• 2 Posts
  • 144 Comments
Joined 2 years ago
cake
Cake day: February 14th, 2025

help-circle

  • Lately there’s been someone chopping chives every day and posting a photo of the result.

    There was a bit of a drama when someone noticed that the same photo was reused from a couple of weeks back.

    The poster said they didnt have time to do it that day but wanted to keep the streak so they just re-posted an old one hoping no one would notice.

    It was just such an amazing and engaging sequence of events and I feel fulfilled having been able to follow this roller coaster of emotion /s.










  • This is really just a guess but… I think “agent” in this context means a personalised AI.

    Training gen AI models requires huge amounts of resources. Its not practical to train an AI for your personal use.

    Creating an agent is something like, taking an existing model, asking it to keep your entire browser history in mind while you ask it to do your homework.

    IMO its actually one of the big limitations of gen AI, but somehow the word is supposed to mean the opposite. As in, the current approach has reached a dead end requiring exponentially more resources for less and less improvement. So because we can’t make a model that just knows or learns everything, we have to make agents that know lots about specific things.


  • I’ve never used tailscale but use wireguard extensively.

    There’s not much of a learning curve for you as the administrator. You have to discard some misconceptions you might bring from other VPNs but really after 30 minutes of looking at configs you’ll get it.

    I use wireguard for my small team of 5 people to access self hosted services. You install wireguard, load the config, and then it just works.

    The trick, if it can be called that, is using public dns for private services.

    On your server, suppose you have service-a service-b and service-c in containers with ip addresses in the 10.0.2.0/24 range. Then you’d have a reverse proxy like traefik at 10.0.2.1. You’d also create a wireguard container with an IP in that same 10.0.2.0/24 range, and configure it’s wireguard adapter to be 10.0.12.1 or soomething so you have “2” for the containers and “12” for the wireguard clients.

    Then in wireguard configurations you direct all traffic for 10.0.2.0/24 through the tunnel but everything else just uses their devices normal internet connection.

    Finally create a public dns record pointing to the reverse proxy like *.mydomain.com > 10.0.12.1

    now whatever.mydomain.com will resolve to your reverse proxy but is still only available to devices connected to the wireguard container on your server.





  • But its always the dumbest fear.

    Its not like “im worried about some idiot POTUS destroying my livelihood through his own ego and a misunderstanding of economic policy” or “im not going to be able to afford health care when i inevitably get sick”.

    Its always “if you let gay people get married then people will marry their pets and that would be an atrocity because reasons”.



  • services:
      qbittorrent:
        image: lscr.io/linuxserver/qbittorrent
        container_name: qbittorrent
        environment:
          - PUID=888
          - PGID=888
          - TZ=Australia/Perth
          - WEBUI_PORT=8080
        volumes:
          - ./config:/config
          - /srv/downloads:/downloads
        restart: unless-stopped
        network_mode: "container:wg_out"
    

    this is my compose.yml for a qbittorrent instance.

    the part you’re interested in is the final line. There’s another container with the wireguard instance called “wg_out”. This network mode attaches this qbittorrent container to that wireguard container’s network stack.


  • I’d seen gluetun mentioned but didn’t know what it was for until a moment ago.

    I’ve heard of tailscale and at least know what that does but never used it.

    I personally have a mullvad subscription. I have a container connected to that with wireguard, and then for services I want to use that VPN I just configure them to use the network stack from that container.

    I’m not suggesting that my way is the best but it’s worked well for several years now.