in reply to Jonathan

I went the full Monty. DNS server at home, step-ca (certificate authority) in a container, so now all my (virtual) machines get name resolution and certificates via certbot. See jan.wildeboer.net/2025/08/My-D… and jan.wildeboer.net/2025/07/lets… @bjoern @homelab @homelab_de
in reply to Jonathan

I realise it via a nginx proxy manager container (which is very large). An approach is described there:
youtube.com/watch?v=qlcVx-k-02…
This entry was edited (1 day ago)
in reply to Jonathan

@bjoern@sengotta.net @homelab @homelab_de I can only underline what @jwildeboer@wildeboer.net already wrote - install your own CA using #step-ca.

Once all is up and running, SSL certificates and warnings turn into a no-issue in your home network. I've done that a few months ago and have not thought about them once since then.

Install step-ca and look no further.

This entry was edited (1 day ago)
in reply to Jonathan

I do this with let’s encrypt, a free subdomain from freedns.afraid.org/ and an inadyn script with a 5 minute cron to compare rotating public IPs.
in reply to Jonathan

@homelab@fedigroups.social_de it’s fairly straightforward to set up your own internal CA and add it to your system / browser’s trust store. You can do it with openssl or with a GUI tool like xCA.

Or, apparently, step-ca is a thing, which should let you use an ACME client to automate issuing internal certs hub.docker.com/r/smallstep/ste…

This entry was edited (1 day ago)
in reply to kate

I’ll revisit the dns challenge when letsencrypt adds the static entry option DNS-PERSIST-01 [1]. Right now you need to dynamically update dns for this to work.

[1] letsencrypt.org/2025/12/02/fro…

@abulling @interpipes @jonathan859 @bjoern @homelab

If anyone ever feels like researching some deep background regarding authoritarian and fascist developments ... i highly recommend a text from Étienne De La Boétie from the 16th century. It still captures something crucial, "voluntary servitude", that is often left out from leftist discourses because we prefer to not admit we are all susceptible to *voluntarily* succumb to authoritarians ... nonresistance.info/docs_pdf/Vo…

high recommend on this short and succicnt take on LLM/AI from Joseph de Weck, tracing longer paths back to Kant and his arguments for making up your own mind to obtain freedom, and Erich Fromm who highlighted delegating authority and responsibility to "others" is a major factor in growing fascism

theguardian.com/commentisfree/…

This entry was edited (1 day ago)

I just woke up this morning to an email saying my BuyMeACoffee (aka Stripe) account was suspended for adult content.

Merry Christmas.

I'm going to appeal it. I've never taken payment for any adult content, nor have I posted any, or made reference to any on my BuyMeACoffee page.

Yay puritanical capitalism!

Update: started a GoFundMe at folx suggestion: gofund.me/bd5f770fd

This entry was edited (1 day ago)
in reply to 🅰🅻🅸🅲🅴 (🌈🦄)

I contacted customer support and made an appeal. They very quickly responded that I'm permanently suspended from the platform (and Stripe) because my *Mastodon* profile (@alice) associates me with @AltAfterDark.

So, that's that.

"""
... your account has been permanently deactivated due to a violation of the Terms of Use related to adult content. Please note that even if adult content is posted on other websites, it can still lead to account review and banning...
"""

I'll be looking for another way to accept tips (as it's kinda my lifeline); if you have any suggestions that *don't* involve platforms that'll ban me for posting some wholesome-ish adult content *on my own social media profile*, I'd live to hear them.

Update: started a GoFundMe at folx suggestion: gofund.me/bd5f770fd

This entry was edited (1 day ago)
in reply to 🅰🅻🅸🅲🅴 (🌈🦄)

Watch BuyMeACoffee/Stripe send me a cease and desist for posting about them banning me.

Then watch Fedi Streisand Effect the shit out of that.

I'm sure they're already going to lose a (insignificant to them) chunk of money over this, because not only will they not be taking 10-20% of my tips, but whenever I call out a company here for being shitty, I get dozens of replies from folx canceling their accounts there.

This entry was edited (1 day ago)

My 92 year old aunt: You do the Leenux thing, right? You need to come over sometime and install it for me, because f#ck all I ain't gonna update to Windows 11.

Me: .... ?!#!?

I explain what the change-over entails and that I generally don't recommend it just because...

Aunt: No, f#ck that, f#ck capitalism, my laptop is still fine, so come over and set me up with that Leenux thing.

#Linux #christmas

reshared this

Lately I have noticed that when you purchase a ticket you don’t get a static PDF/PNG anymore.

Increasingly often, you get a .pkpass file, which is supposed to be opened in wallet apps (like Google Wallet or any 3rd-party wallet app).

