Elvith Ma'for

Former Reddfugee, found a new home on feddit.de. Server errors made me switch to discuss.tchncs.de. Now finally @ home on feddit.org.

Likes music, tech, programming, board games and video games. Oh… and coffee, lots of coffee!

I � Unicode!

  • 1 Post
  • 60 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2024

help-circle

  • […] in my other jobs we were using Google Workspace which only shows metadata because of that[…]

    Rare moment when Google is mentioned as behaving GDPR compliant… I mean, I know that big tech is vacuuming up all data and doesn’t care about GDPR, but still… You can be worse than effing Google?













  • I should send a PR that applies the tariffs randomly and sometimes arbitrarily changes the numbers…

    I might even make it so, that it calculates an import deficit by looking at how often your libraries are imported in the codebase of the projects, that the maintainers of your dependencies have vs. the number of imports your code has from them.


  • I mean, I know of a Microsoft product that allows for a batch import of data provided in an Excel file. You need to use their template file. Which, when used, automatically formats all dates the American way, ignoring your locale settings. Depending on which date is first encountered on import (e.g. which date you entered in the first line) then designates whether the whole file is imported with dates read as MM/DD/YYYY or DD/MM/YYYY.

    You start your list on January 1st? It will import everything as MM/DD/YYYY then. You start you list on e.g. January 22nd? DD/MM/YYYY it is then. Good luck getting that import running without errors…





  • Came to suggest this. I ran into the same problem when I tried to host Jellyfin at home. Also I was fed up with all those certificate warnings, depending on which device I used. Since I was already using pihole in my home network, I just went and looked at all the DNS plugins for certbot to learn which provider allows for easy DNS challenges. Then I researched a bit and stumbled upon a provider that was running a sale - so I got a domain for less than 5 bucks/year.

    I set the public A record to 127.0.0.1 and configured certbot to use their API. This domain is now used internally in my network exclusively and I just added some DNS entries for several subdomains in pihole, so that it works for every device at home (e.g. jellyfin.example.com / dockerhost.example.com / proxmox.example.com / …).

    When I’m away, I shouldn’t be able to resolve the domain, and even if DNS were hijacked, the TLS certificate will protect me from connecting to $randomServices. Also my router is less restricted, which means that I can just use it’s VPN server to connect directly to my home network, if I need to access my server or need to troubleshoot things when away.


  • No, see also this diagram: https://www.digitalberry.fr/wp-content/uploads/2023/02/DNS-challenge-process.png

    You use an ACME client (either explicitly with e.g. certbot or a webserver that has a client Iintegrated like Traefik, Caddy,…) to communicate with an ACME server (the CA, e.g. Let’s encrypt). Your ACME client asks for a certificate with a DNS challenge. It gets a code that you/the client needs to publish as a DNS record. Only then the client talks to your DNS provider and tells them to put a specific TXT record on your domain (or onanual mode: the client prints out the value and you need to put it there manually). After your DNS provider published it, your client tells the server to check the challenge and hand you your certificate.

    Your DNS provider in this diagram is just that one small rectangle in the lower left.

    Note: There’s nothing stopping your DNS provider to just do all of this, generate a certificate for you and providing you with a button in your account where you can download a certificate with a single click. Also if you are at a webhoster and only host a simple page there, they will probably also provide your with a TLS cert with the click of a single button.