

In general you want to avoid layering packages if possible. But it’s not the end of the world. You can always build your own custom image that updates whenever the base image updates if you need something more customized.


In general you want to avoid layering packages if possible. But it’s not the end of the world. You can always build your own custom image that updates whenever the base image updates if you need something more customized.


Aurora is what you want. Same family of OS, different flavor. It’s what I use for my PC and my wife’s laptop.


Wait, what issues? I have it running on my Steam Deck with Bazzite and my PC with Aurora. I didn’t have any issues.
I’m already building a custom image of Caddy with plugins for Crowdsec integration. It’s not hard to do. But I have no reason to use anything other than the default Let’s Encrypt setup.


I also moved out of Arkansas in 2021. I had lived there almost my entire life.
My hometown and the surrounding areas are almost entirely white. So it makes sense that the majority of welfare recipients are white. Hell, I was dirt poor growing up and we got assistance. I specifically remember WIC and food stamps.
I have family who know that we were on welfare who would still reference “welfare queens” because they’re conservative and it goes without saying, also racist.
Everyone in here taking about an the automations they’ve done for certs and I just use Caddy. It handles all that for me.


Defenestration is such a fun word.


Because that’s how language works. That word has been used to demean, mock, belittle, and cause real trauma to people. That’s why using it makes people feel bad, and as sentient, empathetic people, we choose not to use it.


I just recently went through a much more benign, but scary nonetheless version of this.
I realized that my Ansible directory, that I had made public on GitHub to share as an example to some folks, had secrets committed and pushed.
It was the direct URL and credentials of an app I developed to store non-PII customer data. Now, it wouldn’t be the end of the world if someone noticed this and scraped the data, but it wouldn’t be good, either.
Luckily, I have Caddy access logs, and it appears no one ever accessed it.
So I pulled the secrets out of the Ansible directory and made the repo private, I rotated the credentials, and installed Crowdsec to monitor Caddy access logs and ban bad actors.
I only noticed the secrets because I had just setup Authelia as an OAuth2 provider for my homelab, and I was adding it to my backup scripts.


For appimages, I use https://github.com/mijorus/gearlever


I know people who are ready to leave Windows, but this and kernel level anti cheat games are keeping them away from Linux.
And my constant reminders that they didyn’t need those games doesn’t work.
I was devastated when Google Reader shut down. I switched to another service after that and it shut down not long after that. Maybe a year or so.
I would have paid for that service at the time.


Regarding certificates. I use Caddy for things like that. Even stuff that I don’t want publicly available. It is technically public, but relatively secure.
I use a combination of basic authentication plus a rate limit so the password cannot be brute forced. And then I have a bypass so that auth is not required on my home network. I think it works pretty well.
I have a system of using month and year plus a common trailing string. My annoyance is that every year the last number on the year keeps moving.