• 3 Posts
  • 203 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • That’s a good call out.

    There are a few things I do right now:

    1. All of my public DNS entries for the certs point at cloudflare, not my IP.
    2. My internal Network DNS resolver will resolve those domains to an internal address. I don’t rely on nat reflection.
    3. I drop all connections to those domains in cloudflare with rules
    4. In caddy, I drop all connections that come from a non-internal IP range for all internal services. Additionally I drop all connections from subnet that should not be allowed to access those services (network is segmented into VLANs)
    5. I use tailscale to avoid having to have routes from the Internet into my internal services for when I’m not at home.
    6. For externally accessible routes, I have entirely separate configurations that proxy access to them. And external DNS still points to cloudflare, which has very restrictive rules on allowable connections.

    Hopefully this information helps someone else that’s also trying to do this.



  • I just:

    1. Have my router setup with DNS for domains I want to direct locally, and point them to:
    2. Have a reverse proxy that has auto- certbot behavior (caddy) connected to the cloud flair API. Anytime I add a new domain or subdomain for reverse proxine to a particular device on my network a valid certificate is automatically generated for me. They are also automatically renewed
    3. Navigation I do within my local network to these domains gives me real certificates, my traffic never goes to the internet.



  • We have a principal engineer on our team that is pushing this sort of style, hard.

    It’s essentially obfuscation, no one else on the team can really review, nevermind understand and maintain what they write. It’s all just functional abstractions on top of abstractions, every little thing is a function, even property/field access is extracted out to a function instead of just… Using dot notation like a normal person.


  • Options:

    1. Very Wet paper towel on the plate, microwave the plate for 30-60s
    2. Heat it up over a flame, a ways away (ie. Butane torch under it, but like 12" away)
    3. If you have a small countertop over or air fryer/toaster. Heat it up in there briefly
    4. If you’re making toast, place it on top of the toaster (not too long, it can still break).

    You can also use an oven, but that’s a lot of air to heat up for just a plate. If you’re already using it though, that’s a win.

    I heat my plates up alllll the time.






  • Oh dear Lord. The hood has a filter???

    Yeah, that’s probably fucked up, none of the filters in anything in this house had been changed in years when we got the place. The filter for the furnace was black.

    And it’s been over a year since then I’m sure if the hood fan has a filter it’s absolutely disgusting.

    But I also meant that the hood could have a shape to it so that it collects air from the front burners which it doesn’t.



  • It probably has to do with the type of burner I’m going to guess.

    We’ve had both induction and electric stoves for our whole lives. And the home we recently moved into has a fancy dancy natural gas stove with star shaped burners.

    It is night and day compared to anything else we’ve used before, water boils so much faster, I can actually sear a pen full of vegetables now instead of just making them mushy.

    Honestly I love it. I just wish the hood wasn’t so shitty and actually had a hood to capture all of the output from the stove.