Since I don’t like to share information about the events I attend with strangers on the Internet, I have decided to take a closer look at these .pkpass files.

They are just zip files that contain a background image, an icon and a pass.json with the actual information about the ticket. Nothing that can’t be handled by a script rather than a 3rd-party 100 MB mobile app.

I have thus put together a simple #shell script that does exactly that.

Dependencies:

  • jq
  • zint
  • magick
  • unzip
  • curl or wget

gist.manganiello.tech/fabio/pk…

Usage:

pkpass2png <a href="https://domain.tld/myticket.pkpass" rel="ugc">https://domain.tld/myticket.pkpass</a> ticket.png
This entry was edited (3 days ago)

📻 **Vánoce za socialismu: Splněné plány, obchody plné zboží a málo sněhu.**
#mujrozhlas

mujrozhlas.cz/rapi/view/episod…

*Velký výlet do rozhlasového archivu a poslech štědrovečerních zpráv ze 60., 70. a 80. let odhalí, jak tehdy rozhlas o Vánocích vysílal.*

- Buďte rádi, že vám v domácnostech o vánocích vůbec půjde plyn a elektřina.

- Jak je to hrozný v zemích krachujícího prohnilýho Západu.

- Co je ruský, to je nejlepší. Srovnání s dnešním ruským fašismem se tak nějak nabízí samo.

- Zkrátka obludnost totalitního režimu v celý svý vánoční kráse.

**Komunisti všech zemí, vyližte si prdel!**

in reply to Billy

So just tested it out in WSL. Strangely enough, I'm not experiencing this weird so-called upload score bug, I managed to upload just fine. With a terrible score mind you, since it was for testing purposes, but definitely works. Perhaps I must have fixed something without knowing, or it's Python being Python as usual. I'll keep looking into it, but for now I'll push what I have.

⌨ FUTO klávesnice pro Android se naučila přidat obrázek do pozadí

infoek.cz/futo-klavesnice-pro-…

⌨ FUTO keyboard for Android has learned to add a background image

infoek-cz.translate.goog/futo-…

#FUTO #Opensource #Android #Mobileapps #Privacy

Here's the christmas question of the day. Do you believe that the 12 days of christmas compounds or just lists the things you get as a reminder? Watched some christmas movie I had never heard of with Eddie murphy in it called Candy Cane Lane where this dude signs a contract with an elf gone bad (think sell your soul to the devil). Elf tells him that he needs the five golden rings or he'll turn into an ornament but gets him on a technicality by saying nope, you really need 40 rings because 5 golden rings appears 8 times in the song. Sneaky. So. Does it compound? or no. Thoughts?

Last week, I threw together Syntherceptor, a SAPI5 synthesiser which speaks using NVDA. This is useful for apps like Komplete Kontrol, Surge, etc. which use SAPI5 but you'd prefer the speech output to happen using your NVDA synthesiser and settings. This also prevents voices from speaking over each other, allows you to interrupt speech with a key press, etc. There is an existing project called NVDASapi which already does this, but we can't seem to identify or contact its developer, it isn't open source, it doesn't interrupt speech when the app requests it and it's a bit tricky to install. That said, Syntherceptor is very early in development, so you may wish to tread carefully. If it crashes, it'll probably crash the app you're using, so save your work regularly, though I haven't seen that happen yet. syntherceptor.jantrid.net/

reshared this

Christmas PSA about not being a dick

Sensitive content

reshared this

Can you imagine if the billionaire tech bros were spending all their energy developing solutions to clean the planet and distribute resources better instead of incessantly enshittifying our lives and trying to devaluate labour?

What a different world that would be.
I wish them all a Ghosts-of-Christmas experience.

This entry was edited (1 day ago)

@Friendica Support i really wish there was another option for having a dark theme in #Friendica. i would like having a multi-shade black / charcoal page, with lavender / violet accents, but so far have not found a way to achieve it (note, for many years i used to use the #Stylus AddOn, with which i created numerous custom themes for many sites, but a year ago i disabled it & others as part of my desire to begin minimising all non-essential AO attack surfaces). Though in many ways using #DarkReader for Friendica is quite good, overall i tend to eschew it being on for this site, coz it hides that handy temporary shading highlight of posts in a thread for which a Notification was received.

The small number of current dark themes offer me a rather unappealing colour choice.

The custom theme option initially excited me, til i realised, afaict, it is based on the Light theme, with no Dark theme option, so that all the dialogue boxes & dropdown menus remain eye-piercingly bright white, that hurts my eyes. The least-worst i could conjure was

{"nav_bg":"#54207b","nav_icon_color":"#f3d0f1","link_color":"#5b38a6","background_color":"#5b4d71","background_image":"","contentbg_transp":"42"}

but as mentioned, too much blinding white remains.

inevitably then, i keep returning to the so-called Black theme, but it is... quite boring. the entire page is simply all a single "shiny" black tone, with my chosen accent relieving the monotony. compare this to the so-called Dark themes, to see the difference; they use different shades of the base colour, which is more visually appealing, creating a "panelled" effect.

in reply to Droppie [opensoc]

well well well, i have synthesised a pretty comfy workaround. the basic problem ofc remains, which is why i call this a workaround not solution.

