In-reply-to » been thinking about trying arch linux but no i will not become the type of person that uses arch

@kat i’m an LXQt girlie for life and i like the convenience of apt despite that they never update their god damn packages so i guess i’m stuck on lubuntu for everything

⤋ Read More
In-reply-to » @kat i'm reading this and i already have a gts server that i could secure with this but i'm thinking it'd be best for most of my public sites https://ovelny.sh/blog/a-complete-guide-for-your-gotosocial-server/

@kat wow, thanks for sharing that guide! I have now used it on my better tuned instance. Woot!

⤋ Read More

i’m pretty sure i’m running this all off sqlite so if i get too many users on here i might be cooked but oh well i can always try to migrate (<– has heard migrations from sqlite to mysql/postgres are hell)

⤋ Read More
In-reply-to » i thought about making a chill little vlog putting together my new pi4 for KVM purposes but unless i make it go fast somehow i'd probably quickly exceed the 30 mins on the last mini DVD i have for recording lol

@kat i still need to put it together so either i’ll do it off camera or i’ll wait till i get my memory card

⤋ Read More

i thought about making a chill little vlog putting together my new pi4 for KVM purposes but unless i make it go fast somehow i’d probably quickly exceed the 30 mins on the last mini DVD i have for recording lol

⤋ Read More
In-reply-to » hmmm i really should set up crowdsec and maybe a WAF like coraza or something. i don't look at my logs as much as i should because they scare me and ignorance is bliss but i should probably cut out as much false traffic as possible especially to my biggest site (superlove)

@kat i’m reading this and i already have a gts server that i could secure with this but i’m thinking it’d be best for most of my public sites https://ovelny.sh/blog/a-complete-guide-for-your-gotosocial-server/

⤋ Read More

hmmm i really should set up crowdsec and maybe a WAF like coraza or something. i don’t look at my logs as much as i should because they scare me and ignorance is bliss but i should probably cut out as much false traffic as possible especially to my biggest site (superlove)

⤋ Read More
In-reply-to » Any idea What's this "twtxtfeevalidator/0.0.1" UA about? I thought I could ask before throwing a 1000GB file at it 🪤 could it be the same 'xt' thing @lyse was talking about the other day?

OHHH THIS IS EPIC YALL TY i’d love to try this!!!

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

Hmm, yeah, I am doing something wrong. Same is happening with any site to which I apply the this.

Is there a reason you forked this from mholt? What was added, or changed? Your “Initial commit” throws an error.

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

On a test I ran, with a static site that is a PWA, like this:

example.com {
        root * /web/example.com
        route / {
             rate_limit {path} 20r/m
             file_server
        }
}

It works (as limiting rate), but when rate isn’t reached, the page doesn’t render. Not sure what could be going on.

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

Note for reference I was trying to write and fix this rule (fixed version below):

# Ignore Content-Type restrictions for Git
SecRule REQUEST_HEADERS:Host "@streq git.mills.io" "id:101,phase:1,t:none,nolog,ctl:ruleRemoveById=920420"

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

I’ll try to add a README for caddy-waf soon™ (going back to bed now) at least document the customizations I’ve made to this WAF (which I forked from caddy-coraza)

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

This is how I build my caddy:

proxy-1:~# cat build.caddy.sh
#!/bin/sh

xcaddy build \
	--with github.com/caddy-dns/cloudflare \
	--with github.com/caddyserver/cache-handler \
	--with git.mills.io/prologic/caddy-ratelimit \
	--with git.mills.io/prologic/caddy-waf
proxy-1:~#

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

Ahh fuck! Sorry I was fixing a rule 🤣 This is much better!

proxy-1:~# grep -c 'Bad ASN' /var/log/caddy/caddy.log
2441

⤋ Read More
In-reply-to » Cool! 😎 So I can now block ASN(s) 🤣 (And I bet no-one noticed anything)

So this should build caddy with both modules:

$ xcaddy build --with git.mills.io/prologic/caddy-ratelimit --with  git.mills.io/prologic/caddy-waf

Right?

⤋ Read More
In-reply-to » Where is all this wind suddenly coming from?

@lyse@lyse.isobeef.org The west. Nasty wind is always coming from the bloody west. (My apartment is facing the west and so I get to enjoy all the storms. 😂)

Good weather/wind comes from the east. (Which makes all the planes approach from the west again and so I get to enjoy their noise. 😂😂)

⤋ Read More