One way is to run Pi-hole’s admin interface on a different port. That’s configured in:

/etc/lighttpd/external.conf

Set:

server.port := 8000

Then your URL is http://IP:8000/admin

I worked out this was odd behavior on my OPNSense firewall NAT rules.

For some reason some syncing worked (eg. beehaw.org) but new connections failed. I'm not sure why. Maybe established sessions were kept alive.

Those rules haven't changed in months and months, so I'll chalk that up to "weirdness".

Yeah, I’ve tried that a couple of times too.

And run through all the federation troubleshooting steps in the docs.

I thought that, and in the past I’ve been off for a day or two and always caught up.

This time I haven’t and it’s been a week or two since coming back online.

This is more complex than you'd think because the USB spec has changed many times over the years, with updates in the connectors used, along with other sub-category changes to cables too. So there's USB versions 1, 2, 3, and 4 (and sub-versions too), along with different types of connector, eg. USB-A comes in regular and V3 (blue inside), and USB-C which is the later. Newer specs can transfer much larger amounts of data. Power Delivery (PD) is another sub-set of specification, which currently allows up to 240W of power with USB4, that's a lot, enough to charge multiple laptops at once, vastly more then the 2.5W allowed for USB 3. For more confusion there is also USB Power Delivery Programmable Power Supply, which is a sub-set to help devices negotiate charging speeds.

Another challenge - USB-C connectors can also support Thunderbolt, which gives it a whole other set of capabilities. This depends on both the cable and the port.

This explains that mess that is USB-C: https://www.androidauthority.com/state-of-usb-c-870996/

Key part:

The latest USB data speed protocols are split into several standards. There are legacy USB 1.0 and 2.0, USB 3.0, USB 3.1, USB 3.2, and the latest USB 4.0, all of which can be supported over USB-C. Confusing enough, but these have since been revised and updated to include various sub-standards, which have encompassed USB 3.1 Gen 1, USB 3.1 Gen 2, and USB 3.2 Gen 2, along with the more recent USB 3.2 Gen 1×1, USB 3.2 Gen 1×2, and USB 3.2 Gen 2×2 revisions. Good luck deciphering the differences without a handbook. Hopefully, the graph below helps.

You'd hope USB4 fixes it, but no. USB4 already boasts Gen 2×1, Gen 2×2, Gen 3×1, Gen 3×2, and Gen 4 variations, with data speeds ranging from 10 to 80 Gbps.

Cable lengths can also have an impact. The spec only allows for a specific length after which you need active cables, which include chips in them to strengthen the signal.

Several years ago a Google engineer started buying USB-C cables from Amazon and reviewing them in a lot of detail: https://www.amazon.com/gp/profile/amzn1.account.AFLICGQRF6BRJGH2RRD4VGMB47ZA

If you read some you'll see there are plenty of manufacturers who just don't even stick by the rules, so it's not always clear what you'll actually get. It doesn't help either that some products also don't play by the rules and have custom sockets that need specific vendor cables. I've had keyboards, for example, that only work with their specific vendor cables, not general USB-C ones.

This means you need to stick to a reputable set of brands, or the cables that came with the product. Decide if you need to charge something serious with it - eg. laptop, vs just a phone, watch, or small device, or whether you need data connectivity.

As another poster mentioned, just buy Anker, they're well made come with a reputable warranty, and aren't actually that expensive. Don't buy the cables you find by the supermarket/CVS checkout, or some ultra-cheap site. They might work, they might not.

Oh, and the Google engineer had his laptop fried by bad cables: https://www.engadget.com/2016-02-03-benson-leung-chromebook-pixel-usb-type-c-test.html

There's always a way: https://www.youtube.com/watch?v=VhYEOG9LOIk

Last time my dishwasher died I just had to take it had and clean the pump underneath. Basically the connections apart under and had to just scrub them out. One tiny bit of plastic was gumming it up, causing some checks to fail. Stopped it running.

They’re surprisingly simple machines.

