• 1 Post
  • 338 Comments
Joined 2 years ago
cake
Cake day: June 6th, 2024

help-circle

  • Apple wouldn’t replace my wife’s phone battery because they “detected water damage”. I did it myself through their DIY system, which is more than a bit ridiculous because they only set it up after they got sued and they are salty about it.

    Honestly it was fun receiving a huge crate that looked like something from a spy movie with an expensive rig to push down on the phone screen just right to adhere the glue on the new screen, as if pushing on it with my hand wouldn’t do. I had fun, and it was cheaper than it would be to get someone else to do it, but it was absolutely ridiculous.

    Oh also there certainly wasn’t any water damage I could see, and I don’t remember her having any particular encounters with water like dropping it in a pool or something, and it was working perfectly fine except for the battery getting old.













  • I have my Immich instance setup with an nginx proxy for security and ssl, and that’s exposed to the internet. I have a domain for my personal website, so I just put up my Immich instance at a subdomain of that. I can now make public share links I can just copy and paste into a group chat. I haven’t added any other users yet but I’d I wanted to all they’d need to do is login via email/password.

    This is an officially supported kind of setup for Immich, so I would consider it secure: https://docs.immich.app/administration/reverse-proxy/

    I don’t have all of my homelab services exposed publicly though; I VPN in for those.

    General tips for exposing a server to the internet:

    • only expose the ports you need for services you intend to be accessible. Use a firewall and/or your router’s port forwarding settings to enable only what you need, with blocking as a default.
    • update all software regularly
    • only expose programs that are built to be exposed. For example, if you make a Flask website, they will warn you several times not to expose it directly, but to proxy it through something like nginx





  • This meme was inspired by my frustration from trying to switch. I like the idea of podman, but it just doesn’t work. Tbf the bugs I encountered this time were with podman compose rather than podman itself, but still, I’d rather use the tools that work. I’ve had similar experiences when I’ve tried to switch to podman in the past.