DarkSirrush

joined 2 years ago
[–] DarkSirrush@lemmy.ca 3 points 2 weeks ago

Cats, foxes and the shelter iirc.

[–] DarkSirrush@lemmy.ca 5 points 2 weeks ago

At least here in BC, every time you get a DUI the temporary suspension, breathalyser requirement, fines/fees (including a yearly fee that has to be paid before your can renew insurance based on total infraction points) and AA meetings all get increased. The first DUI costs $3000 and 3-6 months without a license, the 5th would likely cost over $15000, 18-24 months without a license, with a yearly fee of $4000 for 5 years. You would also have to do a road test if you didn't have a valid license over (I think?) 2 years.

[–] DarkSirrush@lemmy.ca 67 points 2 weeks ago (1 children)

iirc the reason it isn't used still is because even with it being trained by highly skilled professionals, it had some pretty bad biases with race and gender, and was only as accurate as it was with white, male patients.

Plus the publicly released results were fairly cherry picked for their quality.

[–] DarkSirrush@lemmy.ca 2 points 2 weeks ago

They are starting to get recursive too, where character from a fantasy world gets isekai'd to a different fantasy world with a magic system similar enough their magic knowledge gives them a huge edge, or their original world OP starting skill that they had severe social limitations on using doesn't in the new world.

[–] DarkSirrush@lemmy.ca 3 points 2 weeks ago (3 children)

I am definitely not the best at networking, but can't you do that through your current dhcp client?

[–] DarkSirrush@lemmy.ca 2 points 2 weeks ago

Wonder who Tesla paid off to make that "true"

[–] DarkSirrush@lemmy.ca 8 points 2 weeks ago (1 children)

I bet they are an orange cat.

[–] DarkSirrush@lemmy.ca 1 points 3 weeks ago (1 children)

Try using the share option, and choose firefox?

[–] DarkSirrush@lemmy.ca 6 points 3 weeks ago

The middle of the pride flag?

With German written on it?

[–] DarkSirrush@lemmy.ca 2 points 3 weeks ago* (last edited 3 weeks ago)

I can share my traefik setup - note I am doing this on my phone at work, so I might miss something

compose.yaml

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.middlewares=authwares@file"
  GNU nano 7.2                      /config/traefik/dynamic/middlewares.yaml
http:
  middlewares:

    limit:
      buffering:
        memRequestBodyBytes: 5000000000
        memResponseBodyBytes: 5000000000
        maxRequestBodyBytes: 5000000000
        maxResponseBodyBytes: 5000000000

    authwares:
      chain:
        middlewares:
          - default-headers
          - authelia
          - limit

    default-headers:
      headers:
        accessControlAllowHeaders: "content-type,authorization"
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
          - POST
          - DELETE
        frameDeny: true
        accessControlAllowOriginList: "*"
        accessControlMaxAge: 100
        addVaryHeader: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        referrerPolicy: "strict-origin-when-cross-origin"
        customRequestHeaders:
          X-Forwarded-Proto: https
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
          server: ""
          X-Forwarded-Proto: "https,wss"
        hostsProxyHeaders:
          - "X-Forwarded-Host"

    authelia:
      forwardAuth:
        address: http://auth/api/verify?rd=https%3A%2F%2Fauth.example.com%2F
        trustForwardHeader: true
        authResponseHeaders:
          - "Remote-User"
          - "Remote-Groups"
          - "Remote-Email"
          - "Remote-Name"
  GNU nano 7.2                            /config/traefik/traefik.yaml
global:
  checkNewVersion: false
  sendAnonymousUsage: false

entryPoints:
  web:
    address: :80
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: :443
    proxyProtocol:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    forwardedHeaders:
      insecure: false
      trustedIPs:
        - 172.32.0.0/16
        - 192.168.1.0/24
    http:
      tls:
        options: modern@file
        certResolver: letsencrypt
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  providers:
  docker:
    exposedByDefault: false
    network: compose_proxied
    allowEmptyServices: true
    endpoint: "http://socket:2375/"
    defaultRule: "Host(`{{ index .Labels \"com.docker.compose.service\"}}.example.com`)"
  file:
    directory: /config/dynamic
    watch: true

api:
  insecure: false
  dashboard: true

certificatesResolvers:
  letsencrypt:
    acme:
      email: acme@example.com
      storage: /certificates/acme.json
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"

log:
  level: DEBUG
  filePath: /config/logs/traefik.log
  format: json
accesslog:
  filepath: /config/logs/access.log
  bufferingSize: 100
  format: json
[–] DarkSirrush@lemmy.ca 16 points 3 weeks ago

Can we punch her harder?

[–] DarkSirrush@lemmy.ca 2 points 3 weeks ago (2 children)

Note that its also possible to set up service auto discovery with traefik, the only traefik related config I do on new containers is

Traefik.enabled=true
view more: ‹ prev next ›