Do they have some sort of speed degradation forced by the firmware? I read on Reddit that some of they may have a firmware that slows them down so they will never be as fast as an internal HDD. Did you notice something similar?

My idea was to run it in a mini PC, where I self host some services. I’m not sure if there are HBAs in a small form factor that would allow me to install it on the mini PC (GMKtec G10).

I see some WD Elements external HDDs and they seem to be cheaper than internal HDDs. I don’t know if they’re worth it, though. For example, a 5TB one is about $130.

Authentik supports more authentication types and I think it’s more stable so you can use it in larger production servers. VoidAuth seems to be a lightweight alternative that only provides OIDC.

Both. How do I get started creating a new article, and how do I contribute to them, or other articles?

If you have caddy as a reverse proxy inside podman user namespace separated networks, they don’t take the upstream client IP address and instead you get local IP addresses assigned to logs. Socket activation is kinda required if you want to get the client’s real IP address in your logs.

I use openSUSE MicroOS as the container host, with podman. It was a bit tricky to install it in my Hetzner VPS and get used to how MicroOS handles system updates (it’s an immutable system), but I am quite happy with it. I found it interesting and decided to try out so I could learn how to use the system.

How do I get started on contributing to new articles (written by a human) for my language? I always wanted to help out but never found an easy way to do so.

With Encrypted Client Hello you can have some more privacy on obtaining certificates for wildcard domains, IIRC.

I had the same considerations when I self-hosted headscale as the controller for accessing my VPS. However, I figured that it shouldn’t be a big deal, and there’s no chance of someone registering rogue devices on your mesh, because, even though any device can request enrollment to Tailscale, ultimately you need to execute a command in your headscale server to confirm the enrollment/account creation, so there shouldn’t be that much of a problem leaving the web server exposed.

One more question, how did you manage to get the reverse proxy to proxy your pods? I just added two containers to one, and I cannot access the containers anymore by their names. Do I need to expose their ports on the pod configuration?

It seems simple. Does it use pasta as the default networking backend? Also, I guess separating each app into their own network is added security, right? So if anything happens to one app, it cannot move laterally to the other apps unless it manages to gain access to the reverse proxy, which then it would be a huge problem.

Yes, it made people realize we don’t need Secure Boot and it’s just a pit of vulnerabilities.

Do you have to do this every time you update your phone?

Care to share how you disabled every bit of AI in the phone?

The VPN bandwidth doesn’t need to be that good, I was checking the GL iNet models and 200 Mbps on WireGuard is enough for me.

The default config for sudo is to ask for root password. I too was annoyed by this and had to change the setting to ask for the user password, not root, every time I used sudo.

Can someone ELI5 what’s going on? Seems like they are still fighting about Nix allowing a defense company to sponsor their conferences, and trying to ad hominem the project leaders.

I found Tailscale/Headacale way more difficult to setup than Wireguard.

Have you tried to install the it87 driver for your kernel? https://github.com/frankcrawford/it87 (on AUR it’s it87-git)

I have ASUS B450M PRIME GAMING and after installing the driver, the chassis fan sensors were detected and I could use CoolerCtrl to draw the fan curve.

I don’t quite like CoolerCtrl because of its UI, seems to be web based, but it works and has a daemon mode to start minimized on startup.