For Samsung I always buy the extended warranty. For our washer and dryer Assurion must have spent a fortune keeping them running. A lot more than I ever did to guy them. They’re only 8 years old too. It’s sad, but for Samsung they work nicely but fail frequently,

For your next one but Bosche. They’re all good, get a base model and it’ll clean well and reliably.

I saw that, but then you don’t get their client, which looked nice.

Given this is !privacy and the advertise as front page features both “works will all your messaging apps” and “end to end encryption”, it seems important to flag currently those aren’t mutually compatible.

It’s not their fault the apps don’t have e2e APIs, it’s a tough problem, but the secrecy and privacy guarantee is just “trust us to stick to our policy”. And they’re a start-up, tooling isn’t perfect (or even exist), mistakes happen, etc

Their self-hosting looks interesting, but then it said to use your own clients too, which took the fun out of that.

“For example, if you send a message from Beeper to a friend on WhatsApp, the message is encrypted on your Beeper client, sent to the Beeper web service, which decrypts and re-encrypts the message with WhatsApp's proprietary encryption protocol.”

So, not really end to end for most common use-cases.

I don’t think it’s about lemmy.

https://www.militarytimes.com/news/your-military/2023/07/17/sensitive-us-military-info-exposed-in-accidental-emails-to-mali/

curl ifconfig.io works too

Thanks, hopefully it'll be useful to someone.

Happy to answer questions too.

Should have used https://github.com/Swordfish90/cool-retro-term instead of gterm for the real flickery tiny terminal experience

Depends a lot on your existing reverse proxy.

You can read the nginx config that the defaults include and it’s some basic rules to route incoming requests to either lemmy or lemmy-ui. If your existing reverse proxy is nginx you could just incorporate the rules in there.

It also depends on why you need it behind the existing proxy, and how you’ll choose to route your traffic, and where you traffic is coming from in general.

I’d start with taking a look at the default nginx config to see if you can move those rules to your existing reverse proxy, or just forward everything coming in that’s for lemmy straight to the lemmy reverse proxy, although that might be more complicated in correctly preserving the incoming requests.

Many years ago working for a monitoring software company someone had found a bug in the uptime monitoring rules where they reset after a year.

It was patched and I upgraded one client and their whole Solaris plant immediately went red and alerted. They told me to double it to two years and some stuff was still alerting.

They just said they’d try to get around to rebooting it, but it was all stable.

Everywhere else I’ve worked enforces regular reboots.

If you want a reliable provider try Fastmail. Used them for years, very rare outages. I have my local postfix set to relay to them for locally sent mail. Great web UI.

Needs the www:

https://www.castleholic.com/2020/01/the-wittelsbacher-ausgleichsfonds-or.html?m=1

I really don’t like the “but otherwise we’d need a warrant” approach.

Yes, of course you should need a warrant. That’s the bit that’s the safeguard and actually is the checks and balance against abuse. It’s not a problem to be optimized away.

Traditional lox is just brined in salt, no smoking.

Gravadlax is brined in salt and sugar with spices.

Smoked salmon is just smoked salmon, like nova, in the US.

Due to customer preference and lack of knowledge, most want smoked salmon when they ask for lox, so are sold lox.

See: https://forward.com/news/7669/the-raw-truth-about-lox/

I’ve done this for years, but also:

• anything automated goes straight to specific folders for those categories. Very quickly identify stuff that’s noise and put in rules to move it out of your inbox. Sure some stuff you might need, but anything that’s corporate spam needs automating away.
• use (and create if necessary) the right mail groups so your whole team, project partners, whoever see the right emails and ask people to use them.
• add a VIP rule to highlight emails from the boss, VP, anyone you know you want to read right away
• be clear with people on how to reach you. If you prefer Slack for immediate stuff, tell people. It’s fine to be clear that email is for less immediate consumption, or non-conversational stuff. Slack is far better for collab.

Most towers will fit 4 drives.

If you’re out of SATA ports or M2s you can buy PCI adapters.

