• 0 Posts
  • 9 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle


  • Tbf, technically data is still decrypted at the reverse proxy and then re-encrypted. So if someone manages to reconfigure the proxy or read its memory somehow they could read traffic in plain text.

    However then since they have to control the VPS, they could also get a new cert for that domain (at least the way I’ve configured it) even if it was passed as is to the real host via a tunnel and read the plaintext data that way, so I don’t think a tunnel protects against anything.





  • Either games spawning on the wrong monitor and not reacting well to you moving the fullscreen window to the other monitor, or mouse input issues. Latest I’ve had was L.A. Noire, which locks the mouse to a portion of the screen and doesn’t allow you to freely turn the camera. (I just tested it again and now it seems to work fine though! I hope that persists.) Quake II doesn’t allow you to move the mouse at all, or rather only in what seems in like a 2 pixel wide boundary in the middle of the screen. No such issues if the other monitor is turned off or configured to be on the right side. I’ve encountered more games that had issues with this in the past but these two are the recent ones I’ve had trouble with since setting it up like this again.


  • I have NixOS running on my main desktop with some unusual changes:

    • / is mounted as tmpfs, with /etc, /nix and /var being mounted from the actual system partition (this actually isn’t too uncommon on NixOS)
    • For swap, zswap and dynamically allocated swapfiles using swapspace daemon (this is imo the best swap setup if you don’t need hibernation)
    • Akonadi (KDE’s PIM server) using PostgreSQL instead of MySQL
    • ISO8601 date format, for this I have glibc’s en_DK locale which does this copied to en_SE because Qt has en_SE as the locale with ISO date
    • A couple changes to make the layout more like macOS because I can:
      • Partitions are either mounted or auto-symlinked (if they can’t be mounted there, such as for the system partition) under /Volumes
      • I patched udisks to also mount devices under /Volumes
      • User home directories are under /Users and root’s home is /var/root
      • Keyboard layout changed as far as I can to be mostly like Mac’s so I don’t have to rethink layouts as much when switching between this and my MacBook
    • Can’t technically list this anymore since I’ve had to tear it down for unrelated reasons but NFS using Kerberos authentication for my NAS
    • This is apparently very unusual since a lot of games completely break with it but two monitors with the main monitor on the right

  • Great post!

    I’m a rather dismayed to see those universities and institutes nowadays no longer as pioneers and innovators in this area, but instead as mere consumers of ready-made corporate solutions, following corporate interests and centralising solutions. I have two employers, both academic, and both have resorted to big-tech corporations that offer solutions like e-mail as a service.

    Same here, my university recently switched from their Horde webmail to Exchange. The new outlook webmail is absolutely awful and I couldn’t set up all the filters that I had before. Luckily I could enable IMAP login, thankfully without OAuth because imo that’s another awful practice, so I can connect to it with non braindead mail clients. Still a massive downgrade and I bet they now have to run it on a 10x as powerful server because I hear Exchange is an absolute monster in terms of resource usage.

    (Also, I’ve been self-hosting mail for probably 4 years at this point. Here’s to many more!)