • Mexico’s First Female President Takes Office | A climate scientist and former mayor, Claudia Sheinbaum will be inaugurated on Tuesday as the first woman to lead the country.
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    She IS AMLO's administration, there was no word from her before he said something about anything during her campaign.

    AMLO had said since the beginning of his term he was going to disappear from the public to his state after today, but earlier this year he said he would come back if the circumstances demanded it, and just last month I think he said he will stay around.

    I don't wish her luck, I wish México luck.

    25
  • Cloud storage/backup
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    I use rclone and duplicati depending on the needs of the backup.

    For long term I use duplicati, it has a GUI and you can upload it to several places (mines are spread between e2 and drive).
    You configure the backend, password for encryption, schedule, and version retention.

    rclone, with the crypt submodule, you use it to mount your backups as am external drive, so you need to manually handle the actual copy of the data into it, plus versioning and retention.

    4
  • Protests in Mexico as controversial judicial reform passed
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    No, it doesn't suit the needs of the country, it suits the needs of the political party of the president.

    Everyone with half a brain agrees this is bad and will make any judge bound by their promises in campaign (ha, more like the promises to their party and promoter) and allow any one to do the job of someone that should have good qualifications.

    5
  • Apps can now block sideloading more easily and force downloads through Google Play
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    Well, the issue will be developers of other apps would force us to re-google since any build of the app would be useless unless installed from the play store...

    64
  • PS5 Pro Equivalent Build?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    a console has better optimisation for lower price.

    Something else to have in mind, some times they're like a printer, the device is relatively cheap but you have to buy other stuff to actually have it working.

    In PC you can find several places to buy and download games (even when it feels like only one or two exist), in console you only have the manufacturer.
    In PC as long as you have internet you can play multiplayer, in console you have to subscribe to their online services.

    12
  • Caddy and forgejo
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    I can't give you the technical explanation, but it works.
    My Caddyfile only something like this

    @forgejo host forgejo.pe1uca
    handle @forgejo {
    	reverse_proxy :8000
    }
    

    and everything else has worked properly cloning via ssh with git@forgejo.pe1uca:pe1uca/my_repo.git

    My guess is git only needs the host to resolve the IP and then connects to the port directly.

    2
  • Let's discuss: Monster Hunter
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    One of my best friends introduced me to this series back in MH4U for the 3DS.
    As someone mentioned in other comment, these games are definitely not newbie friendly haha. I started it and left it after a few missions, I don't remember what rank I was, but definitely the starting village. Afterwards we finally got time to play and he mocked me since my character had less armor than his palico :D
    We played more often and he helped me reach higher ranks until G-rank.

    Each game has had a different kind of end game.
    For MH4U were the guild quests which were randomly generated, I loved this, it made the game not feel like a total grind, but it only made it feel like that, because it really was a grind to both get the correct quest and level it up to get the relics you wanted.

    The one I enjoyed the least was MHGen/MHGU because there's no end game loop, once you reach G-rank the game doesn't have anything else to offer, so you can just grind the same missions you already have. Of course this can be considered an end game loop since maxing your armor and weapons takes a long time (and IIRC some older fans mentioned this was ad-hoc with the theme of remembering old games since they where like that).

    For MHW were the investigations which felt a bit like MH4U guild questions but without the random map.
    The only downside of this game and the Iceborn expansion was the game as a service aspect, you could only access some quests on some days of the week, you had to connect to the internet to get them, and also one of the last bosses is tied to multiplayer, which if you have bad internet or only time for a single quest is impossible to properly finish.

    I've bought each game. Around 200 minimum in each one. IIRC 450+ in MH4U and around 500 in MHW (mostly because it's harder to pause in PS4). MHRise/Sunbreak

    MHRise is one of the most relaxing ones with the sunbreak expansion since you can take NCPs on all missions, they help a lot to de-aggro the monsters and enjoy the hunt.

    I was with some friends from work when the trailer for MHW released and we literally screamed when we realized it was an MH game haha.

