Anyone want to take bets on how long until right wing influencers start talking about how Red No 3 cures COVID/cancer/brainworms and how the government is trying to take it away because of how good it is, while posting a video of themselves chugging gallons of it on TikTok to own the libs?

Anything to avoid calling it a tax because Republicans could never introduce a tax! This is EXTERNAL revenue from TARIFFS. 😉

Traefik basically has certbot built in so when you configure a new hostname on a service it automatically handles requesting and refreshing the cert for you. It can either request individual certificates for each hostname or a wildcard certificate (*.yourdomain.com) that covers all subdomains.

The neat trick is that in Docker you configure Traefik by adding Docker tags to the other containers you want to proxy. When you start up a container, Traefik automatically reads the config from the tags, does any necessary setup, then viola it’s ready to go!

Basically the Cloudflare tunnel client connects from the computer running your services (or proxy) out to Cloudflare’s edge servers and your DNS hostname is set to the IP of one of Cloudflare’s edge servers. Cloudflare acts like a reverse proxy by sending incoming SSL requests for your hostname to your tunnel client through their own network. The DNS record doesn’t expose your public IP and the Cloudflare tunnel client easily works behind firewalls, NAT, and doesn’t need a static IP because it connects outbound to Cloudflare’s network.

The biggest limitation is that this only works for SSL traffic because it can be routed by hostname in the SNI without needing a client on the client side. They do offer tunnels for other connections, but that requires their client running on both sides so it’s more like a traditional VPN again.

I’d add that Traefik works even better with Docker because you tag your other containers that have web ports and Traefik picks that up from Docker and terminates the SSL connection for them. You don’t even have to worry about setting up SSL on every individual service, Traefik will take care of that even for services that don’t implement SSL.

It is possible to get wildcard certificates from LetsEnrcypt which doesn’t give anyone information on which subdomains are valid as your reverse proxy would handle that. Still arguably security through obscurity, but it does make it substantially harder for anyone who can’t intercept traffic between the client and server.

The biggest reason to use VPN is that some ISPs may take issue with you running a web server over a residential service when they see incoming HTTP requests to your IP. If you don’t want to require VPN, then Cloudflare tunnels are perfect for this and they also solve the need for dynamic DNS if you want to use static domain because your domain points to the Cloudflare edge servers and they route it to you wherever your tunnel endpoint is running.

Past that, Traefik is a great reverse proxy that can manage getting LetsEnrcypt SSL certificates for you even with wildcard domains and would still work fine with dynamic DNS.

Replace it with a picture of Elon and include his attempts to influence the UK and German elections right after influencing the US election…

deleted by creator

I just wanted to mention the esoteric programming language INTERCAL, which was created with the idea to be unlike every other programming language as much as possible.

For example: The creators wanted to include GOTO because of how maligned it is with programmers, but since GOTO exists in many languages already they instead created the COME FROM statement which also makes the arbitrary jumps in execution even more confounding when trying to read the code.

Thank you for pointing out my missing quotes! I also mistyped “land” instead of “land that will be useless to future generations”. 🫠

Cheap land, conservative values, and low taxes: the siren call for ancient fixed income retirees everywhere.

Oh yeah for sure, I’ve run Llama 3.2 on my RTX 4080 and it struggles but it’s not obnoxiously slow. I think they are betting more software will ship with integrated LLMs that run locally on users PCs instead of relying on cloud compute.

Data centres want the even beefier cards anyhow, but I think nVidia envisions everyone running local LLMs on their PCs because it will be integrated into software instead of relying on cloud compute. My RTX 4080 can struggle through Llama 3.2.

They aren’t making graphics cards anymore, they’re making AI processors that happen to do graphics using AI.

User: “Can we get Google?”

Microsoft: “But we already have Google at home!”

The Google at home: [reskinned Bing page]

Aww how cute, he thinks he’s the face eating leopard!

“He’s hurting the wrong people!”

Four years ago is a long time to remember for people with a room temperature IQ.

I don’t understand how anyone thinks immigrants steal jobs. You can’t just show up to a workplace and collect a paycheque, you have to get hired first.

Employers are giving jobs to immigrants. And they know it because they are the ones getting the visas.

There are a shocking number of Elmo simps.