BeyondCombustion.net

Updated Voyager to 1.8.0 since that was just released (linked)

Expanded the volume for lemmy by 100GB

Cleaned up old snapshots of VMs, created new baselines.

Scripting and posting shit on Gitea.

New VM for Lemmy w/ separate VMs for Redis and PostgreSQL are just about done. Same with MediaCMS, Pixelfed, and Invidious.

I was also smart enough this time to remember and make snapshots along the way so I don't have to start over if something goes completely wacko.

Finally started putting some things up on the Gitea for the server config.

Started by adding the docker-compose.yml files for two of the lemmy-ui alternatives that are running now.

mlmym, Voyager, and others don't seem to have docker-compose.yml files on their project pages yet, so I'll fork and properly PR those later this afternoon.

cross-posted from: https://kbin.social/m/technology@lemmy.world/t/306030

Here is a message from his family:

>Dear all, > >It is with a heavy heart that we have to inform you that Bram Moolenaar passed away on 3 August 2023. >Bram was suffering from a medical condition that progressed quickly over the last few weeks. > >Bram dedicated a large part of his life to VIM and he was very proud of the VIM community that you are all part of. > >We as family are now arranging the funeral service of Bram which will take place in The Netherlands and will be held in the Dutch lanuage. The extact date, time and place are still to be determined. >Should you wish to attend his funeral then please send a message to funer...\@gmail.com. This email address can also be used to get in contact with the family regarding other matters, bearing in the mind the situation we are in right now as family. > >With kind regards, > >The family of Bram Moolenaar

cross-posted from: https://lemmy.world/post/2581495

> Source: https://lemmy.fediverse.observer/dailystats&days=90

Was messing with the docker earlier, took it down for a sec then got busy and forgot about it for a bit.

My bad.

Anywhoo.... Lemmy 0.18.3 seems to be nearing release. Just updated the server to lemmy-ui: 0.18.3-rc.5 and lemmy: 0.18.3-rc.4

I'm going to migrate this instance to a couple new/individual VMs over the next week or so (hopefully) so it can scale better/improve uptime. This one that lemmy is running on currently pisses me off because docker has the zfs overlay enabled. It's harshing my mellow making me think disk space is lower than it actually is.

I also want to get the redarc VM accessible (the reddit archives) finally. I need to go over to the colo to unfuck the iDrac on the current before going on vacation. I was going to take more drives to the current server.... but fuck that. I'll take another R720xd over w/48TB and add it to the rack w/the R730xd. Needs done anyways, no time like the present i guess.

Gitea is back online. The VM's virtual disk filled up QUICK because I was pulling in some larger projects which were just stupid to mirror. Got those removed, expanding the drive and offloading the DB/Storage for gitea to two additional VMs/containers dedicated to SQL and file storage which should help avoid issues down the road.

Additionally over the last couple days I was also configuring Prometheus, OpenObserve, and Garfana. Really needed to get better eyes on logs and what's going on in different parts of the server to make sure that nothing crazy happens or gets hosted/posted on the box that could cause me issues. Went through and made individual email addresses for each service so it's way easier to quickly identify what server is having an issue when alerts are sent out via email.

Finally, I was just finishing up with Authentik and configuring it as an LDAP provider so it can integrate with the webmin consoles and locally on each VM. Since i got Webmin setup on each VM and managed by a central console and LDAP is the only way Authentik can interact with it, it makes sense to finally cross that bridge. LDAP should work easier with Discourse too, then it can be opened up for posting fun.

Hopefully I can get more of this buttoned up and additional admins setup prior to my vacation next month. Otherwise, it'll be hard to take a vacation lol

Stay medicated, fellow ents! - PHJ

Updated Server to 0.18.3-rc3 for Lemmy/Lemmy-Ui

Had open registration on, noticed some "businesses" setting up accounts that I'd prefer not be on the server.

As a result email verification for new accounts has been enabled again for this lemmy server.

cross-posted from: https://sh.itjust.works/post/1484592

This is why having your own stack top top bottom is important too, IMO - PHJ

> An update: > - fmhy.ml is gone, due to the ongoing fiasco with mali government taking all their .ml domains back > - As such, lemmy.fmhy.ml is also gone, we are currently exploring ways to refederate (or somehow restart federation entirely) without breaking anything substantial > - We have backups, so don't worry about data loss (you can view them on other instances anyway) > > Currently, we have fmhy.net and are exploring options to somehow migrate, thank you for your patience.

lol

It might be me making a one-off VM snapshot before possibly fucking everything up.

cross-posted from: https://lemmy.world/post/1482069

> The fanbase is still large, but the Lemmy community hasn't quite caught up yet, and now there is a transitional period where the audience is smaller.