    The only change they've made between games that I found really annoying was to the hunting horn. It was really fun to have to adapt your hunt to each horn's songs and keep track of what buffs were active and which ones you needed to re-apply (in reality you always rotated your songs over and over so you never ran out of your buffs).
    But in Rise each song now is X -> X, A -> A, and X+A -> X+A, there's no combinations.
    Every hunting horn only has 3 songs, previously some horns could have up to 5.
    When you play a song twice the buff applied goes up a level, well, in Rise they made it a single attack to play all your songs twice.
    It feels like they tried to simplify the weapon but two teams got in charge of providing ideas and they implemented both solutions, which made the weapon have no depth at all.
    Also, previously you felt like the super support playing hunting horn, each time you applied a buff a messages appeared showing the buff you applied. Yeah, it was kind of spammy, but it felt nice having a hunting horn on the hunt.
    In Rise they decided to only display a message the first time you apply the buff and that's it, so if you re-apply it there's nothing, even when you keep buffing your team. Ah, but if you use bow the arc shot does spam the buff message, so you feel less than a support than the bow :/

    Due to work I haven't followed all the news of MHWilds, but I'll definitely buy it.


    For the next posts my recommendations would be the series Sniper elite, Mario and Luigi, Pokemon mystery dungeon, and Disgaea.
    (Maybe also another theme of posts could be genre/mechanic, like tactics games or colony management in general)

    5
  • The two most upvoted comments on any Lemmy instance are on Feddit.dk, but you won't see them on your own instance
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 90%

    Ohhh! Now I understand!

    Yeah, then that's an issue on mastodon.
    I mentioned some time ago, the fact that mastodon and Lemmy use the same protocol is annoying, because the experiences are different, so it causes a lot of issues :/

    8
  • The two most upvoted comments on any Lemmy instance are on Feddit.dk, but you won't see them on your own instance
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    Unless lemmy devs have changed something since last year, this shouldn't be the case, there's a bug in there.

    All interactions are recived by the instance hosting the community, and that instance is responsible for broadcasting that interaction to each instance where a user subscribed to it is hosted.
    So, mastodon is only responsible for sending the upvote to feddit.dk and then feddit.dk to all other instances.

    10
  • So, I'm selfhosting immich, the issue is we tend to take a lot of pictures of the same scene/thing to later pick the best, and well, we can have 5~10 photos which are basically duplicates but not quite. Some duplicate finding programs put those images at 95% or more similarity. I'm wondering if there's any way, probably at file system level, for the same images to be compressed together. Maybe deduplication? Have any of you guys handled a similar situation?

    37
    29
    Let's Discuss: Persona
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    I've only played P5 and currently P5R.
    The RPG part is amazing, the story, combat, dungeon crawling, interactions, etc, and all the other comments people had already made.

    My only con for it would be the strictness of the schedule to do the story. Yeah, it's also an interesting part of the game which differs from other RPGs, but it's frustrating you might permanently lose something because you planned it a bit off or selected the wrong dialog option with a confidant so you don't have enough points which makes you have to spend an extra day with them to increase their rank.
    Either you follow a guide or you accept the idea of missing some parts of the history.

    And even then with a guide I think I might as well not experience everything since I won't go to visit some of the places to hang out with confidants, only the main ranks and that's it.

    Also, you can't focus on finishing a confidant because I think all of them have some requirement, or they are not available that day, so you need to do other stuff.
    For example, Yoshida is only available Sundays, Kawakami IIRC is also only the last days of the week, but not weekends and only during the evening.

    But I plan to also play P3 and P4 since the stories are so good.


    My recommendation for the next post would be series of Monster Hunter, Paper Mario, or Kingdom Rush.

    3
  • Company creates "solution" to address school "vaping incidents".
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    Well, seems they already had the vaping sensors implemented and they're just announcing the notifications implementation... How hard is to just build am android app that displays a list and a popup?

    19
  • What is your preferred API error response and why?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    but often lead developers to just display them in the frontend

    Oh boy I feel this one.
    My API is meant for scripting (i.e. it's for developers and the errors are for developers), but the UI team uses it and they just straight display the error from their HTTP request for none technical people which might also not get to know all the parameters actually needed for the request.
    And even when the error is in fact in my code, and I sent all the data I need to debug and replicate the error, the users can't tell me because the UI truncates the response, so the user only sees something like Error in pe1uca's API: {"error":"bad request","message":"Your request has an error, please check th... (truncated). So the message gets truncated and the link to the documentation is also never shown .-.

