zrail

34 ms·

421.
by zrail 4y ago
This is exactly what I did. I have an HP EliteDesk 800 G3 Mini sitting on a shelf in my basement running HomeAssistant and a stack of other software that the technology in my house more or less relies on.
422.
by zrail 4y ago
Yep, my standard bash header is set -eo pipefail with x if I need to see what's going on. This particular script didn't appear to be using pipes, as you say.
423.
by zrail 4y ago
If Ben is reading the thread, tiny but important bug in the example script. It should have set -e at the top to ensure that a failed step will actually fail the script. Otherwise the snitch will always get called. Edit: filed an issue on th
424.
by zrail 4y ago
Needs a (2017) although it definitely still seems relevant.
425.
by zrail 4y ago
a) Thank you for writing this. I'm also quite a bit heavier than whatever some random committee's idea of my "ideal weight" is and it's tough to navigate these types of threads. b) assuming it was intentional and de
426.
by zrail 4y ago
Dokku has official support for k8s and Nomad if you want multiple-host support. The caveat, of course, is that you have to run the cluster.
427.
by zrail 4y ago
In the US stock ownership is ... complicated. Effectively all shares in all public companies are owned by the Depository Trust & Clearing Corporation[1]. When you buy a share of a company, you hold that share at a broker. That broker in
428.
by zrail 4y ago
I know you're probably using Michigan just as a foil, but Michigan is sort of a weird case. The land that's able to be farmed is being farmed very well. The problem is that north of a certain point the land is just not very arable
429.
by zrail 4y ago
I can't be sure but I _think_ what that's referring to is _all the water_ that a household uses including externalities like the water used to grow their food.
430.
by zrail 4y ago
That's an interesting issue, thanks for linking. I could see something like this working well: location /auth { ... proxy_set_header X-Required-Caps $required_caps; ... } location /grafana { ...
431.
by zrail 4y ago
Could you say a bit more about this?
432.
by zrail 4y ago
Yep! As the author alluded to elsewhere in the comments, if you want to make _really sure_ that the user is a person in a browser instead of a rogue malware process on their machine you can combine this with a yubikey tap or webauthn attest
433.
by zrail 4y ago
Eh, I think that misses the point a bit. Use whatever you want to generate the output, but make the intermediary structure trivial to inspect and execute. If you're actually taking the destructive actions within your complicated* logic
434.
by zrail 4y ago
It's transparent. The user is already authenticated to the tailnet by dint of having a tailscale IP. This implementation asks the local tailscale daemon for who the request's IP belongs to and just passes that back up to nginx. It
435.
by zrail 4y ago
Neat to see this up here! When I saw xena's initial post about Grafana I saw an opportunity to make it work with an existing, well known, basically bullet proof proxy (nginx). Xena took my sketchy POC and made it great :) One interesti
436.
by zrail 4y ago
Another technique that I've used with good success is to write a script that dumps out bash commands to delete files individually. I can visually inspect the file, analyze it with other tools, etc and then when I'm happy it's
437.
by zrail 4y ago
Early in my career I used --yes-i-really-mean-it and then a coworker removed it with the commit message "remove whimsy". T'was a sad day.
438.
by zrail 4y ago
How much do these things work when the wet bulb temperature is over 90F?
439.
by zrail 4y ago
DKIM and SFP by themselves haven't done a ton, but they both feed into DMARC which absolutely has had an effect. It's probably just not what you think. The point of DMARC is to protect senders from spoofing. I.e. if I'm PayPa
440.
by zrail 4y ago
This page underestimates how much it costs to handle SSO as a service provider. Companies that want it are almost always large enough to demand custom contracts, procurement discounts, custom integration work (SSO beyond the big few provide
441.
by zrail 5y ago
My twitter feed got infinitely better after I blocked lazy retweets and suggested tweets[1]. Now I only see things from people that I care to follow and the tweets they care enough about to quote tweet. [1]: mute the following forever, all
442.
by zrail 5y ago
Yeah but that ceremony can be performed on the spot by the clerk or judge using the license.
443.
by zrail 5y ago
I've been able to get 10G over a shoddy 100ft cat5e run. Give it a shot! It's fun!
444.
by zrail 5y ago
That's what I get for typing on my phone.
445.
by zrail 5y ago
> Otherwise you end up with a giant ball of wires. Let's be honest, it's frighteningly easy for a rack to turn into a giant ball of wires too. See r/cablecore for examples.
446.
by zrail 5y ago
It looks nice but it's not necessary. Typically in a setup like this, where you have network equipment with ports on the front and other stuff with ports on the back, you'll want either a patch panel or a 1U brush-style passthroug
447.
by zrail 5y ago
I have a production hypervisor (HP EliteDesk 800 G3 Mini). This is where things run that my spouse cares about, in particular, Home Assistant. I don't generally mess with this machine. I also have a lab hypervisor (Dell T30). This is w
448.
by zrail 5y ago
> The absolute worst offender are political activists: (In the US) The alias I used for one of the big donation platforms has apparently been given to every single person running for any political office in the state along with many out
449.
by zrail 5y ago
This is awesome! Could you talk more about the monthly minimums? Also can I create personal accounts with this or is it just business accounts?
450.
by zrail 5y ago
Unifi Protect requires a) their hardware, either a UNVR or a CloudKey Gen2+ or higher and b) their cloud to SSO into the mobile app. If you don't want the mobile app you can use it entirely locally, but you still have to use their hard

More ›