— GPG Proofs —

This is an OpenPGP proof that connects my OpenPGP key to this Lemmy account. For details check out https://keyoxide.org/guides/openpgp-proofs

[ Verifying my OpenPGP key: openpgp4fpr:27265882624f80fe7deb8b2bca75b6ec61a21f8f ]

  • 0 Posts
  • 61 Comments
Joined 2 years ago
cake
Cake day: July 10th, 2023

help-circle
  • Medicaid, which provides healthcare to low-income and disabled Americans

    […]

    At one point, House speaker Mike Johnson circulated research from the conservative American Enterprise Institute finding that, after sleeping, playing video games was how Medicaid recipients who do not work spend most of their time.

    Yes, because heaven forbid the poor and disabled enjoy life a little.

    I’ve said this to my very conservative family when they talk about cheaters and welfare queens - I’d gladly give 10 people assistance even if some of them don’t “need” it. If it helps even a majority of the group, it’s worth it.

    Edit: And here’s a thought. What would be an acceptable third thing they most spend their time doing?






  • I would get multiple drives and do RAID. Here’s a helpful calculator to figure out drive quantity, size, and configuration. The reason to do RAID is redundancy. Hard drives will fail (even NAS branded drives). You do not want your photos, media, etc to be lost in that case. I personally do not go with anything below RAID5 (and for super sensitive things, I’ll even go RAID6 - despite the hit on overall capacity. If the optiplex has drive capacity for multiple drives, I strongly recommend you go this route.








  • Just to make sure.

    1. When on your home network, doing nslookup (or similar), your fqdn resolves to your public IP
    2. When on a hotspot, if you go to https://fqdn/ it does not connect (probably with the ERR_CONNECTION_TIMED_OUT that you mentioned below)
    3. When on hotspot, if you to telnet to port 443 on 206.x.x.x, it connects

    What happens if you, on the hotspot, try browsing to https://206.x.x.x? When you are on the same network as the portfolio, can you reach https://[internal ip]?

    What I’m leaning towards is a router/firewall that may be causing some issues. To help with troubleshooting, does your website server have any local firewalls (for ubuntu that would typically be ufw, but it could be iptables or firewalld)?


  • Try this command from a terminal on the system from which you’re attempting to connect:

    nslookup <yourfqdn>
    

    It should come back with something like this:

    ~  nslookup stronk.bond
    Server:         127.0.0.53
    Address:        127.0.0.53#53
    
    Non-authoritative answer:
    Name:   stronk.bond
    Address: 172.67.174.80
    

    If it says something like “can’t find” that means that your dns isn’t configured appropriately. Does your IP address start with 192.168, 10., or 172.? That would be a private IP address (something which isn’t accessible from the internet.

    Oh! And where is everything - is your workstation/laptop on the same network as your portfolio? Is the portfolio on a different network? That could effect things as well.


  • What does your nginx config look like for ssl? It should specify a certificate and key file - that certificate subject needs to match your fully qualified domain name (fqdn). Certificate can have subject alternative names (SAN) for other names and even IP addresses.

    For instance, you could have a single certificate for foo.bar with a SAN for just foo and an IP SAN for 192.168.1.30.

    Certificates also need to be signed by a certificate authority (CA), and in order for your browser to visit https://foo.bar/ without a warning your browser must trust that CA.

    If you did a self signed cert, this is most likely the problem you’re running into.

    It’s important to know that your communication is still encrypted because of SSL, but since your browser doesn’t trust the CA (or the subject doesn’t match the FQDN) the browser will say it’s not secure.




  • Edit: deleting most of my comment because it’s a duplicate from the person who answered hours ago, leaving my indexers comment.

    Something that you didn’t mention, but needs addressing - indexers. Yes, there are free indexers but they’re often capped at a certain number of grabs per day. Expect to pay for access to these as well - but some have lifetime memberships at a reasonable price. Get more than one and sabnzbd can prioritize by user-assigned weight. (By the way,these are typically what gets hit by content protection/LE). Indexers provide the nzb files that tell you download client where in the providers’ server to find the download bits/bytes.

    The *arr stack works wonderfully with Usenet, I think if you go this route, you’ll be surprised how little you have to fall back to torrents.



  • Yeah, well, about that. https://www.supremecourt.gov/docket/docketfiles/html/public/24a966.html (note this is a preliminary injunction to allow Trump to fire democrat members of a Congressionally appointed bi-partision governing body - just like the Fed).

    From the dissent:

    The majority closes today’s order by stating, out of the blue, that it has no bearing on “the constitutionality of for-cause removal protections” for members of the Federal Reserve Board or Open Market Committee. Ante, at 2. I am glad to hear it, and do not doubt the majority’s intention to avoid imperiling the Fed. But then, today’s order poses a puzzle. For the Federal Reserve’s independence rests on the same constitutional and analytic foundations as that of the NLRB, MSPB, FTC, FCC, and so on—which is to say it rests largely on Humphrey’s.

    The whole opinion (PDF link) is worth reading, but basically SCOTUS just gave a green light to fire independent board members without cause. The Fed absolutely is in danger, even if the majority of the court thinks that for some magical reason the same legal basis that allows the termination of National Labor Relations Board (NLRB) and Merit Systems Protection Board (MSPB) doesn’t apply.

    There’s a great podcast, Main Justice that goes into this better than I possibly can.