• 0 Posts
  • 33 Comments
Joined 2 years ago
cake
Cake day: June 10th, 2023

help-circle



  • Yeah if it weren’t for the laundry list of glitches and no new releases since I think 2022 (the December 2023 date was a mistake, there was no change at all, it just overwrote the release date) I would also be using neo. But i got really tired of accidentally resetting all my damn widgets because I moved an icon wrong, and having to manually remake them since they wouldn’t restore from backup.








  • Someone else could (and has in other threads where manjaro came up) answer better than me for general reasons, but for reasons that personally affected me - version mismatches due to them holding back releases, driver issues (with an amd card), general app installation/updating issues.

    Audio issues due to poor defaults, which as a beginner (at the time) user was difficult enough to diagnose I uninstalled plasma (twice) trying to fix (yes, that part is my fault for not understanding what pacman -Rcns actually does).

    The installer is using a very incomplete timezone list that does not include any GMT -8 timezones at all (which isn’t manjaro specific, but makes me leery of a dev’s attention to detail when they use this list).

    For the general comments I have seen others mention, they have accidentally ddos’d the AUR on more than one occasion, they let certs expire regularly, they hold back updates without actually doing anything to confirm the updates are stable when they do push the updates…

    As for endeavouros devs being part of a discontinued project, I can’t say anything that would bring back your trust as I am not part of that team, but they did do a write up about this on the endeavouros website.








  • I can share my traefik setup - note I am doing this on my phone at work, so I might miss something

    compose.yaml
    
        labels:
          - "traefik.enable=true"
          - "traefik.http.routers.traefik.middlewares=authwares@file"
    
      GNU nano 7.2                      /config/traefik/dynamic/middlewares.yaml
    http:
      middlewares:
    
        limit:
          buffering:
            memRequestBodyBytes: 5000000000
            memResponseBodyBytes: 5000000000
            maxRequestBodyBytes: 5000000000
            maxResponseBodyBytes: 5000000000
    
        authwares:
          chain:
            middlewares:
              - default-headers
              - authelia
              - limit
    
        default-headers:
          headers:
            accessControlAllowHeaders: "content-type,authorization"
            accessControlAllowMethods:
              - GET
              - OPTIONS
              - PUT
              - POST
              - DELETE
            frameDeny: true
            accessControlAllowOriginList: "*"
            accessControlMaxAge: 100
            addVaryHeader: true
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            stsIncludeSubdomains: true
            stsPreload: true
            stsSeconds: 15552000
            customFrameOptionsValue: SAMEORIGIN
            referrerPolicy: "strict-origin-when-cross-origin"
            customRequestHeaders:
              X-Forwarded-Proto: https
            customResponseHeaders:
              X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
              server: ""
              X-Forwarded-Proto: "https,wss"
            hostsProxyHeaders:
              - "X-Forwarded-Host"
    
        authelia:
          forwardAuth:
            address: http://auth/api/verify?rd=https%3A%2F%2Fauth.example.com%2F
            trustForwardHeader: true
            authResponseHeaders:
              - "Remote-User"
              - "Remote-Groups"
              - "Remote-Email"
              - "Remote-Name"
    
      GNU nano 7.2                            /config/traefik/traefik.yaml
    global:
      checkNewVersion: false
      sendAnonymousUsage: false
    
    entryPoints:
      web:
        address: :80
        proxyProtocol:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        forwardedHeaders:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        http:
          redirections:
            entryPoint:
              to: websecure
              scheme: https
              permanent: true
      websecure:
        address: :443
        proxyProtocol:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        forwardedHeaders:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        http:
          tls:
            options: modern@file
            certResolver: letsencrypt
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
    
      providers:
      docker:
        exposedByDefault: false
        network: compose_proxied
        allowEmptyServices: true
        endpoint: "http://socket:2375/"
        defaultRule: "Host(`{{ index .Labels \"com.docker.compose.service\"}}.example.com`)"
      file:
        directory: /config/dynamic
        watch: true
    
    api:
      insecure: false
      dashboard: true
    
    certificatesResolvers:
      letsencrypt:
        acme:
          email: acme@example.com
          storage: /certificates/acme.json
          dnsChallenge:
            provider: cloudflare
            resolvers:
              - "1.1.1.1:53"
              - "1.0.0.1:53"
    
    log:
      level: DEBUG
      filePath: /config/logs/traefik.log
      format: json
    accesslog:
      filepath: /config/logs/access.log
      bufferingSize: 100
      format: json