8·
3 days agoI have and use pass for system secrets but for service where I’m logging in via the browser, I prefer KeePass.
- 2 Posts
- 8 Comments
Joined 6 months ago
Cake day: April 1st, 2026
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
I built myself a ‘new masked email’ workflow. I copy and paste the site url into the form and click create. It generates my random masked email, generates a strong password, prompts me for my keepass password then saves all the things and copies the generated password to the clipboard. Here are some screenshots. I did a test entry to demonstrate for you.
![Dark-themed web form titled "New masked email". The intro line reads "Mint a per-site alias at [redacted domain] and save a login to KeePass." Below it are a "Domain or URL" field with the placeholder "amazon.com · https://infosec.pub/", a "KeePass master password" field with the placeholder "used once, never stored" and the note "Used in memory to open the synced database, then discarded. Never written to disk or logs.", and a teal "Generate & save" button.](https://infosec.pub/pictrs/image/f97152b2-5fe3-4919-a381-847f464c91d8.png)
New form.
![The same form after a test run for google.com. A green check reads "Saved to KeePass · Logins / google.com (qvkk8729)". Below it are the generated email "google.qvkk8729@[redacted domain]" and a random 30-character password, each with a copy button, the URL "https://google.com/", and a "Mint another" link.](https://infosec.pub/pictrs/image/924cc668-a1db-4095-88d8-69452b456b89.png)
I type in my KeePass password and I get this screen while the entry is automatically saved to KeePass.
This all runs on an Intel NUC in my office and is accessible over my local network.
Uptime Kuma
I use 11ty to host my static site. I’ve used it for years. It’s well documented and learning resources.
I’m not sure. When I was searching around I never discovered it but that doesn’t mean much.
My favorite thing to self host is my RSS feed reader. I’m a huge fan of feedbin but I wanted to self host. I tried the usual self hosted RSS feed readers but I just prefer the way feedbin is laid out and how it works. So, I used Claude to create a self hosted clone of feedbin but with my personal modification to fit my workflow.
- Customized keyboard shortcuts for next and previous.
- I added webmention support which allows me:
- Determine if a site supports webmentions
- Allows me to send a webmention like
- Allows me to send a webmention comment
- I can share and sydicate a link from my feed reader to my website
- I can save a link as a blog idea, like if I want to respond or write about a topic for example.
- Custom filters so I can basically mute certain keywords from me feed.
Short version, and Deebster’s got the shape right: use a DNS-01 challenge. You prove domain control with a TXT record instead of serving a file over HTTP, so the hostname never has to be reachable from the internet. That’s what gets you a real Let’s Encrypt cert for a LAN-only name.
Mine’s acme.sh issuing a wildcard for *.lan.michaelharley.net via my registrar’s DNS API (Porkbun), with a deploy hook dropping it where Caddy reads it. Caddy’s own Cloudflare plugin is simpler, I just already had acme.sh. Local DNS is a wildcard rewrite on my router.
First thought is VPN port issue. I recall changing from Mullvad to ProtonVPN because Mullvad wasn’t’ doing the port forwarding correctly… or so says the robot.