Self fulfilling prophecy.

When I think of the cost of that freedom it doesn’t seem too steep.

People want all the benefits but none of the responsibility, IMO.

I definitely see your viewpoint though.

Not that I recall.

I like it. Nice to be able to see all your workouts across whatever time period.

Nat is not a firewall…

Seriously. Unless you open up your Lan to the internet it functions the same way as ipv4 in respect to receiving unsolicited queries from the internet. All those are dropped.

Yep. Hell, be very paranoid and run it in a container on a runner VM on your box if you like.

And you can use podman or sysbox there.

For real. JF roku team is killing it. Latest release is so nice.

Looking at this I’m going to be sticking with simple tab groups myself. Using that via the sidebar seems way more efficient than this IMO.

Keycloak is very much lighter actually. Can run under half a gig ram whereas authentik uses about 1GB.

Authelia is king though in running with just about 30MB of ram.

The only way to interact with it is using talosctl (no ssh, very minimal console, etc.) It is pretty slim and designed only to use k8s. Ubuntu on the other hand is general purpose that can be made to use k8s.

Basically the idea being that your nodes are also cattle.

It’s very interesting. I’m debating moving from fedora coreos to it. About to spin up a test cluster whenever I have free time.

You always have to manage kubernetes. And talos is nothing but a ready to do k8s os.

If you don’t want kubernetes I’d suggest something like fedora coreos.

I think it depends who you ask.

As a linux admin, I don’t mind it and actually really appreciate it. It’s a robust system like you said and though a bit persnickety on resolving things, does its job well.

As a home user, I find that mostly you shouldn’t know it ever exists anyhow. The one time you might would be podman volume issues (when you forget or don’t know to append a z/Z) or when you’re doing something odd. I can see how some would dislike it in that case.

But in any case I fully recommend running it and just learning how to use it. Kind of like IPv6. It’s misunderstood, too often disabled, and should be more widespread. They both are really improvements to what came before. Just technology that takes a little more time to learn is all.

Here is a helpful video explaining it- https://youtu.be/_WOKRaM-HI4

Oh the people who dislike MAC probably do dislike file permissions too, ha. chmod -R 777 somedir and such.

Or the fact it consumes like 30mb of ram compared to authentiks near 1GB.

Let me key you in- everyone thinks you’re a shithead. No one gives a fuck how sanctimonious you feel for “voting your conscience” when it’s clear you and people like you allowed the worst possible option to assume power.

Because your “purity” is doing fuck all for the people that are going to go to camps, have their healthcare fucked with, their entire lives upended.

Sincerely, eat shit.

And far more didn’t vote at all.

Let’s stop acting like we’re so surprised. Millions were told repeatedly what would happen and they did. Not. Care.

This is America. In all its ugliness. We truly need to own it because enough people here did not care.

Not really. Personally I’d allow the service account running jellyfin only access to read media files to avoid accidental deletion but otherwise no.

Also, jellyfin docs have a sample proxy config. You should use that. It’s a bit more in depth than a normal proxy config.

240 is used all the time for furnaces, driers, and increasingly EV outlet connections.

It’s just all our “normal” stuff is 120.

Honestly, if you know nginx just stick with it. There’s nothing to be gained by learning a new proxy.

Use Mozilla’s SSL generator if you want to harden nginx (or any proxy you choose)- https://ssl-config.mozilla.org/

Man it’s late here but I just don’t get it. Isn’t tmux enough to separate sessions then you just look before you run something like this?

Which they expressly said they wanted in the comment I responded to…