This functionality is built-in to bitwarden, they can safely check your entire vault for known breaches

Greatly depends on the question being asked. Some questions actually talking to someone would like to yield better information but there are a lot of subjects where I’m going to get vastly better information from Google.

It’s because people lack the ability to subjectively look at all possible aspects of life. They latch on to one thing that’s better and say that means the entire country is better. For example China objectively has better public transportation and infrastructure around things like internet and cellular despite also being an absolutely massive land mass. Pretty much anywhere has objectively better health care than the USA. So if those things have been causing them grief lately in their life they are going to latch on to that and declare that the country that has the better that is better in general even if there are other aspects not related to those subjects that would ultimately make life much worse

Literally always have my volume at maximum have never seen this particular screen. Sometimes I’ve seen just the basic toast notification that they don’t recommend raising the volume more but I can just keep pressing the button to raise it anyway i’ve never seen a full last screen going about a limit

Because propaganda has convinced people that a car is useless if it can’t go 300+mi AND only take a few minutes to be ready to do it again. Range anxiety, even though they only fill up maybe once a week and could easily charge an ev at home with just a standard outlet not even a special charger and keep up with their actual real daily use

Oh yeah definitely, fun fact you can easily get two smarts comfortably into a standard US parking spot I have a friend that also has a smart and when we go somewhere together we will use a single parking spot because it’s funny

I have one of these cars (in the US no less) and i absolutely do that sometimes. No tickets yet

Was surprised to see this here. But yes absolutely, they are expensive don’t get me wrong. But they are worth it. Their shit just works, i have their washer and heat pump dryer, dishwasher, and CX1 canister vacuum. Each are the best version of that thing I’ve ever used. Dishwasher will clean anything no rinse/soak needed even for baked on pasta or cheese, vacuum is powerful but also shockingly quiet, dryer sips power (700w avg load) but dries everything just fine.

Had em for the years now, i am NOT gentle with the vacuum i drag it outside to clean the car and other various things it’s not really for, toss it around use it as a footstool sometimes and it shows no signs of the wear. You get what you pay for with them

Eh, i just use pubkey only Auth config (so password entirely disabled as an option) and put ssh on a non standard port to reduce script kid noise. (and no 2222 is not non-standard it may as well be the default)

Fail2ban triggers false too often for my taste in a high traffic environment.

If you ran nginx as a non privileged user it wouldn’t be able to bind to 80/443 as those are privileged ports. So you would need to use iptables to forward them to an unprivlaged port

I mean it WOULD work you would just need a von on every device you wanted to use.

The REAL answer is never host them DIRECTLY, always use a reverse proxy like nginx. Many projects (i believe jellyfin is one of them) explicitly recommend this for better security. Which it looks like you did so congrats

For extra bonus points you can setup nginx to run as a non privileged user and use iptables to forward the lower ports (80/443). A pain but closes out a large chunk of nginx as a risk.

I wonder if a high flow rate hepa filter right above the toilet would help lol

That was part of the test, there was essentially no difference. The particles that can become airborne are small Enough they floating around everywhere regardless of how they get out. The real problem is how huge the gap is between the seat and rim. Needs a rubber skirt or something

https://spartanhost.org/ owner is super chill will make custom spec deployments and they actually have a really nice management panels with nice easy custom iso support

One end is a local VPS with insanely good peering pretty much round the damn world, other end is my opnsense router. I actually pass a block of ipv6 through the vpn and my router hands it out to devices which is a nice little bonus

That sounds like a lack of port forwarding on at least one side. Ensure the vpn port is properly open on both sides. There is also an option you can add to the wireguard config for keepalive set it to something like 1min

I feel like im missing something here. This is pretty trivial and the comments i see are over complicating the hell outta everything. All you need is your VPN tunnel working. Personally i use wireguard for this. Then you just use nginx as the reverse proxy it talks to services on the other side of the VPN.

The nginx server config looks like

server { listen 443 quic; listen [::]:443 quic; listen 443 ssl; listen [::]:443 ssl; server_name my.domain.tld; http2 on; http3 on; quic_gso on; tcp_nodelay on; error_log /var/log/nginx/jellyfin.access.log; ssl_certificate /path/to/ssl/fullchain.pem; ssl_certificate_key /path/to/ssl/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; add_header Alt-Svc ‘h3=“:$server_port”; ma=86400’; add_header x-quic ‘h3’; add_header Alt-Svc ‘h3-29=“:$server_port”’;

location / {
    proxy_pass http://10.159.4.12:8096/;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forward-Proto http;
    proxy_set_header X-Nginx-Proxy true;
}

}

I have no idea how to do the proper code block i guess so have a paste from my reverse proxy hosted pastebin lol https://paste.kitsuna.net/upload/snail-seal-pig

Yup, i paid my $1,000 for my index and it was the best purchase I ever made love that thing. I’m definitely getting a steam frame as well not because I don’t love my index anymore but it would be nice to have something that is a little more flexible with the space.

There’s nobody for me to join, the only family that are not horrible manipulative monsters are beyond my means of travel, currently it’s just me and the dog so there’s really no point in making an elaborate dinner for myself. So today is just me being bored and alone till friends become available again.

I don’t not celebrate it because Christian or whatever. I don’t celebrate it because there’s nobody to celebrate it with

It just creates unnecessary complication. It’s not particularly memorable, it’s a pain to even just lookup tye syntax imo compared with v4, and I genuinely do not see the benefit at the home level to getting rid of NAT. Carrier and backhaul? Oh yeah nat is a fucking plague. But home level? Literally causes no issues it’s trivial to work with, 98% of people do not need ports forwarded ever. Those that do it’s not hard. IPV6 necessitates more careful control of a firewall now that every device is globally reachable and means that it won’t even make opening a service any easier. It’s just firewall instead of NAT forward which on most routers will more or less be the same process

6to4 exists and could handle translation of the backhaul 6 to a local 4. Only the router itself need be directly addressable imo.