• 0 Posts
  • 10 Comments
Joined 7 months ago
cake
Cake day: February 6th, 2026

help-circle
  • You pretty much have four options, ranging from fully local to network level to VPN to public.

    1.) Good old hosts file. Pro: Easy on linux. Cons: Doesn’t automatically update, needs to be installed manually on each device, some devices (phones) are harder to setup.

    2.) Set DNS records using your router to your local ip, or if it does not support adding DNS records, then use a service like pi hole as your DNS server. Even external DNS providers like Adguard or Cloudflare should work, if you register with an account. You should be able to set up a DNS record for each subdomain, or do something like *.myhost.internal to catch all subdomains. Using the .internal TLD is highly recommended in this setup. Pros: Simple to set up, the router should inform all devices about the changes in DNS. Cons: To get rid of SSL warnings you will need to install the Caddy Root Certificate as a trusted agent on each device.

    3.) Use a service like tailscale or netbird that offers automatic DNS and allows you to bind services (ports) to domain names. Pro: Allows access from anywhere. Cons: Needs to be installed on every device accessing it.

    4.) Setting up a public DNS with a private IP address. Makes things a lot more complicated if you want to use let’s encrypt. Will need to do something like split dns and has to expose the port for the ACME challenge.

    Instead of using let’s encrypt, you may again install the Root Certificates like in step 2 on every device to reduce the complexity by a good amount. Beware that binding public DNS to local IPs is considered bad practice, as it allows for DNS rebinding attacks. Some browsers and devices will complain (unless you use a .internal domain, but these can’t be registered publicly). Pro: If done properly, then, in principle, it should work on any device without setup. Cons: The hardest way of setting things up. Need to open up the network to allow automatic SSL certification. Some devices see this as a security threat.

    If you decide on one of these paths, it is easier to recommend a guide for a specific setup. I feel like your question is mixing up some of these options. I’d also be happy to answer questions on anything but 4.


  • konem@lemmy.todaytoich_iel@feddit.orgich🤢iel
    link
    fedilink
    arrow-up
    2
    ·
    11 days ago

    Fast jede größere Stadt hat auch einen Lakritzladen, bei dem man sich wie früher am Kiosk eine Tüte zusammenmischen kann. Gerade für Einsteiger zum probieren sehr zu empfehlen, die persönliche Beratung kann doch erstaunlich hilfreich sein und die Varietät reicht von süß über sauer bishin zu salzig oder gar Schokoladenlakritz. Einfach mal nach so einem Laden umschauen und einen Zwischenstopp beim nächsten Trip einplanen.


  • I bought a Tuxedo Polaris (Clevo) in 2020 for work.
    The display backlighting was somewhat uneven from the start. The keyboard print rubbed off quickly, the rest of the laptop kept being mostly ok for 5 years, except for a dent or two. It also encased the first SSD that I’ve ever had die, possibly due to excess heat. It’s not high quality, but not flimsy either. Most colleagues had macs or dells, and they were in a significantly better shape after that time. I’d say that the clevo, in terms of build quality, is a bit below Lenovo, even though it actually used a metal chassis instead of plastic.

    That being said, I feel the software support for buying a new mainstream laptop is better than what I’ve gotten from Tuxedo. Of course, the nvidia card was a problem (no suspend for half a year, after that it worked… rarely), but even the RGB keyboard did not have a driver until a couple of years after launch. TuxedoOS was Ubuntu and highly opinionated in wanting KDE, but the custom tuxedo fixes were not readily available in any other distro. Given that the selling point was the Linux support, I’ve felt that even essential drivers were updated way too late. Tuxedoos switched to Debian recently, so maybe it will be better, but I wouldn’t hold my breath. In conclusion, I couldn’t really justify paying the premium for Linux support anymore. Community support of mainstream vendors seems way better than what these small companies can offer for niche products.

    I now have a Lenovo with Cachy and it’s been working great from day one, only needed to reload the Bluetooth module at times. Also don’t need to wait months until driver updates arrive. Even suspend works fine now with Intel and Nvidia.


  • Dark matter is not just a mathematical construct to explain velocity curves, even though historically that was the first step. Since then, we found compelling evidence of dark matter acting as gravitational lenses. It is a very real phenomenon, as we absolutely know that there is an excess of matter that is dark, i. e. not radiating or absorbing light. Some open questions still exist about dark matter, such as whether it is made up of particles and how they are generated. But the question of whether it is real is settled.

    Dark energy is more of a placeholder name at the moment to explain the accelerating expansion of the universe. It is more contested in the scientific community and there is no direct evidence of this energy yet, some cosmologists deny the existence of dark energy at all and claim that is a mathematical flaw in general relativity (the equivalent explanation of dark matter as a flaw in current models called modified Newtonian dynamics or short MOND, is a very fringe theory by now). As such, the question of whether dark energy is real is not settled, it is currently a prediction to explain some observations but lacks further evidence.





  • To make a fresh install less painful: Most applications save all user data in your home folder under .config and .local. Some others make their own .folders, which you can see pressing ctrl+h (for hidden) in your file explorer. You might save these and carry them over whenever you wipe your OS. If you save a list of installed packages from your package manager as well, you can get up and running in just a few minutes on a fresh install.



  • To protect your privacy, always encrypt your sensitive uploads with rclone or something similar. The backend is almost irrelevant then. Still, there are often some unforeseen bugs or artifical limits set by the providers. The only way to find out if a service really works for you is stresstesting it with your workflow. Most services offer a few GB for free to do that. Some examples of what may go wrong: A few years ago I’ve run into some problems with Proton and Zotero and quickly decided against it. My KeePass app stopped syncing with a seadrive server at some point. One nextcloud provider didn’t like my seedvault backups and always dropped them halfway through.

    I’ve been mostly using Koofr because it’s european and there is a lifetime 1TB purchase available on stacksocial. Some view lifetime subscriptions as a controversial business model, but I like it better than a monthly subscription. Koofr also encourages rclone usage and I haven’t run into any problems yet, but, as stated above, your mileage may vary.