shibel · HackerTrans

26 gün öncediscuss

This is crazy. I just got the CCX33 last week to migrate a Heroku db to it, that seems to have jumped over 100% now…? Need to reconsider

Edit: just noticed this is not retroactive. Still concerning looking forward.

shibel

27 gün öncediscuss

Super interesting. I’ve been failing hard at gaining weight. Intrigued. I hope you don’t hesitate to make the app paid if you find the justification.

shibel

30 gün öncediscuss

A bit O/T but:

> I have never been a big fan of pull requests.

I guess this partly explains why Zed (still) lacks a PR review flow, let alone a coherent one, despite some interest [1]. Pretty much the only reason I’m still with JetBrains.

[1]: https://github.com/zed-industries/zed/discussions/34759

shibel

geçen aydiscuss

Maybe…I really didn’t want to have to install another app just because I’m sharing though. My line of thinking was/is:

If tomorrow I decide not to share with anyone, I don’t want to have to reconfigure stuff. I simply edit the Tailscale policy file, and (maybe) spin down my server.

shibel

geçen aydiscuss

I need to finish off that blog post.

With Tailscale, you can basically point a domain to the FQDN of a machine you’re sharing with people and the domain will simply work for them (and only them)[1]. But for it to work without them having to know or specify the specific application port, you have to grant them access to 443 (and 80) in your Tailscale ACL for that specific host.

So yeah, now immich.familydomain.com works without family members having to remember the specific port. BUT, serveradmin.familydomain.com (another app on the same host) will ALSO be accessible to them (from a networking POV). We opened port 443/80 for that host after all.

I took a few hours with Claude back in January (?) and we wrote a tiny Go authorization gateway which basically consults both Tailscale’s public API and Tailscale’s `localapi` and returns the appropriate response to Caddy based on the requesting user’s actual allowed ports.

So now I can share different apps (subdomains) with different people without forfeiting access controls, all driven by Tailscale’s policy file.

(I hope I didn’t mess up the crux of it, pretty late here)

Edit: why not (something like) Authentik? Quoting from the draft:

  I contemplated this for a bit but one thing I kept thinking about is:

  _They're already logged in to Tailscale_

  Why do I need to install and configure another full-blown app dedicated to doing something Tailscale already did? Why have the users go through two hops of authentication?”

[1]: https://www.youtube.com/watch?v=Vt4PDUXB_fg

shibel

5 ay öncediscuss

Reminds of a neighbor I had back when I was renting in a big city. He didn’t seem to understand what’s wrong with keeping his TV on for very long periods broadcasting the sleaziest (at least at the time) reality show on full volume.

I tried talking to him multiple times to no avail. He’d basically say “yeah I’ll pay attention no problem” but nothing changed for weeks.

Coincidentally at that time I was working morning shifts at a radio station. Those start really early so you gotta wake up at around 4am.

I decided one day to change my alarm (triggered on my Sony Vaio) from the peaceful iPhone-like tunes to System of a Down’s “Chop Suey”. I also decided to forget it on, on repeat, full volume, while leaving the apartment.

I don’t think 3 days passed before he knocked loudly at my door, moaning and complaining.

I told him: “you gotta understand, your TV was so loud I couldn’t sleep for nights on end, the old tune wouldn’t wake me up anymore. I had to change it. I’m so tired that I even forget to turn it off.

But yeah, I’ll try to pay attention to it”

shibel

6 ay öncediscuss

Astro is great. It checks all of my checkboxes. I hope this is not the beginning of the end.

comments