I loved their song forever young it’s got such a good synth line I didn’t know they made cupcakes too that’s great I wonder if they make mochi too since they’re big in Japan

This meme includes a play on the semi-common meme trope of wanting to smell “girlstink” (which is fem-presenting body odour) which is “stinky in the good way, because the writer of the meme is horny for girlstink”

Thus taking said “girlstink” trope, which would have the body odour smell given sparkles because it’s magical to the downbad meme writer (and possibly reader), and replacing the character that’s “smelly” with GLaDOS from the classic games Portal and Portal 2 - whomst is well known (in the circles worth being in) for having the significant desire to release deadly neurotoxin - we get the remix of the “girlstink” meme trope. The character representing you (the reader) is sniffing the “girlstink” and is sweaty in a horny way for the “girlstink” from GLaDOS and her deadly neurotoxin that is being blown to you with a comical fan mechanism. But you’re also probably sweating from the deadly neurotoxin killing you.

Now if you’ve played a Portal game, please read this text in GLaDOS’ voice: “it’s your old friend, deadly neurotoxin.” Just to get in the “negged by a disembodied voice that’s a dommy mommy robot” mood.

This is indeed the true value of the internet: to share ideas you might’ve not thought but feel enlightened(?) by seeing

(Even if you’re not downbad for the neurotoxin whiff)

You can slam semicolons at the ends of lines in Python, interpreter doesn’t care

P sure you can do multiple lines in one line by slamming semicolons too, though idr for sure and I can’t be arsed to check

I highly recommend holding it within 3 feet of your body for 5 to 10 minutes; absolutely nothing can go wrong from holding a Cobalt-60 source with 3540 Curies in 1963 within 3 feet of your body for 5 to 10 minutes!

Get this on the berg I wanna render my dice rolls over SSH stat

Holy shot never thought to test used cast iron of unknown provenance.

You can def strip it, the lead contamination is in the seasoning but it’s not gonna get into the iron. Buuuut sanding that down will be a hazmat zone. I’d bunny suit/sealed goggles/P100/sand on plastic sheet cause that’s gonna be the worst case for lead dust. Idk if it’s worth it.

Check flurospec if you have some extra disposable cash for better lead tests https://www.detectlead.com/, I wonder if the types of tests you used turned red due to interacting with iron or something (unlikely but possible, they incorrectly react sometimes and it’s red so monk brain wonders…)

Temps up -> hydrate with lukewarm water -> fill back up -> infinite gaming, infinite hydration

King, all you must do is set up root ssh access with a short password and port forward port 22 to it. Super easy, super quick!

For extra spice, I’d recommend also hitting your hard drives with a hammer once or twice a day. They just don’t like vibrations; you’ve gotta weed out the weak ones. Only the strong data will survive.

With the shitshow of the worl rn I bet the majority of people won’t notice a repost beyond a year, maybe even 6 months. So blast us with new-old shitposts

Reading that is wild

Why are you doing Arch on a server? You want to tinker forever and read the update notes like a hawk lest the server implode forever?

Arch isn’t gonna be noticeably leaner than Debian.

Get Debian, install docker and/or podman, set unattended upgrades, and then install Incus if you need VMs or containers down the line. You can stick on ZFS and it’ll be fine, you already have BTRFS for basic mirrors. Install Cockpit and you’ll have a nice GUI. Try not to think you have to fiddle with settings, the maintainers for each package/service have set it so it works for most people (and we’re most people!); you’ll only need to intervene on an handful of package configs. All set and it’s not proprietary.

Clearly disinfo, where’s the thicc pancakes??

That’s just winter with extra steps

If you’ve got Debian already installed, I cannot resist advocating for Incus (stable branch from Zabbly repo with web ui https://blog.simos.info/how-to-install-and-setup-the-incus-web-ui/) in lieu of proxmox. Does the same thing but you don’t have to rip out the kernel Debian uses.

With Debian 13 you have access to podman quadlets, use that for any non-vm needs. The ease of docker compose files easily removes reason for programs in LXC containers, and podman removes reason for docker in an LXC. LXC is left only for programs that aren’t containerized. VMs for security DMZ. Podman for bulk of stuff you want.

Good luck!

For context this is referencing this post https://piefed.blahaj.zone/post/232347/ which apparently started beef I did not know about and was blissfully unawares until sad detective man told me several months later that it started beef and then I felt bad until he fashioned this accord and now I can sleep soundly at night again

I use Authentik - works well - but I’m prepping to switch to Authelia for the config-based setup.

I updated Authentik across 2 versions (they did 2 month-long supported tags, missed one; now they do 3 month-long supported tags) and it destroyed itself. Had to recover the DB from a backup (and then step through the version I tried to skip), and while I was doing that I was like “wait why does this have only a DB? Should just be a config file cause that’s all the depth I do with it” and lo that’s what Authelia is.

Authentik is audited and Authelia has not been. Initially while I chose Authentik. But config-file robustness in the face of Authentik’s GUI-setup DB imploding swayed me not to care, it’d take so long and be so tedious to redo all my proxies and auths through the GUI. Plus I always forget what to click in the GUI when I come back to add some new program in 4 months.

Peak Star Trek cannon whenever he’s on screen

The only thing that can get hacked is something that responds on the World Wide Web.

So you limit the scope of what talks to the WWW:

Wireguard VPN will not respond unless the magic keys are correct, it’s ideal security and obscurity. Put everything you can behind it.

For things I want on the WWW without a VPN, I split out two options otherwise.

1. Caddy checking mTLS certificates that basically allows a device access without extra steps - relying on Caddy to be strong and mTLS to be strong.

2. Authentik’s proxy check, I think Authelia has this too, but to access a site you hit an Authentik login first.

For both of those, you rely on those services not having 0-day hacks. More likely for these services to stay ahead of the game and/or fix quick than something that doesn’t exist just to do authentication. I run them in containers that are run by independent users and are read-only with capabilities limited, in a VM.

I’d say the Caddy route is more secure than Authentik, but it needs more effort to setup the certificate stuff. Authentik route needs a web browser to log in with. Obviously the WG VPN is primo.

Edit: also tailscale is just managed wireguard, so it has the same benefits as a wireguard vpn with the catch a company has access to your network also now. But really simplifies setup…..

Now is a bad time to buy hard drives price-wise. Massive price gouging going on with all storage pre-sold based on IOUs to “AI” companies.

If you must…

Buy used enterprise drives with a ~5 year warranty. In US there is serverpartdeals and goharddrives. I am not sure of the Europe equivalents but I am sure they exist. The enterprise drives should be cheaper than new drives and will last longer; they’ve been used out of their early failure bathtub curve but they’re young enough to be given a 5 year warranty. Make sure to get ones with SATA connectors not SAS, you’ll need a PCIe card to talk to the SAS ones, and maybe something for power idk.

They should be cheaper - I am not sure if price uncertainty has upended that.

Enterprise drives are louder, I have them in a quiet case with sound dampening padding (fractal define) and I do not hear them 5 feet away.

I have heard bad things about consumer drives longevity. I used several 1 TB barracudas for years with no issues in a server setting, I used 3 TB barracudas in a server setting and one failed early. I used a 4 TB Toshiba that failed early and I used an 8 TB blue that is fine in a personal computing setting. I have bought enterprise drives and none have an issue yet.

It seems luck of the draw, so the thing to maximize is cheapest per GB.