  • my daily browser is :firefoxnightly: , hence can/does use the Mozilla-created AddOn #SideView (which tbh i always misremember as being #OpenInSidebar)
  • i have reverted my #Friendica Settings Display theme to the default Light [ow ow ouch, my poor eyes!]
  • i have re-enabled the AO #DarkReader for this site (eyes go phew!)
  • once again now, per my OP, if i access my received Friendica Notifications in the main page, Dark Reader entirely hides the momentary shading / highlighting of the applicable post... ie, most unhelpful
  • however, when viewing my account in the sidebar, via Side View, the Dark Reader AO does not work, so i see only the underlying Light theme. this is usually a large disadvantage IMO of using Side View, but in this specific scenario, it is actually handy...
  • if, hereafter, i open my account Notifications not any more in the main page, but in the sidebar, still being the Light theme means i now DO get to see that helpful momentary shading / highlighting of the applicable post
  • yes it is blinding, but less so than the main page coz its area is much smaller, plus i am only in that sidebar view for seconds, after which i revert to its default, being #TreeStyleTab.
  • so far, this new workflow seems quite good

fwiw.

Bluesky suspending antifascist researchers for sharing publicly available information about literal nazis.

Should be no surprise considering bsky constantly protects nazis, the far right, and all flavors of bigotry at the expense of Palestinians and trans women.

Fortunately, their information already spread so far and wide that at least half of the Blood Tribe nazis lost their jobs following the mass doxx. Chris Pohlhaus, leader of BT, estimated financial losses at over $2 million lol. Happy holidays!

#AndroidAppRain at apt.izzysoft.de/fdroid/?radd=1… today brings you 15 updated and 1 added apps:

* Auto Light: a specialized replacement for the standard Android adaptive brightness feature 🛡️

6 #Magisk modules have been updated at apt.izzysoft.de/magisk

Enjoy your #free #Android #apps with the #IzzyOnDroid repository :awesome:

I suspect far too many of us are trapped in cycles of escape that consume all our time, attention, and energy rather than the things we would like to create.

I'm hooked on watching hours of YouTube videos, and I justify it by clinging to the positive that is that it feeds my 'random number generator' and allows my brain to do a lot of thinking in the background.

But I have all sorts of projects that I'd like to develop and work on that I never seem to have the time or energy for.

I talk myself out of blocking time for things because my attention might be called away or I will spend the next 82 hours working on it because of hyper-focus.

I'm personally averse to routine, and that's something I'm working to change, or at least do in moderation.

Then, I feel overwhelmed and reload the YouTube tab, and queue up another video.

Problem for future Bob. ;)

Usually when Christmas is over, I instantly cut the Christmas music with a click. This has been the case for years. This year, what I will do instead is disable it, re-enable the normal music, then let the Christmas music empty itself from the queue. This way, rather than closing out with a bang, we slowly return to normality. Hopefully this keeps the
spirit going for a bit longer, without an abrupt ending.

During the year’s busiest season of charitable giving, donors may wonder whether the nonprofits they are considering donating to are going to be good stewards of their money.

Our Nonprofit Explorer can help you look into that: propublica.org/article/propubl…

#Nonprofit #Charity #Research #Donate #Holidays #Finance

Today I learned why Sonata #TTS created a framework to run AI voices outside of #NVDA. First, NVDA doesn't come with all of the #Python standard libraries. Second, there's no good way of updating dependencies in a bundled addon. Third, NVDA really, really hates it if you include several hundred dependencies in your addon. Anyway, here's kitten TTS, the other synthesizer I wanted to try with NVDA. Unfortunately, the model doesn't support streaming output, so even though it's actually faster than Supertonic, it feels slower when used with NVDA. Also, it takes several minutes to install, makes NVDA startup 30 seconds slower, and freezes the change synthesizer dialogue for about 45 seconds when you open it. It does miss words less frequently, though, and pronounces text better. The ultimate result of my two-day investigation is that even the highly optimized open-source AI imbedded models are not yet ready for screen reader use. Some tree-shaking could fix some of these issues, but it still won't allow for streaming, so it's not worth it. I'd really like to know what Microsoft and Narrator are doing to get the natural voices so snappy. github.com/fastfinge/kittentts-nvda/#screenreader

Peter Vágner reshared this.