You’re missing 2

1 10 11 12 2 3 4 5 6 7 8 9

I hate this so much

The raw data might be purged but no one talks about the ML modal that google trained with that data.

1. Cope

Cool! ufw supports nftables too.

Please tell me more, which firewall would you recommend that plays nice with Docker?

No NAT? Hahaha that’s a big if, and why would you copy paste a docker compose without reading it?

Docker is going to undo your port iptable rules with or without ufw

Running rm -rf ~ isn’t that hard to do either just don’t do it.

Your router’s NAT should save you if that happens on the wrong port anyway.

Fail2ban ufw nftables

port forward only the bare minimum (80 443)

Expose docker ports with 127.0.0.1:8000:8000 then port forward with caddy server on the host

Edit: add nftables

Will this ensure the swipe left for camera has finally been removed from the iPad lockscreen?

Yes the built in browser sandboxes the website code, but the nodejs part has full freedom to encrypt your stuff and ask for bitcoin ransoms or ai scrape your browser history for better user profiling. YMMV

Sandboxing proprietary apps and containerising their outdated dependencies is a good thing.

I’d love to do that with vim for :!q to :q! And :qw to :wq

Caddy

It’s three lines of configuration

jellyfin.example.com {
  reverse_proxy http://localhost:8083/
}

Automatic https with let’sencrypt, simplicity of a single binary, downgrade is as simple as replace binary & restart service.

Mint is goat

Remember to make a backup pipeline with Timeshift and you’ll be fine

Go for it 👍

Before upgrading, users are expected to visit the Arch Linux home page to check the latest news, or alternatively subscribe to the RSS feed or the arch-announce mailing list. When updates require out-of-the-ordinary user intervention (more than what can be handled simply by following the instructions given by pacman), an appropriate news post will be made.

https://wiki.archlinux.org/title/System_maintenance

“Arch” they just need to read the newsletter before updating.

Lots of mastodon hosts aren’t from the US.

It makes your choice of Twitter and Bluesky all the more questionable.

It sounds like you just don’t like being blocked.