    7
  • If I have an account on Mastodon.Social, and another account on PieFed.Social are they technically on the same instance, since they're both on .Social?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 100%

    Think of a URL and its dots like folders in your drive where each can have different files in each of them even if they have the same name as another folder.
    They're just written in reverse order.
    (Also a whole lot of other differences and other technical details on how to actually make the site work, but for your question we can just keep at this)

    So, you have the social root folder (Top Level Domain) which contains many sub folders, one of them is mastodon and another is piefed.
    Each have their own files to render their UI and process the requests they receive, but they don't talk to each other, even when they might have some files and requests with the same name.
    The same way you have in your home folder your documents, pictures, videos, downloads, etc.
    And yeah, they can go even deeper, my lemmy instance is lemmy.pe1uca.dev, not just lemmy.world like for this community.
    I could have mastodon.pe1uca.dev if I'd like.

    4
  • Pressure mounts against judicial overhaul in Mexico amid market concerns and striking judges
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    pe1uca
    Now 66%

    This is one of the exceptions.
    This reform will make judges be able to be voted by the people, and all the world knows the implications of that in Mexico's elections.
    It also removes a lot of the requirements to the candidates.

    Currently there are cases of people trying to get judicial protection against laws the executive is pushing which the legislature blindly approved since they were put in there by the ruling party. Now imagine if that ruling party was also deep into the judicial system, the people wouldn't have anyone to turn to ask for help.

    And that's what investors are concerned about, investing in Mexico and losing everything because there's no one to stop what the president says.

    1
  • I was using `SQL_CALC_FOUND_ROWS` and `SELECT FOUND_ROWS();` But this has been deprecated https://dev.mysql.com/doc/refman/8.0/en/information-functions.html#function_found-rows The recommended way now is first to query with limit and then again without it selecting `count(*)`. My query is a bit complex and joins a couple of tables with a large number of records, which makes each select take up to 4 seconds, so my process now takes double the time compared to as I just keep using found rows. How can I go back to just running the select a single time and still getting the total number of rows found without the limit?

    10
    4

    cross-posted from: https://lemmy.pe1uca.dev/post/1512941 > I'm trying to configure some NFC tags to automatically open an app, which is easy, just have to type the package name. > But I'm wondering how I can launch the app in a specific activity. > > Specifically when I search for [FitoTrack](https://codeberg.org/jannis/FitoTrack) in my phone I get the option to launch the app directly into the workout I want to track, so I don't have to launch the app, click the FAB, click "Record workout" and then select the workout. > So I want to have a tag which will automatically launch this app into a specific workout. > > How can I know what's the data I need to put into the tag to do this? > > Probably looking at the code will give me the answer, but this won't apply to closed source apps, so is there a way to get all the ways all my installed apps can be launched?

    6
    1

    I'm trying to configure some NFC tags to automatically open an app, which is easy, just have to type the package name. But I'm wondering how I can launch the app in a specific activity. Specifically when I search for [FitoTrack](https://codeberg.org/jannis/FitoTrack) in my phone I get the option to launch the app directly into the workout I want to track, so I don't have to launch the app, click the FAB, click "Record workout" and then select the workout. So I want to have a tag which will automatically launch this app into a specific workout. How can I know what's the data I need to put into the tag to do this? Probably looking at the code will give me the answer, but this won't apply to closed source apps, so is there a way to get all the ways all my installed apps can be launched?

    20
    6

    I'm using https://github.com/rhasspy/piper mostly to create some audiobooks and read some posts/news, but the voices available are not always comfortable to listen to. Do you guys have any recommendation for a voice changer to process these audio files? Preferably it'll have a CLI so I can include it in my pipeline to process RSS feeds, but I don't mind having to work through an UI. Bonus points if it can process the audio streams.

    42
    9

    cross-posted from: https://lemmy.pe1uca.dev/post/1434359 > I was trying to debug an issue I have connecting to a NAS, so I was checking the logs of UFW and found out there are a lot of connections being blocked from my chromecast HD (AndroidTV) on different ports via the local IP. > > Sometimes I use jellyfin, but that's over tailscale, so there shouldn't be any traffic over local IP, just over tailscale's IP. > But shouldn't have traffic right now since I wasn't using it and didn't have tailscale on. > > The ports seem random, just sometimes they are tried two times back to back, but afterwards another random port is tried to be accessed. > > After seeing this I enabled UFW in my daily machine and the same type of logs showed up. > > So, do you guys know what could be happening here? > Why is chromecast trying to access random ports on devices in the same network?