If you’re buying SSDs they’re small and don’t care about orientation, can but plugged into the cables and stuffed anywhere in the case that doesn’t impede airflow.

Where do you want your drives? What sort of drives? I’ve also found it more performant to stuff them in the case and 4 drives isn’t a stretch unless you’re also running a ton in the target server.

Fastmail.

But, it’s not the cheapest. $5 a month gets what you need though.

Really quick WebUI, great features, including hosting your own domains and smtp rewriting.

Very smart helpful support team.

Great for degoogling.

The major email providers will only handle email from know good and trusted IPs. If you’ve been hosting on the same IP for 15 years you’re trusted. If you started it last night your IP is still untrusted. It takes a long time to gain trust.

SendGrid has a good explanation here: https://sendgrid.com/resource/email-guide-ip-warm-up/

That’s cool. I’ve used crafty for years, but mainly because I outgrew my scripts to manage each server instance and my kids need instance responses to restarting servers. So I went looking for something Minecraft specific to give them restart and reset commands.

Moving to Caseta for lighting from the random mix of bulbs which never quite work was amazing. It's also much cheaper to put in one controllable switch than replace the 6 bulbs in the light fittings connected to the wall switch. Those bulbs always fail in weird and non-debuggable ways.

I use Crafty Controller (https://craftycontrol.com/) to manage the minecraft servers. It runs in a docker instance and gives you a nice web UI to manage each minecraft server. I use it to delegate control to my kids to create and manage servers as necessary.

Finally, if you're not using a config mgmt tool, I'd start looking, so you can make everything easily re-doable. Personally I'm using Ansible, but puppet, chef, salt, etc all work too. Ansible is easiest given it does need it's own infra. I like it so if something dies I can redeploy everything onto a different server.

I've had a lot of success with a QOTOM box from aliexpress.

They're little fanless boxes running basic intel Core chips, in a variety of configs.

I've run OPNSense and PFSense as routers (also doing wireguard, torrents, etc), as well as just standard Ubuntu server.

Very small and low power, and pretty cheap. They come in a variety of configs.

NetNewsWire with syncing through Feedly.

The Feedly web UI is decent, and NNW is great on Mac and iOS.

I use Feedly directly in the web UI primarily on Windows and Linux

It all stays in sync nicely.

I run ddclient on a local machine and it updates my Cloudflare DNS records if my IP changes.

OPNSense has it built in too, if you use it. So does PFSense, I think. Been a while, might be misremembering.

I’ve found Magnet to be great for snapping windows about the screen.

I suspect that's less a Docker issue, and more to do with the code itself. Any code that's synchonous or serial in nature (eg. including a lot of web-calls to remote resources like federated sites) is going to max out due to IO or network latency long before saturating CPU, and becomes a natural target for horizontal scaling.

I'd be surprised if that's a pure Docker thing vs just Lemmy code in general. But, I don't have sufficient hardware to test on to prove that out.

There are definitely a bunch of things I'm doing because I have them already setup for other services.

Getting HTTPS to work, for example, was pretty easy because I already have ACME running for my domains, so can just reference existing certs.

Similarly, I have the domain and DNS already running, so don't need to handle setting it up, or messing with the firewall or router for that piece.

But, happy to help if I can.

Thank you.

I'm very much just learning this afternoon both how to run and instance, and how to use it.

From the logs, I think what was happening is that a request would come in from a federated instance which basically says "Hi, I'm from server X, please can we do federate stuff", then the lemmy server tries to resolve the hostname X so it can say hi back. If DNS isn't working that message back fails and then the whole federation bit fails.

Adding DNS explicitly resolves that.

Googling docker and DNS shows this isn't just me, and I've run into this before.

If you're running different docker instances on different VMs, then unless you put them into a swarm explicitly, you need to allow each out to the local network and to talk to each other. You'd need to fix the firewalls and DNS on both because they won't share a docker network. AFAIK, anyway. I'm not a docker expert.