I only watched it now since the last two episodes were so bad I didn’t feel any anticipation or urgency to watch. It was a minor improvement though, 5/10

Black and white added nothing other than making it feel like Casablanca. The similarities were too much on the nose, it would have been better if it were just a nod.

The idea of the A plot was fine but as usual the writing is careless and full of holes and implausibilities. The B plot was just a waste of time and the resolution was unsatisfying.

There could have been a small subplot explaining why Number One looked identical to the resistance leader instead of “just a coincidence” (and she matched a retina scan too, very convincing).

Arch has, in parts, Canadian roots and was originally developed by a Canadian programmer. For that I, as a Canadian myself, want to strongly say “you’re welcome” in the name of the Canadian people!!

Adding my voice: Podman is great

Ah, interesting. Looks like using grants does resemble what I envision and probably easier to set up that mTLS. I’ll certainly explore that!

Ah, thanks for the idea. I’ll look into Traefik, I’ve heard of it, but wasn’t sure what it could do.

I’m already running Headscale, and it works great. But to expose individual services to individual devices it feels like an overkill. I don’t actually need all these devices to connect to the tailnet all the time, and some of these devices I don’t even want to be able to access the entire tailnet.

My thinking is to put Immich, Matrix, and CalDAV/CardDAV behind mTLS. So the clients practically do connect via native mobile apps rather than a browser. The devices belong to a small number of users, I don’t manage them, but can distribute the keystores, and plan on doing the PKI manually as it’s really not a lot to keep track of.

Not an authentication replacement for sure, just an extra layer of protection. The goal is mostly so that if there’s a new critical exploit, I don’t have to drop everything I’m doing and immediately mitigate.

Both are arbitrary but only one is an international standard

Improvement from last week, but at the end of the day it’s what we used to call a filler episode… 3/10, maybe a 4.

Dave Foley from Kids in the Hall is the resort manager.

Spooky? Yes. Trek? Maybe the shit kind. 1/10

Added nothing to my life.

Yes, but also a leftist…

So hard to pick a favourite. I’m especially proud of having the mail server.

Pretty good start for the season, nice sci-fi concepts, 7/10

Pet peeves: away team knew it had to be ancient Earth after seeing T-Rex, after riding an alien creature that looked exactly like a horse at the beginning of the episode…

I was sure that the Voth were going to show up when they said it was the dinosaurs’ Earth, I think it’s a miss not to explore that, but that ancient Martian civilization concept was also interesting. It’s not scientific however as we know pretty well that Mars was already bone dry 65M years ago.

Making the CGI team work for their money

I was talking about the packaging, not the brand. However setting my VPN exit node to a US location and looking up pictures of the product, most results do indeed have the same English-French labelling, funny.

Funny how my brain recognizes Canadian packaging before I consciously register the bilingual labelling.

I do for work but not for my self hosting operation, I don’t think it makes sense at least in my case. My recommendation is not to use full disk encryption on a home server, but to encypt specific directories as needed (I use fscrypt on an ext4 file system).

Some time ago I tried Abrechnung and it was quite good actually.

When you run out of local storage…

If you have a single node, external USB storage is 100% fine. Even if you have more machines, if you don’t actually need a massive amount of storage, you can share that external drive as NFS.

Sounds doable, will need a bit of scripting, but I don’t really get the use case.