    5
    1

    cross-posted from: https://lemmy.pe1uca.dev/post/1434359 > I was trying to debug an issue I have connecting to a NAS, so I was checking the logs of UFW and found out there are a lot of connections being blocked from my chromecast HD (AndroidTV) on different ports via the local IP. > > Sometimes I use jellyfin, but that's over tailscale, so there shouldn't be any traffic over local IP, just over tailscale's IP. > But shouldn't have traffic right now since I wasn't using it and didn't have tailscale on. > > The ports seem random, just sometimes they are tried two times back to back, but afterwards another random port is tried to be accessed. > > After seeing this I enabled UFW in my daily machine and the same type of logs showed up. > > So, do you guys know what could be happening here? > Why is chromecast trying to access random ports on devices in the same network?

    1
    0

    I was trying to debug an issue I have connecting to a NAS, so I was checking the logs of UFW and found out there are a lot of connections being blocked from my chromecast HD (AndroidTV) on different ports via the local IP. Sometimes I use jellyfin, but that's over tailscale, so there shouldn't be any traffic over local IP, just over tailscale's IP. But shouldn't have traffic right now since I wasn't using it and didn't have tailscale on. The ports seem random, just sometimes they are tried two times back to back, but afterwards another random port is tried to be accessed. After seeing this I enabled UFW in my daily machine and the same type of logs showed up. So, do you guys know what could be happening here? Why is chromecast trying to access random ports on devices in the same network?

    10
    3

    I've only used `ufw` and just now I had to run this command to fix an issue with docker. `sudo iptables -I INPUT -i docker0 -j ACCEPT` I don't know why I had to run this to make `curl` work. So, what did I exactly just do? This is behind my house router which already has reject input from wan, so I'm guessing it's fine, right? I'm asking since the image I'm running at home I was previously running it in a VPS which has a public IP and this makes me wonder if I have something open there without knowing :/ `ufw` is configured to deny all incoming, but I learnt docker by passes this if you configure the ports like `8080:8080` instead of `127.0.0.1:8080:8080`. And I confirmed it by accessing the ip and port.

    43
    10

    I mean, the price of the product is the same, I'm taking a loan for the duration of the credit but paying no interest? What's the catch? I can keep my money making a bit of interest instead of giving it right away and without increasing the price of what I was already planning to buy. When or why wouldn't I choose 0% credits?

    56
    25
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearDA
    datahoarder pe1uca Now 100%
    What are you average file sizes for movies and series?

    I'm looking at my library and I'm wondering if I should process some of it to reduce the size of some files. There are some movies in 720p that are 1.6~1.9GB each. And then there are some at the same resolution but are 2.5GB. I even have some in 1080p which are just 2GB. I only have two movies in 4k, one is 3.4GB and the other is 36.2GB (can't really tell the detail difference since I don't have 4k displays) And then there's an anime I have twice at the same resolution, one set of files are around 669~671MB, the other set 191 each (although in this the quality is kind of noticeable while playing them, as opposed to the other files I extract some frames) What would you do? what's your target size for movies and series? What bitrate do you go for in which codec? Not sure if it's kind of blasphemy in here talking about trying to compromise quality for size, hehe, but I don't know where to ask this. I was planning on using these settings in ffmpeg, what do you think? I tried it in an anime at 1080p, from 670MB to 570MB, and I wasn't able to tell the difference in quality extracting a frame form the input and the output. `ffmpeg -y -threads 4 -init_hw_device cuda=cu:0 -filter_hw_device cu -hwaccel cuda -i './01.mp4' -c:v h264_nvenc -preset:v p7 -profile:v main -level:v 4.0 -vf "hwupload_cuda,scale_cuda=format=yuv420p" -rc:v vbr -cq:v 26 -rc-lookahead:v 32 -b:v 0`

    22
    9

    cross-posted from: https://lemmy.pe1uca.dev/post/1137911 > I need to help auditing a project from another team. > I got the pointers on what's expected to be checked, but I don't have like templates for documents for what's expected from an audit report which also means I'm not sure what's the usual process to conduct an internal audit. > I mean I might as well read the whole repo, but maybe that's too much? > > Any help or pointers on what I need to investigate to get started would be great!

    17
    2

    I need to help auditing a project from another team. I got the pointers on what's expected to be checked, but I don't have like templates for documents for what's expected from an audit report which also means I'm not sure what's the usual process to conduct an internal audit. I mean I might as well read the whole repo, but maybe that's too much? Any help or pointers on what I need to investigate to get started would be great!

