I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
The ARR tools are basically a search engine website you host. The interact with a few other tools you have to have access to/pay for. Namely an indexing service and a (for some) a download service. They can use torrents, so you dont HAVE to pay for downloading, but using something like newsgroups is really nice and add reliability and security.
THe “ARR’s” basically then are just a fancy UI and scheduler and just search the indexing service, download the files you want, re-assemble them and copy them to the location you want (often a file share that your media player like Plex or Jellyfin will use).
You can set them to continually look for something too. So for Sonarr, it will auto-download new episodes as soon as they appear in the index. Or if you see a commercial for something upcoming, you can add it and monitor it and as soon as it starts showing up in the indexes it will download.
All the aarrrs. Saturates my isp bandwidth, have no issues with finding stuff, no takedown or piracy warnings…
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
Ah. That makes sense.
Interestingly the game is downloading for me. I have had it in my library for some time now.
Is it saying its been pulled for new sales only?
I do similar. For laptops and docks, especially if they change setups it can be a pita (though you just need to copy files around).
Also the DE monitor config (ie that you use to login) is logically different to a users x config. So you gotta copy that over to make sure the primary monitor etc is right.
There are quality docks that work on displaylink. The dell D6000 is one example and we issue them out freely at work.
Most third party off brand docks will have higher failure rates. We see that with some anker docks that were usb-c+pd we use/had to source during the great supply chain snafu during covid. They worked in a pinch but aren’t reliable like a Lenovo or Dell dock. That’s less a displaylink thing and more a cheap dock thing.
DisplayLink compresses everything over usb. If you plan to do anything color sensitive (ie photo editing) or latency sensitivite (ie: games) it’s a bad idea sine it’s all cpu compression.
That said. They are great for multi monitor general usage (ie soreadhseets and shit) or for systems with graphic card limitations on multi display output (ie low end macs on m1/m2)
They use a combination of Bluetooth and nfc and maybe some wideband spec (though I think the wide and stuff is just for when you go in searching) . Basically anytime it’s near another iPhone, the iPhone picks up the tag ID and sends it in.
If it detects a lot of checkins to a phone that isn’t on the same Apple ID, the AirTag will make noise (as an anti-stalking measure)
I believe a recent patch also allows android to report in status, or maybe that’s coming but still in the works. Not sure.
A flare gun is essentially a 3d printed single use .410 shotgun.
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
MS goes out of their way to make shit harder than it needs to be.
For example. The store, they have a store for business where you can simply whitelist known apps buts it’s a PITA to setup AND they have been threatening to decom it for ages
https://learn.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview
Want to add safety/security features like secuirty keys. Well if you do it on a non domain joined machine you can just sign into a m365 account to enable a passkey or yuibijey as a second factor.
Want to do that in a business environment. Congrats now you have to deploy a windows CA and issue user certificates to tie to this. Even if you are signing the machine into m365 with ADAL.
They go out of their way to add complexity and failure points.
Tthe problem is now if you have the store disabled basic shit, like the ability to open .heic files is broken or use stuff people want like sticky notes is broken.
We turn off most of what we can’t but having the store enabled causes all sorts of stuff.
Also windows 11 has ads baked in even with the store disabled. Plug in a Logitech mouse, get a pop up for their software. Open the picture viewer and get an ad to install some video editor that isn’t clear whether it’s a Ms product or not.
No to mention basic things like copy paste and edit are now weird icons because I guess they think most users are illiterate.
Most of the 11 UI changes are not for the better. Having to beta test it for work is frustrating and I run an IT shop.
Not as uncommon as you would think. What normally do then is use the 6 month releases until the next LTS
I have been using this hub. Works fine in Linux and windows.
https://www.amazon.com/gp/aw/d/B0871ZHCKK?psc=1&ref=ppx_pop_mob_b_asin_title
I also use this usb dongle for my Xbox controller. It works fine in Linux. I really should try playing a few games on Linux.
https://www.amazon.com/gp/aw/d/B0785SFKYF?psc=1&ref=ppx_pop_mob_b_asin_title
Yeah. Like I said, i have no idea what the conditions are. Maybe its Cloudflare threatening/applying pressure and LW has been getting smacked with DDOS etc.
But maybe not too. I strikes me as a excuse but honestly i dont know all the details or variable and frankly i dont care all that much.
Text is copied. Media is simply linked back to the original location I believe.
Also dmca just means that the admin has to make a reasonable effort to remove things reported as no compliant. Aka they ban or remove offending posts and they are in the clear.
I’m gonna be honest. And I run my own instance, albeit solo, this content isn’t my concern. It’s the CP/CSAM shit that folks like burggit.moe we’re spreading that got my liability concerns up. The feds go hard on that shit (as they should) and will hold a hosting admin accountable as if they were the ones viewing and reading it.
Dmca is pretty clear cut and toothless. I’ve dealt with it plenty as a network admin. As long as you remove it when notified, you are in the clear. This strikes me as the admins having a political opposition to it and using their made up code of conduct as a reason and when pressed just saying “well liability”.
That said I don’t know where they live and the laws for me may not be the same as someone hosting in Germany, who may go hard on that stuff. So who am I to judge? Just saying dmca isn’t really a concern.
Also they’re hosting provider could just cut them for “abuse” especially if they are already using a lot of resources and if that’s a concern I get it. .
I have NSFW unchecked on my instance, so no porn is ingested/federated. Also because its just me, i have to seek out communities to federate with via search.
I did this via https://lemmyverse.net/communities and changed the linked names to my domain and just ran searchs to start the federation for the specific communities i found interesting.
It does mean things like “Local” is useless and subscribed and all are the same filters since its only stuff i subscribed to.
Occasionally I will browse one of alts on a different instance and check all, or local there and see if theres anything interesting. I have also re-run through the link above here and there to find new communities to join. Those are probably the biggest “pain points” in that it takes more effort to find new communities. But once you start the feed its fine.
I also use different default filters on my alt’s in different instances (ie: ALL:HOT on lemmy.world) or whatnot if im feeling like finding new stuff. But honestly the lemmyverse stuff gets like 99% of the content here, and theres been a dip in participation, so some communities are idling (which just means I dont see anything)
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.