_cryptagion [he/him]

the only way to get into whatever version of heaven you believe in is to kill as many nazis and zionists as you can.

proud member of the db0 grassroots left wing qanon Russian troll farm sent to divide you all.

Follow me on Mastodon

  • 0 Posts
  • 231 Comments
Joined 1 year ago
cake
Cake day: November 4th, 2024

help-circle






  • EDIT: it’s been pointed out to me that using NetworkManager for Wireguard setup is shit. Instead use nmcli, this seems to have solved my problem.

    I’m using Bazzite Linux with KDE, and for me Wireguard setup is copy/pasting several bits of information on multiple settings pages. OpenVPN is just downloading a single config file and inputting my user/pass.

    Also, Wireguard disconnects so often, no matter which distro I’m on, that it’s a pain in the butt having to reconnect a few times an hour. Not to mention that I can’t have it set to autoconnect on login, or my internet doesn’t work until I disconnect and reconnect.






  • yes, it can do that, assuming you are using LDAP or have set up users/groups in the Authelia config. you don’t need to set it up in the caddyfile though, you can handle everything from Authelia’s end. for example, here is a typical protected item from my caddyfile.

    # this is a bit of code at the top that I use for every protected item, and call it each time to save space
    (protected) {
    	tls /ssl/home-cert.pem /ssl/home-key.pem
    	forward_auth :4100 {
    		uri /api/verify?rd=https://auth.myurl.xyz/
    		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
    		header_up Host {upstream_hostport}
    	}
    	encode gzip
    }
    
    # UptimeKuma
    uptime.myurl.xyz {
        # now to call the code above for this item
    	import protected *
    	reverse_proxy :4000
    }
    

    that’s all I need in my caddyfile, just the bits that forward the information about the user to each site to log them in. I can then handle all the auth rules like saying which sites are only for admins or users in the Authelia config. since I use LDAP, I can set up the groups in that, then just specify which sites are DENY or TWO_FACTOR for each group in the Authelia config. or even in the apps themselves, if they support LDAP like Jellyfin and Forgejo.







  • source on this?

    all of our admins are neurodivergent, and most of our mods. the instance is also advertised as being tailored towards neurodivergent people. If you want a source, talk to the members. Drop by the ADHD comm or hop on Matrix, we’re very active on our channels.

    and I don’t want to be accepted, just to discuss, but I see there’s no point in that

    no, absolutely not. we’re not interested in discussing our policy against bigotry. if you try, you’ll probably just get blocked by our members until a mod or admin comes around and cleans up your comments. the great thing about fedi is that nobody is forced to associate with anyone else. we all have the freedom to just cut problematic people out of our circles and move on. and the best part? that person we disassociated with is free to move on and start their own groups, with whatever agenda they want.

    that’s true freedom.