I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
Ah. That makes sense.
Interestingly the game is downloading for me. I have had it in my library for some time now.
Is it saying its been pulled for new sales only?
I do similar. For laptops and docks, especially if they change setups it can be a pita (though you just need to copy files around).
Also the DE monitor config (ie that you use to login) is logically different to a users x config. So you gotta copy that over to make sure the primary monitor etc is right.
There are quality docks that work on displaylink. The dell D6000 is one example and we issue them out freely at work.
Most third party off brand docks will have higher failure rates. We see that with some anker docks that were usb-c+pd we use/had to source during the great supply chain snafu during covid. They worked in a pinch but aren’t reliable like a Lenovo or Dell dock. That’s less a displaylink thing and more a cheap dock thing.
DisplayLink compresses everything over usb. If you plan to do anything color sensitive (ie photo editing) or latency sensitivite (ie: games) it’s a bad idea sine it’s all cpu compression.
That said. They are great for multi monitor general usage (ie soreadhseets and shit) or for systems with graphic card limitations on multi display output (ie low end macs on m1/m2)
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
MS goes out of their way to make shit harder than it needs to be.
For example. The store, they have a store for business where you can simply whitelist known apps buts it’s a PITA to setup AND they have been threatening to decom it for ages
https://learn.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview
Want to add safety/security features like secuirty keys. Well if you do it on a non domain joined machine you can just sign into a m365 account to enable a passkey or yuibijey as a second factor.
Want to do that in a business environment. Congrats now you have to deploy a windows CA and issue user certificates to tie to this. Even if you are signing the machine into m365 with ADAL.
They go out of their way to add complexity and failure points.
Tthe problem is now if you have the store disabled basic shit, like the ability to open .heic files is broken or use stuff people want like sticky notes is broken.
We turn off most of what we can’t but having the store enabled causes all sorts of stuff.
Also windows 11 has ads baked in even with the store disabled. Plug in a Logitech mouse, get a pop up for their software. Open the picture viewer and get an ad to install some video editor that isn’t clear whether it’s a Ms product or not.
No to mention basic things like copy paste and edit are now weird icons because I guess they think most users are illiterate.
Most of the 11 UI changes are not for the better. Having to beta test it for work is frustrating and I run an IT shop.
This post/video recording of the mandatory meeting when she left was…interesting
Not as uncommon as you would think. What normally do then is use the 6 month releases until the next LTS
I have been using this hub. Works fine in Linux and windows.
https://www.amazon.com/gp/aw/d/B0871ZHCKK?psc=1&ref=ppx_pop_mob_b_asin_title
I also use this usb dongle for my Xbox controller. It works fine in Linux. I really should try playing a few games on Linux.
https://www.amazon.com/gp/aw/d/B0785SFKYF?psc=1&ref=ppx_pop_mob_b_asin_title
I’m curious if findings do come out. Would YouTube cancel or demonitize them?
I dont really follow linus, mainly beceause I never really got the appeal overall. But i do play games and stuff so his content does cross my path here and there, but maybe I only see him during drama times like this. But this whole puppy dog face apology thing has to wear thin after a while…
I mean it seems like a dog and pony show to me and I hardly ever watch his content. How many times do you have to do stuff like this, apologize, etc then rinse repeat before people start catching on.
Yeah. Like I said, i have no idea what the conditions are. Maybe its Cloudflare threatening/applying pressure and LW has been getting smacked with DDOS etc.
But maybe not too. I strikes me as a excuse but honestly i dont know all the details or variable and frankly i dont care all that much.
Yeah im similar. I still use 1080 monitors and just 2 at a regular workspace. Its about the perfect DPI for reading text. Things like 4k just make it harder or you have to bump up the fractional scaling, in which case why the more pixels?
Im fine to keep it to a laptop monitor when im mobile, and 2+laptop monitor for email when at a desk.
Text is copied. Media is simply linked back to the original location I believe.
Also dmca just means that the admin has to make a reasonable effort to remove things reported as no compliant. Aka they ban or remove offending posts and they are in the clear.
I’m gonna be honest. And I run my own instance, albeit solo, this content isn’t my concern. It’s the CP/CSAM shit that folks like burggit.moe we’re spreading that got my liability concerns up. The feds go hard on that shit (as they should) and will hold a hosting admin accountable as if they were the ones viewing and reading it.
Dmca is pretty clear cut and toothless. I’ve dealt with it plenty as a network admin. As long as you remove it when notified, you are in the clear. This strikes me as the admins having a political opposition to it and using their made up code of conduct as a reason and when pressed just saying “well liability”.
That said I don’t know where they live and the laws for me may not be the same as someone hosting in Germany, who may go hard on that stuff. So who am I to judge? Just saying dmca isn’t really a concern.
Also they’re hosting provider could just cut them for “abuse” especially if they are already using a lot of resources and if that’s a concern I get it. .
I have NSFW unchecked on my instance, so no porn is ingested/federated. Also because its just me, i have to seek out communities to federate with via search.
I did this via https://lemmyverse.net/communities and changed the linked names to my domain and just ran searchs to start the federation for the specific communities i found interesting.
It does mean things like “Local” is useless and subscribed and all are the same filters since its only stuff i subscribed to.
Occasionally I will browse one of alts on a different instance and check all, or local there and see if theres anything interesting. I have also re-run through the link above here and there to find new communities to join. Those are probably the biggest “pain points” in that it takes more effort to find new communities. But once you start the feed its fine.
I also use different default filters on my alt’s in different instances (ie: ALL:HOT on lemmy.world) or whatnot if im feeling like finding new stuff. But honestly the lemmyverse stuff gets like 99% of the content here, and theres been a dip in participation, so some communities are idling (which just means I dont see anything)
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.