RagingHungryPanda

joined 2 years ago
[–] RagingHungryPanda@lemm.ee 1 points 3 days ago

https://youtu.be/4d0Q64SQujY

I'm actually watching a video about that, complete with studies and everything.

[–] RagingHungryPanda@lemm.ee 1 points 4 days ago

Unfortunately no, it's just one log line over and over. At some point it did have the username and IP, but it usually contains neither.

[–] RagingHungryPanda@lemm.ee 2 points 5 days ago (2 children)

It didn't really change when I put the db in the same compose file. I have them on the same docker network, so any container can reference any other container by its name, in this case mariadb and access any ports, not just the ones that are exposed.

Evidence for this working is that MariaDB is logging the rejected connection attempts.

[–] RagingHungryPanda@lemm.ee 2 points 5 days ago

Now that I'm looking at it again, I wonder if I can get rid of some of this stuff 🤔

[–] RagingHungryPanda@lemm.ee 2 points 5 days ago* (last edited 5 days ago) (5 children)

Thank you for the help. Here is the last set of configurations that I was running.
Edit: this is running on my TrueNas server.

networks:
  maria-db-network:
    external: True
services:
  friendica:
    build: /mnt/MainStorage/apps/friendica/config/app
    environment:
      - FRIENDICA_ADMIN_MAIL=<admin email>
      - FRIENDICA_TZ=America/Chicago
      - FRIENDICA_LANG=en-US
      - FRIENDICA_URL=https://friendica.michaeldileo.org/
      - FRIENDICA_SITENAME=Michael DiLeo's Friendica
      - SMTP=<the smtp>
      - SMTP_DOMAIN=<smtp domain
      - SMTP_FROM=admin
      - SMTP_AUTH_USER=<le user>
      - SMTP_AUTH_PASS=<auth pass>
      - SMTP_TLS=true
      - SMTP_STARTTLS=true
      - MYSQL_PASSWORD=<db pass>
      - MYSQL_DATABASE=friendica
      - MYSQL_USER=friendica
      - MYSQL_HOST=mariadb
      - MYSQL_PORT=3306
    image: friendica
    networks:
      - maria-db-network
    ports:
      - '30110:80'
    volumes:
      - /mnt/MainStorage/apps/friendica/data:/var/www/html
      - /mnt/MainStorage/apps/friendica/config/app:/app

addon.config.php file:

<?php

return [
	'system' => [
		'cache_driver' => 'redis',
		'lock_driver' => 'redis',

		'redis_host' => 'redis',

		'pidfile' => '/var/run/friendica.pid',
	]
];

docker file in the config folder

FROM friendica:friendica

RUN mkdir -p /usr/src/config
COPY addon.config.php /usr/src/config/
 

Hey all, I've been trying to get up and running with Friendica in a docker container behind Nginx Proxy Manager and connected to a separate MariaDB container.

The scenario that I have is that the only combination I've gotten to work to connect to Friendica is to use the alpine docker image with the complete web server, as putting configs into separate nginx instances wasn't getting me anywhere. However, using the full image, I can get to the UI and do the install to set things that I already set in env variables(?) whatever.

But what happens is that when it goes to save, it fails to save to the DB and maria db says that it rejected the connection for unauthenticated user and unknown host (implying to me that it rejected the connection before it even pulled this info). But the thing is that I've been able to shell into the friendica container and connect to the MariaDB. I can use adminer and log in as the friendica user to the friendica db that I created. Has anyone run in to this?

I'm starting to wonder if I need to use actual MySQL, maybe? This is a very strange issue as I've been able to create the database, user with privileges, and log in as that user. The host name for the user is '%', so 'friendica'@'%'.

I'd appreciate any help that I could get there.

[–] RagingHungryPanda@lemm.ee 2 points 6 days ago (1 children)

That was quite an emotional read. I felt brought in to the author's situation as I read. Thank you for sharing it

[–] RagingHungryPanda@lemm.ee 2 points 6 days ago

How does your skin do in the sun?

[–] RagingHungryPanda@lemm.ee 2 points 1 week ago

Thanks for the write up! It's definitely got my curiosity

[–] RagingHungryPanda@lemm.ee 3 points 1 week ago (4 children)

this looks pretty cool. Have you read it? What do you think about it?

[–] RagingHungryPanda@lemm.ee 2 points 1 week ago

you'd probably be better off setting up your own domain server and trying to get that working

[–] RagingHungryPanda@lemm.ee 4 points 1 week ago

That's the point though - it wasn't a good thing

[–] RagingHungryPanda@lemm.ee 1 points 1 week ago

Have times changed? Yes. Do you need to approach women? Yes. Don't hide behind a screen. Get out there and talk with women.

Talking with people is not disrespectful. God, what a sad society is that?

