I use Alpine Linux so yeah, I am using something by Linux

It’s not ideal but I don’t have the time to find alternatives for everything all at once, just one thing at a time which is the pace I am going. I’ll deal with it when the time comes but it’s in the back of my mind

I don’t expect perfection out of anyone. I would not make friends if I held them to such high standards or expectations. Everyone learns, adapts and grows at their own pace and I would do better to support them along the way through their journey

Myself and the people around me are doing our best in this situation we are in with the tools that are currently available to us

I don’t believe trying to reduce the complex human experience to 100% right or 100% wrong will lead to any useful discussion when there’s so much in the middle we could be discussing

That’s true, it CertBot seems to be quite mature

It was a bit overwhelming for me when I first started into self hosting, there were a lot of concepts that I had to wrap my head around first before I could look into using CertBot itself

Awesome, thanks so much, this is a big head start for me

I have a good idea how I want to organize things now

I definitely expect this path to be a bit of a challenge

I was looking at lighttpd as well. That was the only one on the list that sounded familiar to me. I may check it out and see if it can fit me needs. I do run a very minimal setup so I might just be enough.

I also make use of Caddy’s built in file server to serve static pages so this is good to know about HAProxy

Thank you, I’ll have a look at lego-acme, it looks interestingly. I prefer to use cron so this is could be something I would consider using.

This is great, thank you for taking the time for this write up :) The provided scripts are a huge help to me

So far my only question I have is about the directories you use. I was wondering if you could provide the directories you use or even just an example so I could better understand the file tree. I’m very particular with my files and have a whole system dedicated to maintaining neat and organized files

I agree about not using /etc for server related stuff. I keep all my server/container related stuff in /srv so it’s easier for me to manage

I’ve used NPM before and it is quite simple and easy to use, however I do have a preference for CLI tools

Impossible? There are people who still write code by hand. There are people who oppose AI, some more actively (or destructively) than others.

Harder to avoid seems like a more reasonable take.

However I am coping, by actively seeking, talking about and supporting alternatives with the hope of spreading that knowledge to those who would like to avoid the use of AI or enable those who support AI.

Human creativity has a much longer and far more interesting history when compared to AI or machine learning. AI hasn’t always existed and does not need to have complete influence over our future.

I personally feel like taking money from an AI sponsor is enabling behaviour. From that perspective, I do not want to support that type of behaviour.

I don’t think you are in the wrong here. You clearly stated your wants and so many replies here have simply ignored what you have said. The response to your post has been strange

How would trace the echo reply in the output chain? I tried adding meta nftrace set 1 directly to the ICMPv4 rule as well as making a chain postrouting rule but I can’t seem to figure it out.

I tried what you said. I sent a ping from my computer to the server and this was the output of nft monitor trace:

trace id 1d01c81e ip ping_trace prerouting packet: iif "eth0" ether saddr b0:7d:64:e8:8f:3c ether daddr d8:3a:dd:de:28:99 ip saddr 192.168.40.201 ip daddr 192.168.40.203 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 65074 ip length 84 icmp type echo-request icmp code 0 icmp id 35586 icmp sequence 0 
trace id 1d01c81e ip ping_trace prerouting rule icmp type { echo-reply, echo-request } meta nftrace set 1 (verdict continue)
trace id 1d01c81e ip ping_trace prerouting policy accept 
trace id 1d01c81e inet filter input conntrack: ct direction original ct state new ct id 271120081 
trace id 1d01c81e inet filter input packet: iif "eth0" ether saddr b0:7d:64:e8:8f:3c ether daddr d8:3a:dd:de:28:99 ip saddr 192.168.40.201 ip daddr 192.168.40.203 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 65074 ip protocol icmp ip length 84 icmp type echo-request icmp code 0 icmp id 35586 icmp sequence 0 
trace id 1d01c81e inet filter input rule ip protocol icmp icmp type { echo-reply, destination-unreachable, echo-request, time-exceeded, parameter-problem } accept comment "Accept ICMP" (verdict accept)

I sort of get what’s happening and it looks like the ping request has been accepted.

From my computer when I send a ping it shows:

15:55 dell:/tmp/ $ ping -c1 192.168.40.203
PING 192.168.40.203 (192.168.40.203): 56 data bytes

--- 192.168.40.203 ping statistics ---
1 packets transmitted, 0 packets received, 100% packet loss

So even though it’s being accepted, I still get nothing going back to my computer, at least that’s how I understand it.

I’ve been to Gay pride parades, gay bars and gay clubs. The gayest experience I’ve had in my life was working in the trades with straight men doing everything they can to prove their masculinity at all costs.

These men will use women as mere possessive objects in order to prove to their masculinity towards other men. By oversexualizing all women while at the same time belittling all that their partner does. As if women were merely currency for respect among men.

They hated gays and trans people so much that they would spend an extremely uncomfortable amount of time telling you how much they were “disgusted” by these people.

They hated on any man who who did not possess physical masculine traits. Those traits that they hated? Not being muscular. Not being tall. Not being fat (what???). Having longer hair.

But the gayest thing these guys refused to do was stand up for themselves against unjust authority. They would spend the most all their free time explicitly telling you how much they hate their boss. How stupid their boss is. How much of an asshole their boss is. How they would kick their bosses ass. Just talk an absolute big game.

Then the boss would come around the corner and you’d never see a bunch of grown ass men tuck their dicks between their legs faster than these guys. Their voices raise up a couple pitches and suddenly they are acting as subservient as how they believe their wives should be.

It’s in this unspoken idea of respect for Men in Authority that you see the “gayest” trait in these toxic men. But not in a good gay way. A toxic gay trait that comes from a deep place built on oppression and repression of ones self. Where respect from your fellow man at all costs is the most valuable thing they crave. Where respect from your boss holds even higher value. Where respect from men in higher positions is held at even higher value.

All they care about is to be noticed by other men. That’s kinda gay dude.

The cost of all this effort to gain respect from exclusively other men is their dignity. And they are more than willing to give up their dignity to be noticed by men in positions of authority.

To these guys, questioning or standing up to authority is gay. Standing up for yourself is gay. Demanding to be treated with dignity is gay. They will be the first ones to kick you down for disrespecting authority.

I’ve walked into a club bathroom and saw two guys giving another guy a blowjob. That’s still not as gay as watching “straight” acting men grovel at the feet of boss in any trades.

Ick…