cross-posted from: https://lemmy.world/post/1482884

> Reddit removes years of chat and message archives from users' accounts::undefined

cross-posted from: https://lemmy.world/post/1491774

> It was one of those few 3rd party Apps that still worked. Apparently dev was in talks with Reddit in obtaining Paid-API-Access, but now they cut off his API-Access mid talks without informing him

cross-posted from: https://lemmy.beyondcombustion.net/post/59302

> In an ideal world > > Community members volunteer to moderate whatever, I was going to do a form type thing with LimeSurvey because it's a pretty good tool for an application process. That might be excessive tho, anyone can start a community and if one exists from the bot that was post scraping; make a post/comment in it that you want it and poof we'll get it done. > > I want to maintain the infrastructure/script/automate, vape herbs, do dabs, wikifi Wiki things, and figured I'd post vape videos w/the GoPro 11 I picked up for eBike shit for fun too. > > *actual eBike stuff I'm keeping separate. However, I am starting what will be a ~400 mile trip on the OTET in 30 days; and the farthest the bike i'm taking has been in a single ride so far was ~30 miles. I will be posting videos of me getting high along the way in here with that DeWalt rig and whatever else I stash in my cargo bike bags. > > Authentik helps setup admin delegation with LDAP/SSO, so if someone wants to jump into some backend infra lmk and we'll setup something. > > This place is for the community. The more people that help maintain this garden for the general good and the less influence I have over the "social" aspect of this, the better IMO. > > ---- > > ### My minimal guidelines would be > > 1. Be chill, this is a cannabis forum after all. > 2. Post links, pics, vids talking about where your fav vape/bong/glass/pipe was from. > 3. Don't sell anything consumable on here. No sales of herb, extract, carts, pens, edibles, drinks, tintcures, anything that's a consumable product. > 4. DEVICES and ACCESSORIES like a Mighty, Tinymight, some custom glass for a Carta or PuffCo Peak, 510 Mods, log vapes, DIY/One off vapes/pipes/bags/stems/dab tools/Etsy type shit that Etsy bans. That stuff is fine. AT YOUR OWN RISK. And that needs it's own channel/community(communities) if people are interested in an exchange. > 5. Provide citations/sources for posts/comments where needed. > 6. Openly discuss safety of equipment/devices and cannabis products. > 7. Be mindful of what you post on here. The point is to have the whole server indexed by Google and other search providers and keep the space alive/history documented/growing in the future. (AKA Share Knowledge / Share the vibes. / Don't get me arrested plz. ) > > ----- > > I was messing with configuring the OAuth plugin for Discourse to open that up before doing redarc or the database server work for the Vaporents archives. The postgresql w/Lemmy and other dockers needs pointed outside of their containers too and it made sense to do as much of that DB work at one time as possible. > > In the meantime (until there's moderators) lol, if there's an issue w/something email support@beyondcombustion.net or send myself or one of the couple mods we do have @XpeeN@sopuli.xyz and @Loki so far a DM here (or on another subdomain) and we'll help out.

cross-posted from: https://lemmy.world/post/1495501

> Idea: if you mod a community on a lemmy.somewhere you should be able to migrate it to lemmy.elsewhere which would include all post & comment links being forwarded and subbed users having their subscription updated to reflect the new location. > > I'm aware this would be a way down the road as user account migration alone is still not great but it would be a great feature for the fediverse to have to avoid centralisation and mod/server admin wars.

cross-posted from: https://lemmy.nz/post/379273

> > AccidentalRenaissance has no active moderators due to Reddit's unprecedented API changes, and has thus been privated to prevent vandalism. > > > >Resignation letters: > > > >Openminded_Skeptic - https://imgur.com/a/WwzQcac > > > >VoltasPistol - https://imgur.com/a/lnHSM4n > > > >We welcome you to join us in our new homes: > > > >https://kbin.social/m/AccidentalRenaissance > > > >https://lemmy.blahaj.zone/c/accidentalrenaissance > > > >Thank you for all your support! > > > Original post from r/ModCoord

Yeah, lemme get that self-hosted threads spyware plz. would love to toss one up here once I setup Mastodon.

