smiletolerantly

joined 1 year ago
[–] [email protected] 1 points 12 hours ago

Which shouldn't really be an issue since you should only host on 443, which tells bots basically nothing.

Configure your firewall/proxy to only forward for the correct subdomain, and now the bots are back to 0, since knowing the port is useless, and any even mildly competent DNS provider will protect you from bots walking your zone.

[–] [email protected] 2 points 12 hours ago

Sorry, saw this only just now. I don't really have any guides to point to, so just the basic steps:

  • host jellyfin locally, e.g. on http://192.168.10.10:8096/
  • configure some reverse proxy (nginx, caddy, in my case it's haproxy managed through OPNSense)
  • that proxy should handle https (i.e. Let's Encrypt) certificates
  • it should only forward https traffic for (for example) jellyfin.yourdomain.com to your Jellyfin server
  • create a DNS entry for jellyfin.yourexample.com pointing either to your static IP, or have some DynDNS mechanism to update the entry

90% of this is applicable to any "how to host x publicly" question, and is mostly a one-time setup. Ideally, have the proxy running on a different VM/hardware, e.g. a firewall, and do think about how well you want/need to secure the network.

In any case, you then just put in https://jellyfin.yourdomain.com/ in the hotel TV.

[–] [email protected] 2 points 4 days ago (2 children)

I have never used Tailscale. I have also Jever seen anyone in the wild recommend it and explain what exactly the use-case is beyond plain, old, reliable, open source WireGuard.

So yeah, agreed.

Also I have been hosting Jellyfin publicly accessible for years with zero issues, so idk... I also dint k ow what the "you have to use Tailscale for jellyfin" people are doing with TVs/Firesticks/... in hotels, airbnbs,...

[–] [email protected] 5 points 1 week ago

We did a rewatch just in time. S1 is as phenomenal as ever. S2 as such a jarring contrast.

That being said, E3 was SLIGHTLY less shit. I'll wait for the second arc for my final judgement, but as of now it's at least thinkable that the wheat field / jungle plotlines are re-shot shoe-ins for.... something. The Mon / Dedra plotlines have a very different feel to it. Certainly not S1, but far above the other plotlines.

I'm not filled with confidence though. Had a look on IMDb, and basically the entire crew was swapped out between seasons.

[–] [email protected] 5 points 1 week ago

Yeah. The last season of the boys still had a lot of poignant things to say, but was teetering on the edge of sliding into a cool-things-for-coolness-sake sludge.

[–] [email protected] 8 points 1 week ago* (last edited 1 week ago) (5 children)

Not the usual topic around here, but a scream into the void no less....

Andor season 1 was art.

Andor season 2 is just... Bad.

All the important people appear to have been replaced. It's everything - music, direction, lighting, sets (why are we back to The Volume after S1 was so praised for its on-location sets?!), and the goddamn shit humor.

Here and there, a conversation shines through from (presumably) Gilroy's original script, everything else is a farce, and that is me being nice.

The actors are still phenomenal.

But almost no scene seems to have PURPOSE. This show is now just bastardizing its own AESTHETICS.

What is curious though is that two days before release, the internet was FLOODED with glowing reviews of "one of the best seasons of television of all time", "the darkest and most mature star wars has ever been", "if you liked S1, you will love S2". And now actual, post-release reviews are impossible to find.

Over on reddit, every even mildly critical comment is buried. Seems to me like concerted bot actions tbh, a lot of the glowing comments read like LLM as well.

Idk, maybe I'm the idiot for expecting more. But it hurts to go from a labor-of-love S1 which felt like an instruction manual for revolution, so real was what it had to say and critique, to S2 "pew pew, haha, look, we're doing STAR WARS TM" shit that feels like Kenobi instead of Andor S1.

[–] [email protected] 4 points 2 weeks ago (1 children)

This is an ad.

[–] [email protected] 55 points 2 weeks ago (3 children)

Uhhhhhh

No? If they are hard, they are dried out. Chewy, sure, that's the fun; but they should be soft to the touch.

[–] [email protected] 1 points 3 weeks ago

NO

DO NOT READ THIS

[–] [email protected] 21 points 3 weeks ago

Just in case this post is real: the world does NOT hate you. Not you, not your people, not your country.

We wish you could achieve the freedom to experience the entire world.

