Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)G
Posts
3
Comments
20
Joined
3 yr. ago

  • By the way take a look at dockform for docker deploys, it’s something I’m keeping an eye on since I use sops to encrypt secrets.

  • It’s the other way around! Bistromath is obviously the more advanced metod of dining/transportation :D

  • Last I heard he was in the space-time continuum, and may or may not be missing a couch…

  • I settled on OpenProvider.com (Netherlands). If you have lots of domains you can get reseller access and buy domains at no markup, basically.

    The only annoying thing is that you need to add money to the account instead of simply paying for the domains.

  • I was a user, I even recommended it to people, but since the discovery of this issue I feel uneasy to continue using/recommending it. That dev response is appalling.

  • Thank you, this was actually inspiring. I’d like to imagine I was making a better world before, and will continue to do so with all my strengths.

  • There’s SwiftFin, but it’s been a while from the last update (iOS app was updated recently though) and there’s a number of issues. It’s usable though (I’m using it).

  • There’s LaserWeb but apparently it doesn’t support closed source (Chinese) firmware so you’d need to change your laser’s controller…

  • Anche perché, uno “sciopero” sarebbe consegnare scheda nulla, o scheda bianca… alla fine uno non sciopera dal lavoro stando a casa, ma protestando davanti all’azienda, no?

  • The only alternative I know of that goes close to what FreeIPA does (minus the cert part) is kanidm. It does:

    • oauth2
    • ssh key distribution
    • RADIUS
    • PAM/SSSD
    • LDAP

    I just noticed they have a beta for multimaster replication, which is nice.

    I use it at home. Note, though, that it does not do any hand-holding, and all configuration is done through CLI. Also note, there are docs for the stable or dev branch and there sometimes are big differences between the two.

  • I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.

  • I didn’t have any issues, do you see anything in the logs?

  • Yeah, sounds like a security feature… I was able to configure Traefik to connect with TLS, verifying the peer certificate.

  • Yes, it should cover all the use cases you mention!

    I use oauth2-proxy as ForwardAuth on Traefik so I can protect apps that do not support OAuth/OIDC login/

  • I use kanidm with oauth2-proxy. No issues so far, it was pretty easy to set up.

    Note that the connection to kanidm needs to be TLS even if you have a reverse proxy!

    EDIT: currently using 80MB RAM for two users and three Service Providers.

  • I also moved away my domains and the ones of the hackerspace I manage, mainly to:

    • infomaniak (Switzerland): a bit too pushy with extra services, but not bad
    • openprovider (NL): more geared towards bulk users, have to prepay (min 20€), but okay so far
    • aruba: meh, but free mailboxes are nice

    I also use Migadu, they have been great so far!

    desec.io for DNS, also great and supported by Traefik for DNS-01 ACME challenge.

  • I think you can create a group for friends and a group for family. If you want more separation I think Authentik handles multi-tenancy as well

  • Giochi Di Ruolo @feddit.it

    Idee per trappole/ostacoli

  • Exactly this. In a federated network, the instance with the majority of users could dictate the protocol, forcing the smaller issues to continually adapt or die. See this post for a very real example of this.

  • Giochi Di Ruolo @feddit.it

    DM/GM, cosa usate per generare le mappe dei vostri giochi?

  • Giochi Di Ruolo @feddit.it

    Ho finito la mia prima Stagione di Broken Compass