Klox

I’m happy to provide more details if you’re interested/have specific questions.

I’m running the Jellyfin app on my home kubernetes cluster – Kubernetes (k8s) boils down to a program scheduler with a lot of big features a lot of IT folks like. K8s runs the Jellyfin program as a “pod”, and it attaches remote storage to the pod. The storage is your videos/media, but also the Jellyfin database (as a sqlite file).

There are better, more reliable ways to provide a database to an app though. Jellyfin + the sqlite database is basically just a file and that file doesn’t exactly play nice when it is stored remotely. Instead, the app could use a software interface (API) that allows many kinds of databases – sqlite OR a dedicated database service (e.g. Postgres), and there are a lot of advantages to that.

Why what? Why do I want Postgres? Because my database is on an iSCSI partition that is brittle.

What a banger release! Super excited for the future. I know some folks were worried about the change in leadership, but this is super promising. Heres hoping runway is clear for Postgres at some point.

I’ve had my GV number as my primary for ~16 years. I’ve been on grapheneos for about a year now. Maybe I should actually pull the trigger and migrate my number to my provider and finally get RCS. All the better if GrapheneOS provides native support.

The biggest risk has always been the collusion of red governments.

taxes and all of that

Tons of people still don’t understand taxes are graduated. So… yeah. You’re going to pay more if you have more to pay with. But it never makes your “poorer”. It’s only a higher fraction on each extra dollar, not the money you already paid taxes on at a lower bracket.

There are a few government sponsored benefits that have a cliff aka welfare trap. In those cases, yes you could be worse off if you step off whatever cliff the program has set. But that’s very different from taxes, it’s something to fix, and was generally something that was helpful which is antithetical to a thesis of government suppression.

“I’m not scared of a germ. I used to snort cocaine off of toilet seats.” - RFK Jr., 2026

Your really need to define your scope first. Is it just you? Family? Extended family? Strangers?

After understanding that, the best bang for your buck is a private mesh/tunnel VPN. Tailscale, Netbird, Pangolin, or plain wireguard. If you want real public routing, then you need to understand reverse tunnels and your app’s lifecycle/quality. After that, all the security guidelines are basically trying to reduce blast radius. And that depends a lot on how you’re running the app, what it has access to, etc. DMZ network for isolation goes a long way.

Does that bypass my DNS server when the client is connected to the tailnet?

Yes. A search path is installed so that the OS queries MagicDNS. MagicDNS is a DNS resolver within Headscale and nodes that are on the tailnet will use it to get the tailnet IP of the names being queried under your MagicDNS domain. You MagicDNS path can be a subdomain of your domain (hs or ts.mydomain.com) or anything (.magic). https://photos/ -> check with MagicDNS does it have photos.magic? Return the photos node IP 100.x.x.x.).

It doesn’t need to go to your AdGuard DNS server because every node will query the search path that is added to the OS when joining the tailnet. It’s the reason why your MagicDNS domain name needs to be unique, and why it doesn’t technically need to be a subdomain of your internet routed domain.

Should I still leave it on for local traffic?

Depends on what you want. Is your local traffic expected to go over the tailnet? If every device isn’t on the tailnet then you probably still want the local network setup you have.

And if I’m connected to the tailnet from outside, how do I propagate all the addresses?

Every tailnet node has a node name. You can spin up extra nodes so that they resolve a node name to the service it’s managing. You can do this pretty easily with containers. The alternative is to configure MagicDNS with extra_records so that multiple A records resolve to the same tailnet IP. Then you either need the services to be on different ports or have a reverse proxy split out based on the connection header (e.g. to route photos to Immich and music to Navidrome).

This is ignoring all “exit node” scenarios. Exit nodes can help bridge your local traffic to the tailnet, or bridge your services to the public.

I’d be fine with this if the people responsible for these guaranteed future outcomes were held to account. Until we have a justice system that reflects fair penalties on poor leadership, we’re fucked.

I reported people dressed as ICE taking someone in a parking lot to my state police and they said it’s a federal matter. It’s as fascist as it gets.

Aaaauugghh. Auuuuuughhhh!

Who knew being a total dipshit took so much work! I’m sure in 22 more hours he’ll spin this into Biden’s fault.

I should have known, but it’s still unbelievable he has a quote saying the pool is industructible and can’t be cut with a knife. THEN he proceeds to charge “Antifa” for cutting the pool?! Of COURSE he was guilty of fucking it up back in May. The guy is so transparently it’s kind of refreshing. What’s fucked up is the system being totally fucking broken and letting this guilty piece of shit keep making an ass out of America.

“Home clothes”, “repair clothes”? Nah. There’s just clothes, and clothes my SO gets mad at if I get paint on them.

This isn’t debatable: Skull.

The good PMs usually make Y=2X or 3X. But we’ll still have that “it’s day Y…” conversation /shrug.

8-9 years ago I was nearly killed by one of these with an extra lift. I was in a sedan, stopped behind them. Someone texting rear ended me going ~45 mph. I hit my head on the steering wheel, and was moving towards the truck. Fortunately I didn’t lose consciousness, and turned the wheel hard. I ended up grinding the full length of their driver side. It was a 2 lane road with oncoming traffic, fortunately nobody there at the time. My car would have gone right under and into the trucks bed and I might have been decapitated.

It scares me how many of these fucking useless trucks there are everywhere. Fuck them and fuck people on their phones.

Guarantee not the ones owned by Oracle.

They would 100% charge people with criminal conspiracy to commit terrorism if they had the evidence. There are plenty of those charges too, just from actual police. They fucking just charged antifa protestors with it. Our government is just fucking stupid, ugh.