2xsaiko

joined 2 years ago
[–] 2xsaiko@discuss.tchncs.de 1 points 2 months ago (3 children)

Oh interesting, I’ll have to look into that. Is this with that “proxy protocol” I’ve seen mentioned? If not, does this preserve it pass through the client socket address?

[–] 2xsaiko@discuss.tchncs.de 2 points 2 months ago (6 children)

Tbf, technically data is still decrypted at the reverse proxy and then re-encrypted. So if someone manages to reconfigure the proxy or read its memory somehow they could read traffic in plain text.

However then since they have to control the VPS, they could also get a new cert for that domain (at least the way I’ve configured it) even if it was passed as is to the real host via a tunnel and read the plaintext data that way, so I don’t think a tunnel protects against anything.

[–] 2xsaiko@discuss.tchncs.de 4 points 2 months ago

Oh my god more work on the Dark Engine multiplayer. I really hope they finally release the source code for the engine like they promised ages ago with this remaster. Maybe they’re also the ones behind the new mysterious NewDark update?

[–] 2xsaiko@discuss.tchncs.de 13 points 2 months ago (1 children)

If someone manages to get root (!) access on this VPS it's over either way.

[–] 2xsaiko@discuss.tchncs.de 4 points 2 months ago* (last edited 2 months ago) (11 children)

Yes, you can just use a reverse proxy for IPv4 only and point it to the IPv6 upstream. That is what I do, with a separate DNS record which then combines the two. See the DNS records for id.knifepoint.net (CNAME), http.vineta.knifepoint.net (AAAA, A) and vineta.knifepoint.net (AAAA).

The reverse proxy config and certificate management is set up with NixOS, if it helps: https://git.dblsaiko.net/systems/tree/nixos/defaults/v4proxy.nix https://git.dblsaiko.net/systems/tree/nixos/modules/sys2x/v4proxy.nix

[–] 2xsaiko@discuss.tchncs.de 6 points 2 months ago (1 children)

iOS: 3-finger tap to get a bar with undo/redo and copy/cut/paste buttons.

[–] 2xsaiko@discuss.tchncs.de 1 points 2 months ago

I’ve started doing this recently. It’s fun, I’m also scanning the album covers and manually typing in the lyrics from the booklet in the CD in addition to all the other track metadata haha

[–] 2xsaiko@discuss.tchncs.de 2 points 2 months ago

Two different rDNS names, for stuff that uses it. For example if you want to run mail and an IRC bouncer under different domain names.

[–] 2xsaiko@discuss.tchncs.de 2 points 2 months ago (2 children)

woagh. need someone to do this to me. or need to do this to someone. tbh

view more: ‹ prev next ›