    39
    12

    I'm checking this mini pc https://www.acemagic.com/products/acemagic-ad08-intel-core-i9-11900h-mini-pc It says the M2 and SATA ports are limited to 2TB, but I can't imagine why that's the case. Could there be a limit on the motherboard? On the CPU? If most likely this is done in software (windows) probably it won't matter since I'm planning to switch to linux. What I want to avoid is buying it and being unable to use an 8TB drive.

    12
    3

    I started tinkering with [frigate](https://github.com/blakeblackshear/frigate) and saw the option to use a coral ai device to process the video feeds for object recognition. So, I started checking a bit more what else could be done with the device, and everything listed in the site is related to human recognition (poses, faces, parts) or voice recognition. In some part I read stable diffusion or LLMs are not an option since they require a lot of ram which these kind of devices lack. What other good/interesting uses can these devices have? What are some of your deployed services using these devices for?

    35
    7

    I have a few servers running some services using a custom domain I bought some time ago. Each server has its own instance of caddy to handle a reverse proxy. Only one of those servers can actually do the DNS challenge to generate the certificates, so I was manually copying the certificates to each other caddy instance that needed them and using the `tls` directive for that domain to read the files. Just found there are two ways to automate this: [shared storage](https://caddyserver.com/docs/json/storage/), and [on demand certificates](https://caddyserver.com/docs/caddyfile/options#on-demand-tls). So here's what I did to make it work with each one, hope someone finds it useful. # Shared storage This one is in theory straight forward, you just mount a folder which all caddy instances will use. I went through the route of using sshfs, so I created a user and added acls to allow the local caddy user and the new remote user to write the storage. ``` setfacl -Rdm u:caddy:rwx,d:u:caddy:rwX,o:--- ./ setfacl -Rdm u:remote_user:rwx,d:u:remote_user:rwX,o:--- ./ setfacl -Rm u:remote_user:rwx,d:u:remote_user:rwX,o:--- ./ ``` Then on the server which will use the data I just mounted it ``` remote_user@<main_caddy_host>:/path/to/caddy/storage /path/to/local/storage fuse.sshfs noauto,x-systemd.automount,_netdev,reconnect,identityfile=/home/remote_user/.ssh/id_ed25519,allow_other,default_permissions,uid=caddy,gid=caddy 0 0 ``` And included the mount as the caddy storage ``` { storage file_system /path/to/local/storage } ``` # On demand This one requires a separate service since caddy can't properly serve the file needed to the [get_certificate directive](https://caddyserver.com/docs/caddyfile/directives/tls#http) We could run a service which reads the key and crt files and combines them directly from the main caddy instance, but I went to serve the files and combine them in the server which needs them. So, in my main caddy instance I have this: I restrict the access by my tailscale IP, and include the `/ask` endpoint required by the on demand configuration. ``` @certificate host cert.localhost handle @certificate { @blocked not remote_ip <requester_ip> respond @blocked "Denied" 403 @ask { path /ask* query domain=my.domain domain=jellyfin.my.domain } respond @ask "" 200 @askDenied `path('/ask*')` respond @askDenied "" 404 root * /path/to/certs @crt { path /cert.crt } handle @crt { rewrite * /wildcard_.my.domain.crt file_server } @key { path /cert.key } handle @key { rewrite * /wildcard_.my.domain.key file_server } } ``` Then on the server which will use the certs I run a service for caddy to make the http request. This also includes another way to handle the `/ask` endpoint since wildcard certificates are not handled with `*`, caddy actually asks for each subdomain individually and the example above can't handle wildcard like `domain=*.my.domain`. ```go package main import ( "io" "net/http" "strings" "github.com/labstack/echo/v4" ) func main() { e := echo.New() e.GET("/ask", func(c echo.Context) error { if domain := c.QueryParam("domain"); strings.HasSuffix(domain, "my.domain") { return c.String(http.StatusOK, domain) } return c.String(http.StatusNotFound, "") }) e.GET("/cert.pem", func(c echo.Context) error { crtResponse, err := http.Get("https://cert.localhost/cert.crt") if err != nil { return c.String(http.StatusInternalServerError, "") } crtBody, err := io.ReadAll(crtResponse.Body) if err != nil { return c.String(http.StatusInternalServerError, "") } defer crtResponse.Body.Close() keyResponse, err := http.Get("https://cert.localhost/cert.key") if err != nil { return c.String(http.StatusInternalServerError, "") } keyBody, err := io.ReadAll(keyResponse.Body) if err != nil { return c.String(http.StatusInternalServerError, "") } return c.String(http.StatusOK, string(crtBody)+string(keyBody)) }) e.Logger.Fatal(e.Start(":1323")) } ``` And in the CaddyFile request the certificate to this service ``` { on_demand_tls { ask http://localhost:1323/ask } } *.my.domain { tls { get_certificate http http://localhost:1323/cert.pem } } ```

