That would be ‘nft list ruleset’

I want something with a permission model that works the same when accessed over a network share (SMB, ideally NFS) and access over a web interface. Ideally it would have a Mac File Provider sync client and whatever the Windows equivalent is called as well.

Nextcloud is fine but it’s not that.

Oh my god, this seems really good and closer to what I want than anything yet. Been looking for something to replace Nextcloud and found nothing good so I might take a look at this.

Thanks! I’ll take a closer look at both then and see which I like better.

I am running a Matrix homeserver right now and yeah it’s definitely a mess.

Since you’ve used both, how do ejabberd and prosody compare to another? I was going to go with the former.

I haven’t tried TrueNAS, but I use NixOS for my NAS and my other servers. It’s perfect for servers imo since it’s essentially a Linux system builder that you can customize to add whatever you want to your system.

The downside is that you’ll have to learn a weird functional programming language, especially when you get into writing service modules yourself (for services that don’t have an upstream module). And it’ll take some time to get familiar with it and learn how to effectively write your configuration.

To boot from external drives, you need to open your UEFI boot menu (press F11 or something like that at boot, it differs for each manufacturer). Limine is the loader installed on your hard drive that comes with your OS, it is for loading that OS.

Do you mean the USB doesn’t show up in the UEFI boot menu?

Are you trying to boot an ISO that uses limine as the bootloader with ventoy?

Yeah using it for quick tapping something on the screen I can see being faster than the touchpad. I don’t know if it’s worth the fingerprints on the display though personally :^)

I also don’t like Apple’s insistence on telling me what I do and do not want in a product. According to Steve Jobs no one wants a touchscreen on their laptop

Anecdotally, I had a touchscreen convertible laptop before my current MacBook. I even got the pencil for it that let me draw on the screen, which I wanted to use for taking notes. The pencil sucked in practice (this was a >1000€ laptop, not much less expensive than my MacBook! maybe that’s just what I get for buying HP though.) and sooner rather than later I got an iPad for taking handwritten notes, and the touchscreen itself turned out to be a gimmick that I used in the beginning but eventually turned off.

Sometimes, they’re right. For example, kind of the reverse: people wanted floating windows on the iPad for years. I always said this would be incredibly awful to use in practice without a mouse. Now they added windows on the iPadOS 26 beta and I tested it and it was exactly as finicky as I expected it to be. Hopefully they’ll still polish it so that it’s at least as good to use as the old side-by-side view (which they unfortunately removed), but this really isn’t it right now.

People might want a device with all the input methods and the most versatile multitasking, but I don’t think this is reasonably doable in a way that’s as polished as devices built with a main input method and UI purpose-built for that input method. In the past I might have said that Apple are the only people that could do this correctly, and only by investing a significant amount of resources, but after the iPadOS 26 situation… oof.

Ah, so they are actually differences between IPP Everywhere and AirPrint (apart from AirPrint including the whole autodiscovery stuff)? Good to know. The latter is usually more prominently advertised though which is why that’s the one I mentioned.

But yeah, it should be very common for these to be supported with anything remotely recent.

Anything that supports AirPrint (this one does from what it looks like) will work with CUPS driverless printing on Linux.

I don’t have any secrets in my config or a private key or anything and I’m currently running 4 servers from the same config (it used to be 8 or even more machines at some point even, including desktops).

But yes, it’s a multi-file config, it would be absolutely crazy to not split it up with how large it is.

The database store is in /var/lib/postgres. You can just connect that disk somewhere else and start the database using the same (important!) major release of Postgres. I think the major version number is in the folder name. Then do whatever from there.

Very good post :)

I just about lost it at everything in this paragraph

The door creaked open. Guido van Rossum looked like the typical output of GNU Autotools. He introduced me to the only other survivor: Special DevOps Mikhail Molotov. “We lost Travis. We lost Jenkins…” Molotov lamented.

Gentoo can do this with Portage sets. They’re essentially a more simple way of creating a meta package which just installs other packages. And you can also write config packages which installs configuration for other packages.

Yes, you can just use a reverse proxy for IPv4 only and point it to the IPv6 upstream. That is what I do, with a separate DNS record which then combines the two. See the DNS records for id.knifepoint.net (CNAME), http.vineta.knifepoint.net (AAAA, A) and vineta.knifepoint.net (AAAA).

The reverse proxy config and certificate management is set up with NixOS, if it helps: https://git.dblsaiko.net/systems/tree/nixos/defaults/v4proxy.nix https://git.dblsaiko.net/systems/tree/nixos/modules/sys2x/v4proxy.nix

Two different rDNS names, for stuff that uses it. For example if you want to run mail and an IRC bouncer under different domain names.

Yeah, that’s fair. When verified beforehand, and what it discovered is an actual issue, why not. It does overwhelmingly attract people who have no idea what they’re doing and then submit bogus reports because it looks good to them though.