There are a few ways to do it, but you don’t use caddy for SSH.

• host SSH on port 22, forgejo on a different port. Expose both ports to the internet
• host SSH on a different port, forgejo on port 22. Expose both ports to the internet
• host SSH on port 22. Forgejo on port 2222. Only 22 exposed to the internet. Change the authorized_keys user of the git user on host to automatically call the internal forgejo SSH app

Last option is how I run my Gitea instance, authorized keys is managed by gitea so you don’t really need to do anything high maintenance.

~git/.ssh/authorized_keys:

command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-9",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-rsa PUBLICKEYHASH

/usr/local/bin/gitea:

ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.14 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"

127.0.0.14 is the local git docker access where I expose the service, but you couldn’t different ports, IPS, etc.

Damn… You too?

distcc so you can compile on the faster ones and distribute it

Nerfing things on a PVE game that’s supposed to be fun shows a lack of creativity.

You can buff the other things while finding better ways to increase the difficulty, instead of just boosting health and throwing more enemies, but that’s the “easy” button.

I think you meant no data cap.

The right thing to whom? Shareholders? (=

It hasn’t crashed yet, but I won’t be able to test it for a couple weeks (vacation time \o/).

For normal use, it looks like the crash is resolved or, at least, as stable as 6.7 was. Next test is to play Helldivers 2 with the Vulkan backend and see if it crashes or run.

Powercolor, red devil.

Under 6.7 I was able to find some a combination that was usable for a few days.

With 6.8, timeouts would happen within 30 minutes.

I fiddles with sched_job module option and the system seems stable now.

They still have, I replaced my 3070 with a 7900 xtx and the 7900 is constantly freezing with ring GPU errors and drivers completely effing up the system. I have already replaced it twice, and I am using workarounds to not hit bugs, but they happen every few days…

I can’t remember all the details, but depending on the CPU you are running you may need some extra configuration on opnsense.

There were a few issues, on my servers, running on older Intel Xeon CPUs, but I eventually fixed them adding proper flags to deal with different bugs.

Other than that, running on a VM is really handy.

On nvidia, there are still too many edge cases involving Wayland that are just crippled. Orca slicer doesn’t work for me for example, you are completely missing any of the 3d accelerated graphics in there.

On the other hand, the AMD 7x00 series have different kind of bugs, with ring0 errors leading to full resets.

I think once nvidia drivers are squared out (the proprietary ones) it will be smooth sailing.

It is user friendly, and technically incorrect, since nothing ever lines up with reality when you use 1000 because the underlying system is base 8.

Or you get the weird non-sense all around “my computer has 18.8gb of memory”…

I can’t say if you are overstating it but, only mention that I went through a similar path. I had it multiple scripts running and it was a neverending thing.

Since I have moved to small step I never had a problem.

The biggest advantage I got is for products like opnsense, you can do automatic renewal of certificates using your internal CA.

Generating new certs is still as simple (actually much easier for me) than relying on openssl or easyrsa scripts.

What? Every BIOS in the world still uses the same system. Same thing for me on Linux.

Only hard driver manufacturers used a different system to inflate their numbers and pushed a market campaign, a lot of people who didn’t even use computers said “oh that makes sense - approved”

People who actually work with computer, memory, CPU, and other components in base 8 just ignores this non-sense of “x1000”

I feel like you just confirmed exactly what I said, few people were able to beat it.

To be fair, very few people used to be better at go, let alone a lot better.

Ty!

I would argue they are all the same since most are based on wlroots and if wlroots doesn’t support something neither does the “increasing amount of Wayland compositors”.

By secure they mean “the only way we can easily see everything you do”

While I don’t use TPM myself (I dislike being tied to a specific hardware) the way it protects you is:

Disk is protected through encryption, so you can’t remove and inject anything/hack the password.

If boot is protected/signed/authorized only, a random person can’t load an external OS and modify the disk either.

All this together would say, even if someone acquires your computer, they can’t do anything to it without an account with access, or an exploit that works before a user logs.

In a way, the attack surface can be bigger than if you simply encrypted your disk with a key and password protect that key.