Yeah, if you use something like Nginx Proxy Manager you can’t use the automatic flow, you need to use the token based challenge.
- 0 Posts
- 14 Comments
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?English1·1 day ago
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•[AIT] what is your selfhosted local LLM stack?English52·1 day ago
Unpopular opinion time: I’m torn as to where that theft line is.
If a turn of phrase in Lord of the Rings inspires something new in me, do I owe royalties to the Tolkien estate?
The stories on FanFiction.net are derivative by definition — is it theft? I love “Harry Potter and the Natural 20”, a 4th-wall breaking D&D and Potter universe mashup story (seriously, it’s hilarious). Does that story owe royalties to Wizards of the Coast and (ugh) JKR?
Maybe those are super transformative. What about opinion pieces where the author redigests information from all over, many paid writings? Are they selling the original authors’ product, even though restated?
Maybe it’s ok if they paid for the subs. But what if it came from free library books?
My wall has a bunch of art from artists at SDCC. I’m looking at Spider Gwen; Thor, Iron Man, and Mjolnir Cap charging into battle; Kaladin and Syl before the Stormfather; and a map of all the places the Gaang went in ATLA. Those artists all ingested the original work to make those derivatives; were they not allowed to make them if they borrowed their friends’ copy?
It feels kinda wrong to vacuum up public data to train models, kinda? But I don’t know that I can fairly call it immoral without condemning all these other things I think aren’t immoral. I kind of want to, but that’d be really inconsistent, and that’s profoundly frustrating in its own way.
It’s messy and complicated and I think the gut response of most people isn’t actually a reasoned one.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•[AIT] what is your selfhosted local LLM stack?English65·2 days ago
If OP is doing orbital dynamics in their day job, they probably live in California. JPL, Raytheon, LLNL, LBL, and Berkeley are all here.
Even if they don’t have rooftop solar, most of our grid is renewable. Their local GPUs have a decent chance of being more environmentally friendly than charging your cell phone, depending on where you live.
And using it for science and programming is really different than using ChatGPT to write you an email. I’m home right now, but I have two agents at work running debug and trial experiments, and they’ll be running it all night until I get in in the morning. I’ll review their work and steer them all day while I’m in the office; and while those two completely different projects are running, I’ll be personally working on a third. They are enormous productivity multipliers when you have a well-defined and deterministic target.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•[AIT] what is your selfhosted local LLM stack?English4·2 days ago
Super cool
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?English10·2 days ago
I still do, but I don’t host anything on 80 or 443. I use a random large port number, and I’ve seen zero illegitimate requests in 20 months.
IF there’s an active exploit AND it affects a container AND you have a container escape route AND you pick my domain you’d need to statistically try thousands of times to even hit the single open NAT port.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•PSA: eMudhra Intermediate CA CompromiseEnglish7·3 days ago
I’m honestly skeptical about even this. I tried to generate an 8 bit key and got
rsa_gen_set_params:key size too small.And like, you need to go deliberately out of your way to not use OpenSSL.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•What is your self hosted power draw?English2·10 days ago
The NAS itself probably takes most of the power, which isnt logged. My server is a Raspberry Pi 5, so used 1.86kWh in September.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•What's your weirdest or most unique self-hosted use case and solution?English1·12 days ago
Not as of a few weeks ago
It needs to be Android with Google Play Services for the registration for a variety of payment related reasons, but they want to eventually remove that tie
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•New Jellyfin Server/Web release: 12.2English2·15 days ago
I’m right there with you. Your comment gives me some confidence on this front to stage the upgrade this weekend.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•How do you monitor your servers?English1·15 days ago
A script checks container status and accessibility, and pushes a ntfy alert if it goes down. Healthchecks.io reports if the whole Pi goes down.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•What do you use for alerting?English1·16 days ago
Also what I use on a Raspberry Pi 5.
Discord notifications also sometimes come with random delays because of Google bullshit, and ntfy supports UnifiedPush.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•Recommendations for self hosted recipe managerEnglish2·19 days ago
That looks very cool and maybe worth porting what I currently do — I just run a super simple template and each recipe is its own include file, with an auto generating index.
Even if the hosting dies the recipes are easy to read on github, and the network availability makes shopping easy if I decide I want to get ingredients for it at a store, or to share.
- tigerhawkvok@startrek.websitetoSelfhosted@lemmy.world•Phishing / spam detection with local LLMs?English1·22 days ago
I only read about that today, so I hadn’t even considered that angle. They’re doing some cool stuff in that space.
jeffis the self-hostable one that does best as far as I know.
It is, that’s what I had meant by token based challenge lol. You need a DNS API key for your manager to do it directly, it flags a DNS record with a token to validate ownership. I was just calling it out from memory, sorry!