mholt

23 ms·

1. 361.▲
   by mholt 3y ago

   These are fun to make. I've done it several times. :) That is why I wrote Caddy: $ caddy file-server It does templates, TLS, and other production things really easily from the command line too, including automatically getting
2. 362.▲
   by mholt 3y ago

   Why are these flashes definitely not transformer stations or similar? Seems like an obvious answer from my armchair at least. Earthquake wave travels from epicenter to camera, and on its way it shorts out power infrastructure.
3. 363.▲
   by mholt 3y ago

   That is pretty impressive, I'll admit. :)
4. 364.▲
   by mholt 3y ago

   I'm a little wary of copying things from acme.sh after I discovered a 0-day RCE in it. Could you open an issue to discuss your requirements? We'll take a look at solutions.
5. 365.▲
   by mholt 3y ago

   Which is exactly the audience we were targeting. I thought it was a good idea at the time. ¯\_(ツ)_/¯
6. 366.▲
   by mholt 3y ago

   True, you can definitely turn HTTPS off explicitly.
7. 367.▲
   by mholt 3y ago

   That's because Francis, Mohammed, Matthew, and our other helpers are awesome . They are volunteers and do it because they like to help and find the project interesting. Thanks for being a part of the community
8. 368.▲
   by mholt 3y ago

   Makes sense -- I will often go for what I'm familiar with, too. Aside from creating CertMagic, I think CertMagic has a few benefits over autocert. It is designed to scale to thousands of certificates. It will staple OCSP for you automa
9. 369.▲
   by mholt 3y ago

   FusionAuth is awesome :D Thank you for your sponsorship!!
10. 370.▲
    by mholt 3y ago

    Just curious, why use autocert instead of CertMagic?
11. 371.▲
    by mholt 3y ago

    It's not impossible to turn off. NGINX does this too, but you have to recompile NGINX to disable that header. With Caddy, you just need: header -Server in your config.
12. 372.▲
    by mholt 3y ago

    We don't enable compression by default because we leave it up to the site owner to decide whether to optimize for network efficiency or CPU efficiency. (Also, disabling implicit things is more tedious and confusing than enabling things
13. 373.▲
    by mholt 3y ago

    Yeah! Henrique Dias did great work with it. He should be very proud of his project.
14. 374.▲
    by mholt 3y ago

    We mitigate both DNS rebinding and cross-origin in the admin endpoint by verifying Host and Origin headers -- by default.
15. 375.▲
    by mholt 3y ago

    For that you can even just use the command line without a file: $ caddy reverse-proxy --from :2080 --to :9000
16. 376.▲
    by mholt 3y ago

    > if you provide an IP:port instead of a hostname That still gets served over HTTPS. The only time HTTPS isn't used is if a host portion is missing entirely (IP or name).
17. 377.▲
    by mholt 3y ago

    I'm happy to hear this -- we work hard on our auto-HTTPS features!
18. 378.▲
    by mholt 3y ago

    Thanks for your feedback! I'd love to capture a profile next time you have a chance. We've been primarily focused on features until just about 6 months ago, so we have started making significant optimizations only recently.
19. 379.▲
    by mholt 3y ago

    It's very good. In some cases better. For example Caddy can handle tens of thousands of certs without problem whereas nginx + Certbot would choke. The difference is negligible to most people.
20. 380.▲
    by mholt 3y ago

    I'm guessing the code to read the zip file is server-side, but I guess JS could do it too.
21. 381.▲
    by mholt 3y ago

    > Unlike many frameworks, Astro uses standard HTML <a> elements to navigate between pages (also called routes), with traditional page refreshes. I love it. Truly amazing that this is the exception these days.
22. 382.▲
    by mholt 3y ago

    Huh? View Transitions are an entirely new API supported only by Chrome currently. (And Edge, which is a flavor of Chrome.)
23. 383.▲
    by mholt 3y ago

    Timelinize is still in alpha (under heavy development) so you can follow on Twitter: https://twitter.com/timelinize -- I'm still working on a landing page, been too busy with the actual app. If you want to try the deve
24. 384.▲
    by mholt 3y ago

    Re: Timeliner (I'm the author), I'm currently building the successor to it, Timelinize. It's in private alpha preview currently, and still under active development. In Timelinize, I'm focusing on importing Takeout archiv
25. 385.▲
    by mholt 3y ago

    FSD wasn't released until the year after these crashes.
26. 386.▲
    by mholt 3y ago

    Is this about Autopilot or Full Self Driving? The article is talking about accidents in 2019. But then it says: > Self-driving capability is central to Tesla’s financial future, according to Musk, whose own reputation as an engineering
27. 387.▲
    by mholt 3y ago

    Reliably means close enough to be useful, but the estimation is also quite precise where most populations live. My use case which led me to discover this fact is sort of documented here: https://twitter.com/mholt6/statu
28. 388.▲
    111,111.1 meters is reliably 1 degree of latitude(gis.stackexchange.com)

    341 points by mholt 3y ago|259 comments
29. 389.▲
    by mholt 3y ago

    Synology has had great success with their window GUI...
30. 390.▲
    by mholt 3y ago

    Looks like a stray index.html was able to slip in there somehow. It pulls a background image from https://new.action247.ag/assets/images/login-background.jpg Roughly Google-translated from Indonesian, it's a