cross-posted from: https://lemmy.federate.cc/post/4824

> Just thought I'd share this since it's working for me at my home instance of federate.cc, even though it's not documented in the Lemmy hosting guide. > > The image server used by Lemmy, pict-rs, recently added support for object storage like Amazon S3, instead of serving images directly off the disk. This is potentially interesting to you because object storage is orders of magnitude cheaper than disk storage with a VM. > > By way of example, I'm hosting my setup on Vultr, but this applies to say Digital Ocean or AWS as well. Going from a 50GB to a 100GB VM instance on Vultr will take you from $12 to $24/month. Up to 180GB, $48/month. Of course these include CPU and RAM step-ups too, but I'm focusing only on disk space for now. > > Vultr's object storage by comparison is $5/month for 1TB of storage and includes a separate 1TB of bandwidth that doesn't count against your main VM, plus this content is served off of Vultr's CDN instead of your instance, meaning even less CPU load for you. > > This is pretty easy to do. What we'll be doing is diverging slightly from the official Lemmy ansible setup to add some different environment variables to pict-rs. > > After step 5, before running the ansible playbook, we're going to modify the ansible template slightly: > > cd templates/ > > cp docker-compose.yml docker-compose.yml.original > > Now we're going to edit the docker-compose.yml with your favourite text editor, personally I like micro but vim, emacs, nano or whatever will do.. > > favourite-editor docker-compose.yml > > Down around line 67 begins the section for pictrs, you'll notice under the environment section there are a bunch of things that the Lemmy guys predefined. We're going to add some here to take advantage of the new support for object storage in pict-rs 0.4+: > > At the bottom of the environment section we'll add these new vars: > > - PICTRS__STORE__TYPE=object_storage > - PICTRS__STORE__ENDPOINT=Your Object Store Endpoint > - PICTRS__STORE__BUCKET_NAME=Your Bucket Name > - PICTRS__STORE__REGION=Your Bucket Region > - PICTRS__STORE__USE_PATH_STYLE=false > - PICTRS__STORE__ACCESS_KEY=Your Access Key > - PICTRS__STORE__SECRET_KEY=Your Secret Key > > So your whole pictrs section looks something like this: https://pastebin.com/X1dP1jew > > The actual bucket name, region, access key and secret key will come from your provider. If you're using Vultr like me then they are under the details after you've created your object store, under Overview -> S3 Credentials. On Vultr your endpoint will be something like sjc1.vultrobjects.com, and your region is the domain prefix, so in this case sjc1. > > Now you can install as usual. If you have an existing instance already deployed, there is an additional migration command you have to run to move your on-disk images into the object storage. > > You're now good to go and things should pretty much behave like before, except pict-rs will be saving images to your designated cloud/object store, and when serving images it will instead redirect clients to pull directly from the object store, saving you a lot of storage, cpu use and bandwidth, and therefore money. > > Hope this helps someone, I am not an expert in either Lemmy administration nor Linux sysadmin stuff, but I can say I've done this on my own instance at federate.cc and so far I can't see any ill effects. > > Happy Lemmy-ing!

cross-posted from: https://lemmy.world/post/1299831

> Hi all, > > If you're just now signing in for the first time in 12+ hours, you may just now be finding out that Lemmy World and other instances where hijacked. The hijackers had the full abilities of hijacked user, mod, and admin accounts. At this time, I am only aware of instance defacing and URL redirections to have been done by the hijackers. > > If you were not forced to sign back in this morning, contact your instance admin to verify mitigations were completed on your instance. > > ## How? > > This occurred due to an XSS attack in the recently added custom emojis. Instance admins should follow the issue tracker on the LemmyNet GitHub, as well as the Matrix Chat. Post-Incident Activity is still on-going. > > Currently, it is likely that just your session cookie was stolen, with instance admins being targeted specifically by checking for navAdmin, an HTML element only instance admins had. I do not believe this to affect users across instances, but I have yet to confirm this. > > ## What happens next? > > As I am not the developers or affected instance admins, I cannot make any guarantees. However, here is what you'll likely see: > > 1. Post Incident investigation continues. This will include inspecting code, posts, websites, and more used by the hijackers. An official incident writeup may occur. You should expect the following from that report: > > - Exactly what happened, when. > - The incident response that occurred from instance admins > - Information that might have helped resolve the issue sooner > - Any issues that prevented successful resolution > - What should have been done differently by admins > - What should be improved by developers > - What can be used to identify the next attack > - What tools are needed to identify that information > > 2. A CVE is created. This is an official alert of the issue, and notifies security experts (and enthusiasts), even those not using lemmy, about the issue. > > > 3. A code security audit is done. This will likely just be casual reviews by technical lemmy users. However, I will be reaching out to the Mozilla Foundation and Cure53 as they recently did an audit of Mastodon. If there is interest in an external audit of lemmy and the costs are affordable, I'll look into crowdfunding this cost.

Last night we moved the last of our stuff out of the basement....

We're hosted in a colo data center now!

Also updated to v0.18.2-rc1 to address the issues with cross site scripting that impacted lemmy.world and others last night.

