nublug

the crypttab.d thing is called a drop-in directory. linux will read files you make in these and overwrite the config files with the values in the drop-in files. it’s a way to add your own edits to config files without editing the default config files directly, so you don’t have to say manually copy crypttab to crypttab.old for a backup and instead always have a default config to fall back to if things go wrong by just commenting out your few changes in the drop-in file.

i don’t know anything about raid, but judging by your manual command to unlock and mount it shouldn’t be any different than my non-raid extra encrypted disks setup.

it should be just adding it to crypttab and fstab and a keyfile and grub config edit maybe, and if you mess up you can still get in to edit these to try again with a liveusb (easiest way to go back to previous setup is just comment out the lines you add) and manually unlocking and mounting like you are now anyway, so don’t be scared.

https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system

is a lot but the specific info you need for your setup should be various places there and linked there. good luck!

‘ethics later’ lmfao so on point

the prices are not because they ‘don’t have the means to scale’, all computing hardware is suffering major supply issues and price hikes because of the ai bubble.

fuck this nazi piece of shit and his sloppy ass slop and every one of you dipshits praising him and this garbage. “how much progress he’s made for FOSS” lol, lmao, lmfao, even.

https://codeberg.org/small-hack/open-slopware

is what i use and is where i learned of chipass. notably they don’t mention keepass2android either way so i just lightly poked around its repo and didn’t see any sign of llm so went with it for now.

chipass is a strict no-ai fork of the last keypassxc version without ai code. it’s got a banner warning that’s it’s in dev and may likely cause corruption so make regular backups of your db, but i’ve been using it for a week or so with no issues so far.

as for android, i’m using keepass2android as it’s got a fancy cloud saving feature where i can keep the db saved in my nextcloud and easily sync the db on my desktop as well.

sus

‘anarchist’

‘i use claude’

hmmm

‘forks are harassment’ lmfao weirdest weakest shit ever

unexpected keyboard is great and i don’t know shit about the dev and i hope it stays that way

try out crowdsec, it’s a modern alternative to fail2ban that crowdsources ip blocks from its users with similar setups (optional to contribute to). in the first day i had it set up it had blocked over 50k attempts, mostly scraping and enumeration but also some known http exploit attempts and bruteforcing.

you get 3 blocklists with a free acct so sort the blocklists on their site by size and get the three biggest and you’ll block the vast majority before crowdsec even has to evaluate rules. only like 100 or so or mine have been blocked dynamically by crowdsec, the rest of the now 200k or so total have been those blocklists.

edit: tho i don’t know how much control you have on your hosting service, whether you can install something like this or only plugin things they have integrated into the service themselves.

‘visual capitalist’

lolyeah

they’re the same backend, proxy manager is just an easy-to-use webgui for nginx. nginx has reverse proxy capabilites as well as the web server stuff.

i literally just installed nextcloud an hour ago and yes the redis error message is your problem, my install was hung here as well. follow the instructions in that error and restart and it should continue where it left off.

edit: it’s talking about the host system sysctl.conf, btw, not within the redis container. i was confused about this at first.

any other linux distro can do vms and containers, too. arguably it’s easier to do that than with proxmox.

but yeah, i wanted to check it out so threw it on the drive i pulled from my old broken laptop to check it out and discovered the wifi omission. i even tried to install base debian and ensure wifi was set up first then convert to a proxmox install. sadly, proxmox’s network stack is in conflict with any other linux network libs and actively uninstalled whichever one i had set up during the proxmox conversion.

i get their reasoning for not supporting wifi after looking it up but imho completely removing it as a possibility is a bit not cool, bro. i wasn’t trying to do any high availability or multiple nodes or anything like that so it wouldn’t have been an issue for my use case anyway.

you do know 100% rotten tomatoes score just means all reviews are positive, right? it doesn’t mean they all rate it as a perfect 10/10.

desec does offer one free subdomain, and you can use as many nested subdomains as you want for your services. do note you’ll need a wildcard cert for each subdomain level: *.sub.dedyn.io and *.app.sub.dedyn.io if a service needs it’s own subdomains for apis and whatnot.

edit: also a note for any fellow noobs like me it’s deDYN.io not deSEC.io on your account/subdomain. it took me an embarrassingly long time to realize my mistake trying to sign up with every subdomain i tried saying it exists already.

ugh well that sucks butt. i’ll be trying new alternatives tonight i guess lol

any recommendations?

update for posterity: i ditched arcane for just managing compose files manually and lazydocker for logs and restarting containers. it’s plenty good for my needs at the moment. tried komodo and couldn’t get it working and didn’t quite like any others i looked into so i dunno what to recommend for a webgui docker manager.

switched from portainer to arcane recently. much easier on the eyes and the ability to save compose projects without deploying them yet is exactly what i was looking for. one thing is weird and i should prolly make an issue for it: no horizontal scroll or word wrap function in the compose editor, so for those compose files with extensive comments like npmplus you’ll have to have open in a text editor or webpage to read to the end of lines.