    16
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearDA
    datahoarder pe1uca Now 87%
    SSD hides contents after a few days

    Seems the SSD sometimes heats up and the content disappears from the device, mostly from my router, sometimes from my laptop. Do you know what I should configure to put the drive to sleep or something similar to reduce the heat? I'm starting up my datahoarder journey now that I replaced my internal nvme SSD. It's just a 500GB one which I attached to my d-link router running openwrt. I configured it with samba and everything worked fine when I finished the setup. I just have some media files in there, so I read the data from jellyfin. After a few days the content disappears, it's not a connection problem from the shared drive, since I ssh into the router and the files aren't shown. I need to physically remove the drive and connect it again. When I do this I notice the somewhat hot. Not scalding, just hot. I also tried this connecting it directly to my laptop running ubuntu. In there the drive sometimes remains cool and the data shows up without issue after days. But sometimes it also heats up and the data disappears (this was even when the data was not being used, i.e. I didn't configure jellyfin to read from the drive) I'm not sure how I can be sure to let the ssd sleep for periods of time or to throttle it so it can cool off. Any suggestion?

    12
    4

    I started fiddling with my alias service and started wondering what approach other people might take. Not necessarily the best option but what do you prefer? What are the pros and cons you see with each option? Currently I'm using anonaddy and proton, so I have a few options to create aliases. - The limited shared domain aliases (from my current subscription level) Probably the only option to not be tracked if it would be unlimited, I'd just have to pay more for the service. - Unlimited aliases with a subdomain of the shared domain For example: baked6863.addy.io - Unlimited aliases with custom domain. - Unlimited aliases with subdomain in custom domain. This is different from the one above since the domain could be used for different things, not dedicated to email. - Catch-all with addy. The downside I've read is people could spam any random word, and if then disabled the people that had an incorrect alias wouldn't be able to communicate anymore. - Catch-all with proton. Since proton has a limit on how many email addresses you actually have, so when you receive an email to an alias and want to replay to it you'll be doing it from the catch-all address instead of the alias. What do you think? What option would you choose?

    6
    2

    I started delving into world and dungeon generation with different techniques. The one I want to try is wave function collapse. There are several videos and repos explaining and showcasing how it works and how it can be used to generate an infinite world. One question I have and haven't seen any mention about is, how do I recreate/reload the map from any point other than the original starting one? So, AFAIK the algorithm start from a few tiles/pixels in a starting position, or picking their position at random, and then can collapse the rest of the map with the set of rules given to the building blocks, but if these starting tiles/pixels are far away after a player saves, then I can only think about having to start from them again to reach the saved point to be able to show the same world which of course could mean a very long loading screen. Maybe the save can include the current seed, but then it can advance differently when the player goes back, which means the algorithm would generate a different portion of the map. How can I ensure the world would be regenerated as it was? While writing this I'm thinking I could be generating the seed of a block of tiles/pixels based on the seed of neighboring blocks and the coordinates in the map, something like left: seed+X, right: seed-Y, where X and Y are calculated based on the coordinate of the block. This way I can save the seed of the current block and easily recalculate the seed used to generate all the adjacent blocks. What do you think about this approach?

    2
    0

    I have an old android tablet (and several phones) that I want to use for small applications in my home automation. For the most part just to show a web page to quickly click something to activate or read the status. My issue is the OS installed is very old and of course there are no official updates. Looking for custom roms they are also somewhat old because the age of the devices, and everyone says "don't use the rom of one device into another even if the models are very similar". So, my question is, what are my options if I can't use a pre-built rom? Could I keep the same OS and just restrict access to only my internal network? Not sure if I'm being too paranoid about security risks using these devices to just connect to my services.

    12
    2
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPE
    Now
    58 404

    pe1uca

    lemmy.pe1uca.dev