[–] [email protected] 3 points 3 weeks ago (1 children)

For manga, I've found Mihon to be nicest, by far, and it supports the API. For books, I am currently "stuck" on koreader on Android (which "only" supports OPDS-PS). I do most of my reading on a reMarkable currently, and that has no supporting client. Writing one is on my to-do list, but it's a bit daunting of a task....

Here is a pretty good list of what is supported where.

[–] [email protected] 2 points 3 weeks ago (1 children)

I think I have set Suwayomi to download / convert to CZB, not for Kavita specifically, but because a lot of reader apps cannot handle loose images

 

Schadenfreude 🙂

 

Five years ago, I bought a Supernote A5. It was (and mostly still is) a great device for reading and writing on an eInk display, and it runs plain old linux.

The deciding reason I went for this device instead of the competition is that I was "under the impression" that they were about to enable full SSH access to the device! Awesome!

"Why were you under that impression?", I hear the skeptics ask. Well, their spokesperson has stated that they would do so. Via mail, and on reddit, publicly, multiple times. I was still torn, so sent them a DM, asking if this was ineed factual. "Yes", they said, "the next quarterly update will enable SSH access!".

Great!

Well, it's been 5 years. They did not follow through. A couple updates were published, none contained the promised functionality, the spokesperson stopped answering questions about SSH. The last software update I received is from 2.5yrs ago. Mentions of the original Supernote A5 have largely been scrubbed from their website.

Let me be clear, the device still functions perfectly. But it is in danger of becoming e-waste because it is so needlessly complicated to get stuff on the device. I'm currently in need of an ebook reader with (ideally) OPDS capability, and I am pretty confident I'd be able to get something like koreader running on this, or at least just run a script to sync files over SSH. Also, I frankly feel wounded in my pride having a Linux device in my possession which refuses to do my bidding (I'm joking of course, but also I am 100% serious).

Here's all I know:

  • plugging it in via USB, the device reads as an MTP device, with access only to the documents/books/... stored on it
  • you can place an update.zip file (obtained from the SN website) into the root of that MTP directory, and upon reboot, the device will update. To me, this appears to be the most promising route of gaining access.
  • unfortunately, the zip file is encrypted. The decryption key clearly has to be known to the device, but since I have no access to it,...

I'm a software engineer, but I have zero knowledge of the "dark arts", so to speak. If anyone could help me (or point me into the right direction!), I would really be grateful. I don't want this (generally nice) product to turn into a paperweight instead of a paper replacement :(

 

Basically, the title. After years of inactivty, I'll be taking music (cello) lessons again, with my teacher of yesteryear, from whom I've moved half a country away.

She has suggested Zoom but is open to alternatives. I don't particularly like Zoom, plus I have a feeling better quality can be had through a custom solution - but I'm at a bit of a loss as to what exactly would be a good fit for this project.

Maybe Jitsi? Does someone here have experience with it and could tell me if it's possible to set something like a "target" audio quality?

For hardware, I basically have two options. Both are already in use, for different things, and have sufficient processing capabilities - albeit no GPU:

  • host everything at home. Plus: lowest possible latency from me to the server. Not sure how much that is worth though.
  • root server in the Hetzner cloud: much faster network speed. Again though, not sure how beneficial that is, the ultimate bottleneck will always be my upload speed (40Mbit)

OK, I realize that this post is a but of a random assortment of thoughts. I'd be really happy about suggestions and / or hearing about other's experiences with similar use-cases!

30
submitted 10 months ago* (last edited 10 months ago) by [email protected] to c/[email protected]
 

Hi,

not sure where else to post this. For a while now, I've unsuccessfully been trying to get WireGuard to work with Crunchyroll.

Setup is as follows:

  • dedicated server hosts a wg-quick instance in [neighboring country]
  • OPNSense acts as peer on a single IP
  • I have a rule for routing the entire traffic of some source device via that IP

This works just fine. Handshake successful, traffic is routed via the server. traceroute shows the server as the hop immediately after my device's local gateway. The connection is stable, and fast.

...except for Crunchyroll. The site / app itself is fine, but I can not, for the life of me, get a video to play. It just keeps loading forever.

I don't think this is an issue with CR recognizing that I'm not where I say I am - looking online, it seems pretty easy to use CR with a VPN. I've also tried from multiple other devices, all with the same symptom.

If anyone has suggestions, I'd love to hear them 😅

EDIT: ~~It was MTU. Had to manually set it to 1500 on both devices.~~

Nope, still the same issues. I was using the fallback interface there briefly.

EDIT: It WAS MTU related, I had to enable MSS clamping on the OPNSense.

view more: next ›