There's a saying that goes something like, "Enlarge your territory, linger in public, walk through open doors." That's a good start. Get out of the house and linger in public places. Strike up conversations and be a social animal. Talk with everyone: men, women, young, old - get that practice in. If you talk with everyone, then you're not putting as much pressure on yourself. Don't get attached to an outcome, but challenge yourself to talk to people.

I think you're making excuses. I strike conversations with strangers all the time, including women. I go dancing for swing, salsa, bachata. You wanna see something that challenges your beliefs on interactions between men and women? Go watch Bachata.

But anyway. Social skills are a skill and they need to be worked. Put yourself out there and get rejected. (You'll learn it's not so bad).

 

If you have any experience in this field, please include so in your reply. I've seen over time a lot of criticism over the peer review process and how journals hyper-exploit academics simply because the journals are able to monetize scarcity/exclusivity. I saw another post on it today and I thought, "what if this was federated?"

I was looking around and I see that there are writing portions of the process, such as pubpub or manubot that essentially use git and markdown - but that's not the main point as that's on the before end. What about on the review process?

Let's say there's software that's federated and can be run by anyone from individuals to universities and consortiums. When a user or team is ready to publish, they can "submit their work" for publishing, which would federate out as works pending publication.

This part's a different issue: how to handle reputation for who can review, but I think there are ways to do that and that's beyond the scope of this post as I imagine it could get pretty complicated and would require feedback from people actually in the industry.

The reviewers can submit comments and reviews back to the author via federation, but this time the process can be open instead of behind closed doors. The authors revise, comment, etc. At some point a determination is made that this work is "published."

This seems like a feasible premise. Just brainstorming, you would get history, open reviews, no one asking $1,000 to submit a publication that they then make bank on while you get scraps or nothing.

I could see a reputation system within a given field and/or overall, with certain users being "review board" or "reviewers" on their instance. There could also be additional reputation if, say, a group of universities creates consortiums for different fields and then that consortium "publishes" a work. There'd have to be additional process to block people from spamming works that aren't ready or whatever, but that's not really the point for now.

Am I barking up the wrong tree here? At first thought, it seems like there are ways to allow federation of research papers and peer review and to put a dent in the grip of technical journals.

 

Activity Pods is supposed to allow you to have one account across the fediverse and it's still in early dev. I do see that they have some docker images, but there's no descriptions on what they're for and their instructions involve running make scripts to get running.

I can do that inside of a docker container, but running TrueNas I'm limited to running those, which is fine, I can do that, but the other thing that seems a bit confusing is that it looks like they want you to define "shapes" for different services to communicate with.

It might just look more complicated than it is. Has anyone successfully gotten up and running with it?

 

And I'm making everyone go to my gotosocial post because the server is running, so I'm going to use it!

 

I have a gl-inet router on which I have an nginx config to send traffic to Nginx Proxy Manager and DDNS with cloudflare.

I'm trying to get some kind of local dns set up so that if I'm on the local network, traffic stays within the network. The problem that I'm running in to is SSL certificates. NPM (on the server) is handling those and I thought that what I could do is go into the AdGuard Home (on the gl-inet router) config and add a dns rewrite to point to the router and traffic would flow as it normally does.

This DOES work, technically. traceroute shows only one hop for any of my subdomains, ie files.mydomain.com.

But I cannot actually get access in a browser because the ssl certificates are not set up.

It seems like options are: manually copy certificates from the server to the router (not ideal), or don't do it at all. I notice that if I go to the service by ip address, it'll change the address to the domain name. Eg going to 192.168.8.111:30027 -> files.mydomain.com.

This isn't a HUGE deal, but it's not preferable. How have you all solved this?

Edit: I solved the issue in probably the most hilarious way. I was trying to get the forwarding and everything set up and then borked my routers firewall so bad I couldn't get to the outside at all, so I did a hard reset.

I then moved my admin UI ports up by one each (81/444), re-set up Goodcloud, ddns, Wireguard server on the router, then set up port forwarding for 80/443 on the router to 80/443 on the trunas server. I switched NPM to listen on those ports (since I moved the web UI to different ports), then added Adguard Home DNS rewrites. It's now all working as expected.

Local traffic only has one hop and is accessible without SSL warnings, and same for WAN traffic. Thank you all for the help!

 

I've been getting into self hosting, the fediverse, and federated blogging. I contacted freaking nomads and they suggested that I write about my experiences, so here it is! I hope you enjoy.

Comments aren't fully federated from the blog site, so I'm using mastodon as well.

1
submitted 2 months ago* (last edited 2 months ago) by RagingHungryPanda@lemm.ee to c/digitalnomad@lemmy.ml
 

I've been getting into self hosting, the fediverse, and federated blogging. I contacted freaking nomads and they suggested that I write about my experiences, so here it is! I hope you enjoy.

Comments aren't fully federated from the blog site, so I'm using mastodon as well.

view more: next ›