I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
Only debt we have a mortgage we owe 226k on. Cars are owned outright and were paid off early. Student loans we paid off early. We generally live below our means. CC’s are used for general purchasing and paid off in full each month. They are basically a stop-gap for fraud protection.
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
Frankly my favorite are just generic hospital blankets.
I still use a couple i stole from the hospital (or rather paid for through insurance and seized) when my kids were born 7+ years ago. THey are awesome, and very easy to wash. Hell you can even bleach em.
I didn’t know exploding heads shut down.
I have noticed a decent drop in the discourse myself and thus, am simply pulling back.
Size doesn’t matter to me as much as activity. And it’s just not to active in the topics I’m interested in discussing.
Instances shut down?
Im not making a statement, im askin.
The expanse.
I do similar. For laptops and docks, especially if they change setups it can be a pita (though you just need to copy files around).
Also the DE monitor config (ie that you use to login) is logically different to a users x config. So you gotta copy that over to make sure the primary monitor etc is right.
There are quality docks that work on displaylink. The dell D6000 is one example and we issue them out freely at work.
Most third party off brand docks will have higher failure rates. We see that with some anker docks that were usb-c+pd we use/had to source during the great supply chain snafu during covid. They worked in a pinch but aren’t reliable like a Lenovo or Dell dock. That’s less a displaylink thing and more a cheap dock thing.
DisplayLink compresses everything over usb. If you plan to do anything color sensitive (ie photo editing) or latency sensitivite (ie: games) it’s a bad idea sine it’s all cpu compression.
That said. They are great for multi monitor general usage (ie soreadhseets and shit) or for systems with graphic card limitations on multi display output (ie low end macs on m1/m2)
MS goes out of their way to make shit harder than it needs to be.
For example. The store, they have a store for business where you can simply whitelist known apps buts it’s a PITA to setup AND they have been threatening to decom it for ages
https://learn.microsoft.com/en-us/microsoft-store/microsoft-store-for-business-overview
Want to add safety/security features like secuirty keys. Well if you do it on a non domain joined machine you can just sign into a m365 account to enable a passkey or yuibijey as a second factor.
Want to do that in a business environment. Congrats now you have to deploy a windows CA and issue user certificates to tie to this. Even if you are signing the machine into m365 with ADAL.
They go out of their way to add complexity and failure points.
Tthe problem is now if you have the store disabled basic shit, like the ability to open .heic files is broken or use stuff people want like sticky notes is broken.
We turn off most of what we can’t but having the store enabled causes all sorts of stuff.
Also windows 11 has ads baked in even with the store disabled. Plug in a Logitech mouse, get a pop up for their software. Open the picture viewer and get an ad to install some video editor that isn’t clear whether it’s a Ms product or not.
No to mention basic things like copy paste and edit are now weird icons because I guess they think most users are illiterate.
Most of the 11 UI changes are not for the better. Having to beta test it for work is frustrating and I run an IT shop.
It is. Just never says what’s hung.
Frankly It’s more like
Windows - “shut down please. No it’s fine, I’ll wait. Indefinately is fine”
Linux “ shut down please. You have 30 seconds or I’ll shut you down myself”
Can help with all of them. But check out opnsense.
Exposing children to social media.
Putting your kids on social media publicly.
The kids that grew up with it will probably see the harm caused and not want to pass that on.
My distaste for systemd has been replaced by my distaste for netplan.
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.