🇨🇦

  • 11 Posts
  • 1.05K Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • Given the mechanical saftey built into those switches, Unfortunately I guess that leaves us with two reasonable possibilities:

    A) One of the pilots was somehow mistaken on the function of those switches and toggled them when they should not have. Then they genuinely thought they hadn’t when asked why they had cutoff fuel.

    Or

    B) One of the pilots chose to cut off fuel supply to both engines, intentionally bringing down the plane. They then lied to the other pilot when asked why they’d cutoff fuel.













  • An $11/yr domain pointed at my IP. Port 443 is open to nginx, which proxies to the desired service depending on subdomain. (and explicitly drops any connection that uses my raw ip or an unrecognized name to connect, without responding at all)

    ACME.sh automatically refreshes my free ssl certificate every ~2months via DNS-01 verification and letsencrypt.

    And finally, I’ve got a dynamic IP, so DDClient keeps my domain pointed at the correct IP when/if it changes.


    There’s also pihole on the local network, replacing the WAN IP from external DNS, with the servers local IP, for LAN devices to use. But that’s very much optional, especially if your router performs NAT Hairpinning.

    This setup covers all ~24 of the services/web applications I host, though most other services have some additional configuration to make them only accessible from LAN/VPN despite using the same ports and nginx service. I can go into that if there’s interest.

    Only Emby/Jellyfin, Ombi, and Filebrowser are made accessible from WAN; so I can easily share those with friends/family without having to guide them through/restrict them to a vpn connection.



  • I use cloudflared to translate DNS into DNS over TLS instead of Unbound to make it into recursive DNS. Just never really seen the need to switch it. I’m happy with nextDNS + Cloudflare resolving DNS upstream.

    The main thing I wanted to note is port 53 outbound is blocked at the router to prevent devices from using external/unencrypted DNS. If a LAN device wants DNS resolution they MUST use the LAN DNS servers they were given via DHCP, or use their own DoT config, as plain DNS won’t make it out of the network.

    It’s because of this block/enforcement that I run two local DNS servers: pihole on an RPI and a mirror on my main server tower, with Galaxy-Sync keeping them identical. If I tinker with/update one, the other picks up the slack so connectivity/resolution isn’t disrupted.



  • Hard to say for sure really.

    I can respect someone’s religious views as long as they aren’t trying to push them on me. That’s to say; not trying to make me believe the same or insist that I have to follow the rules of their chosen religion.

    As far as my own views go; I don’t follow any particular religion. I don’t necessarily believe there isn’t some form of god, but I don’t follow/believe in any specific deity either. Maybe there is, maybe there isn’t; but there have been hundreds of thousands of gods/goddesses/deities/religious figures throughout human history. Who’s to say you’ve chosen the correct one, along with the correct set of (sometimes oddly specific) rules and regulations to go along with it?

    You want commandments to follow? Here’s one:

    “Don’t be an asshole”

    Everything else kind of just falls into place around that. As long as we can respect each other and our differences; yeah, romance is certainly possible.