Lemmit bot is off, not planning on turning that back on at this time.

Next on list:

• Finishing up some SSO/authentication that'll make giving admin access to different server services, apps, whatever possible in a manageable way.
• Complete paperwork/financial/tax/blahblahblah stuff

cross-posted from: https://lemmy.world/post/1060913

> cross-posted from: https://lemmy.world/post/1032247 > > > Finally tried the official Reddit app. It's as bad as they say.

Hey everybody!

The BeyondCombustion.net server will go offline for a bit at some point tonight/this weekend so I can migrate everything to the server in the data center and make DNS changes.

Hopefully not more than a couple hours, DNS changes can be….. fun.

My Ray-Ban case makes for a nice Firewood hardcase. It's claps closed but I throw a heavy rubber band around it so it stays shut. I have bunch of stuff riding around in my pack. falling while biking or skating is not uncommon. It's nice peace of mind.

cross-posted from: https://lemmy.world/post/1063439

> https://mastodon.moule.world/@MOULE/110586193055950459

My first instinct is to block that garbage from federating with this server because, fuck the zuck.

cross-posted from: https://lemmy.world/post/1033696

> We'll get there

But I forgot the gateway/firewall/router and had to drive back home (not as close as I’d originally hoped).

ooof.

Heading back to the data center again, hopefully didn’t forget anything else. 🤦‍♂️

cross-posted from: https://lemmy.world/post/1023609

> Pornhub has shut off access in Mississippi and Virginia to protest age verification laws that can involve checking government IDs. It previously blocked access in Utah.

cross-posted from: https://lemmy.world/post/1027821

> > Add it all up, and the social web is changing in three crucial ways: It’s going from public to private; it’s shifting from growth and engagement, which broadly involves building good products that people like, to increasing revenue no matter the tradeoff; and it’s turning into an entertainment business. It turns out there’s no money in connecting people to each other, but there’s a fortune in putting ads between vertically scrolling videos that lots of people watch. So the “social media” era is giving way to the “media with a comments section” era, and everything is an entertainment platform now. Or, I guess, trying to do payments. Sometimes both. It gets weird. > > > As far as how humans connect to one another, what’s next appears to be group chats and private messaging and forums, returning back to a time when we mostly just talked to the people we know. Maybe that’s a better, less problematic way to live life. Maybe feed and algorithms and the “global town square” were a bad idea. But I find myself desperately looking for new places that feel like everyone’s there. The place where I can simultaneously hear about NBA rumors and cool new AI apps, where I can chat with my friends and coworkers and Nicki Minaj. For a while, there were a few platforms that felt like they had everybody together, hanging out in a single space. Now there are none. > > > I’d love to follow that up with, “and here’s the new thing coming next!” But I’m not sure there is one. There’s simply no place left on the internet that feels like a good, healthy, worthwhile place to hang out. It’s not just that there’s no sufficiently popular place; I actually think enough people are looking for a new home on the internet that engineering the network effects wouldn’t be that hard. It’s just that the platform doesn’t exist. It’s not LinkedIn or Tumblr, it’s not upstarts like Post or Vero or Spoutable or Hive Social. It’s definitely not Clubhouse or BeReal. It doesn’t exist. > > Long-term, I’m bullish on “fediverse” apps like Mastodon and Bluesky, because I absolutely believe in the possibility of the social web, a decentralized universe powered by ActivityPub and other open protocols that bring us together without forcing us to live inside some company’s business model. Done right, these tools can be the right mix of “everybody’s here” and “you’re still in control.” > > > But the fediverse isn’t ready. Not by a long shot. The growth that Mastodon has seen thanks to a Twitter exodus has only exposed how hard it is to join the platform, and more importantly how hard it is to find anyone and anything else once you’re there. Lemmy, the go-to decentralized Reddit alternative, has been around since 2019 but has some big gaps in its feature offering and its privacy policies — the platform is absolutely not ready for an influx of angry Redditors. Neither is Kbin, which doesn’t even have mobile apps and cautions new users that it is “very early beta” software. Flipboard and Mozilla and Tumblr are all working on interesting stuff in this space, but without much to show so far. The upcoming Threads app from Instagram should immediately be the biggest and most powerful thing in this space, but I’m not exactly confident in Meta’s long-term interest in building a better social platform.

cross-posted from: https://lemmy.world/post/1022101

> Lemmy.world grew from about 51k users when third-party reddit apps started to shut down to about 84.8k users at the time of this post. > > Definitely felt some growing pains in the past few days, but it's great to see the platform more active now that things have become more stable. > > So, welcome reddit expats!