🇨🇦

  • 9 Posts
  • 281 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle
  • Major version changes for any software from the OS right down to a simple notepad app should update as sequentially as possible (11>12>13>etc). Skipping over versions is just asking for trouble, as it’s rarely tested throughly.

    It might work, but why risk it.

    An example: if 12 makes a big database change but you skip over that version, 13 may not recognize the databases left by 11 because 12 had the code to recognize and reformat the old database while that code was seen as unnecessary and removed from 13.

    Stuff like this is also why you can’t always revert to an older version while keeping the data/databases from the newer software.












  • And everyone is just like “that’s totally something they would do! Lol”… What?

    Keep in mind pretty much everyone on this platform already hates Tesla and does not nor would they own a Tesla vehicle. There’s also a certain ‘you got what you deserve by buying that’ kind of attitude towards Tesla owners.

    This is behaviour we expect from this shit company and it doesn’t directly effect any of us commenting on it. We just get to point and laugh (for now).

    The discussion might be a little different if it was a less expected brand like IKD, Audi. But who’s to say for sure; there’s been a lot of ‘cattle’ behaviour lately.










  • An $11/yr domain pointed at my IP. Port 443 is open to nginx, which proxies to the desired service depending on subdomain. (and explicitly drops any connection that uses my raw ip or an unrecognized name to connect, without responding at all)

    ACME.sh automatically refreshes my free ssl certificate every ~2months via DNS-01 verification and letsencrypt.

    And finally, I’ve got a dynamic IP, so DDClient keeps my domain pointed at the correct IP when/if it changes.


    There’s also pihole on the local network, replacing the WAN IP from external DNS, with the servers local IP, for LAN devices to use. But that’s very much optional, especially if your router performs NAT Hairpinning.

    This setup covers all ~24 of the services/web applications I host, though most other services have some additional configuration to make them only accessible from LAN/VPN despite using the same ports and nginx service. I can go into that if there’s interest.

    Only Emby/Jellyfin, Ombi, and Filebrowser are made accessible from WAN; so I can easily share those with friends/family without having to guide them through/restrict them to a vpn connection.