Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
mholt
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
11 ms
·
151.
▲
by
mholt
2y ago
When using `.localhost` in the Caddyfile, you don't even need the `tls internal` line since that's assumed for that TLD.
152.
▲
by
mholt
2y ago
How can you set up / use Windows without an Internet connection? Surely that's not an unsupported use case anymore, is it? There's gotta be plenty of places where Internet connectivity is not available or is restricted.
153.
▲
by
mholt
2y ago
Well, we drink almond milk mostly, and it keeps for 2 weeks. A lot of our meat is frozen unless we're planning a special meal. Some fruits and veggies are a bit tricky, sometimes we make a quick trip to get some fresh produce, but betw
154.
▲
by
mholt
2y ago
Totally armchairing this thought, but: My understanding is that it's much more common for Europeans to live in or close to cities, or at least walkable neighborhoods, than it is for Americans; and I have this idea that Europeans often
155.
▲
by
mholt
2y ago
In a lawsuit in the early 2000s where my family member was the defendant, the plaintiff had forged emails. In the end, my family member won the lawsuit, so whatever they did, worked! I wish I could remember the details. I will have to go ba
156.
▲
by
mholt
2y ago
Tangential question, as I am not an economist and don't pretend to understand any of this: what would happen if the stock market didn't recover? (Surely, it could happen? Past performance is no guarantee of future results.) The
157.
▲
by
mholt
2y ago
I have that printer, and I was about to buy some third party toner for it (first time). What firmware version disabled third-party toner support? Looks like we have 1.35. I just disabled automatic "check for updates" but maybe it&
158.
▲
by
mholt
2y ago
I still don't understand the iPad lineup. What is the point of iPad Air? It's compatible with the latest Apple Pencil, but iPad isn't, but iPad Pro is, and the Pencil Pro is only compatible with iPad Pro, iPad Air (not M1), a
159.
▲
by
mholt
2y ago
Awesome :) Best of luck with the project!
160.
▲
by
mholt
2y ago
No illusion of privacy.
161.
▲
by
mholt
2y ago
Caddy also has try_files. But it's implemented differently.
162.
▲
by
mholt
2y ago
Plugins (modules) are compiled in statically.
163.
▲
by
mholt
2y ago
Huh, sorry that it was that difficult. Based on what you wrote, this should suffice: example.com root /etc/www reverse_proxy /backend/* 127.0.0.1:8080 file_server
164.
▲
by
mholt
2y ago
Yeah. ZIP codes are sets in the abstract-dimensional space of carrier delivery points. I suppose you could think of them as lines, but definitely not polygons.
165.
▲
by
mholt
2y ago
"Other attacks" are much more expensive and for much less gain.
166.
▲
by
mholt
2y ago
It does.
167.
▲
by
mholt
2y ago
True, but it doesn't matter since competent clients should be falling back to other CAs anyway.
168.
▲
by
mholt
2y ago
I don't know much about CT requirements, but can't they prune data out of their logs after some time? Since the certs only last 6 days, the growth of the logs can be capped at some point right? If not now, provisions for such oper
169.
▲
by
mholt
2y ago
Fortunately, most ACME clients, including my own, support other CAs as fallbacks. (Caddy's ACME stack falls back to ZeroSSL by default, automatically.) That, and extended week-long outages are extremely unlikely.
170.
▲
by
mholt
2y ago
ZeroSSL I think will get you IP certificates with their cheapest plan. (Disclaimer: I work on Caddy, which is a ZeroSSL project; but I do so independently.)
171.
▲
by
mholt
2y ago
Oh, my, yes it is :) (I don't have time to elaborate on this again right now, unfortunately.)
172.
▲
by
mholt
2y ago
AFAIK, Caddy is the only integrated ACME client that is tuned for short-lived certificates. All its own self-signed certs are already 24-hour certificates, so 6-day certs will be no problem.
173.
▲
by
mholt
2y ago
That's the thing. We don't always know. Hence the need to reduce the attack lifetime.
174.
▲
by
mholt
2y ago
Caddy/CertMagic/ACMEz already support this in the latest commits. Should be ready in time for the production rollout!
175.
▲
by
mholt
2y ago
Yeah... thankfully, it's "pretty simple" for clients to implement. Just add a JSON field to your payload and that's it. (There's a little bit of error checking logic and input validation, like making sure the value
176.
▲
by
mholt
2y ago
Not OOM. (I have 128 GB. Using... 7. lol)
177.
▲
by
mholt
2y ago
We've had a hard time getting Nurtec. (Is expensive, not to mention the hoops to go through to get it.) Worth the hassle then?
178.
▲
by
mholt
2y ago
Hey Anders; Francis notified us of this today. I didn't realize a proper type had been created. We'll update our code.
179.
▲
by
mholt
2y ago
This begs the question, is it a meme if it is not seen?
180.
▲
FrankenPHP 1.3: Performance Improvements
(dunglas.dev)
1 points
by
mholt
2y ago
|
0 comments
More ›