• 17 Posts
  • 1.04K Comments
Joined 2 years ago
cake
Cake day: September 9th, 2023

help-circle
  • How are u running it? Bare metal? Docker?

    So nginx, traffic, and cloudflare are both reverse proxies that can do SSL termination. Now cloudflare hijacks all SSL connection it proxies (essentially a mitm) and has configuration for if u would like SSL connection from cloudflare to ur own server.

    All reverse proxies pass along headers to backend services indicating all sorts of things most importantly the remote client IP, and info about if the service is behind an ssl proxy.

    I use client -> cloudflare -> nginx -> my services. The client makes an encrypted pipe between itself and cloudflare, cloudflare then terminates SSL does some scanning on the raw unencrypted packet makes an encrypted connection to nginx and attaches headers about the client. I have a SSL cert on my server where nginx does SSL termination of the cloudflare connection. Nginx then attaches more headers and does routing to passes it back to a backend service ie searxng (the service itself) the docker compose for searxng comes with a packaged traffic reverse proxie its not necessary here and will in fact cause all sorts of problems.

    Here is the service in my docker compose for searxng:

    searxng:
        container_name: searxng
        image: docker.io/searxng/searxng:latest
        restart: unless-stopped
        networks:
          - local_bridge
          - proxy
        volumes:
          - ./data/searxng:/etc/searxng
        environment:
          - SEARXNG_BASE_URL=https://${SEARXNG_HOSTNAME:-localhost}/
          - SEARXNG_SECRET=${SEARXNG_SECRET}
        cap_drop:
          - ALL
        cap_add:
          - CHOWN
          - SETGID
          - SETUID
    

    Here is the docker compose for my nginx config

      certbot:
        image: certbot/dns-cloudflare
        # Command to obtain certificates (run once manually or integrate with a web server's startup)
        # Replace 'yourdomain.com' and '*.yourdomain.com' with your actual domain(s)
        volumes:
          - ./data/certbot/conf:/etc/letsencrypt
          - ./data/certbot/www:/var/www/certbot # A dummy webroot, not strictly necessary for DNS challenge but good practice
          - ./data/certbot/secrets:/etc/letsencrypt/secrets:ro # Mount secrets read-only
        command: certonly
          --dns-cloudflare
          --dns-cloudflare-credentials /etc/letsencrypt/secrets/cloudflare.ini
          --non-interactive
          --agree-tos
          --email ${LETS_ENCRYPT_EMAIL}
          --dns-cloudflare-propagation-seconds 60
          -d example.com
          -d *.example.com
        environment:
          - TERM=xterm # Required for certbot to run in non-interactive mode gracefully
    
      nginx:
        image: nginx:latest
        container_name: nginx
        restart: unless-stopped
        ports:
          - "80:80"
          - "443:443"
        volumes:
          - ./data/nginx/cache:/var/cache
    
          - ./data/certbot/conf:/etc/letsencrypt
          - ./data/nginx.conf:/etc/nginx/nginx.conf
          
          - ./data/sites-enabled:/etc/nginx/sites-enabled
          - ./data/sites-available:/etc/nginx/sites-available
          - ./data/snippets:/config/nginx/snippets
          - ./data/www:/var/www/html
    
        depends_on:
          - certbot
        extra_hosts:
          - "example.com:127.0.0.1"
          - "*.example.com:127.0.0.1"
    

    I use certbot to issue SSL certs for my domain locally this is the cert that do SSL connection between nginx and cloudflare.

    Then nginx can route connection to the searxng instance (ur gonna need a bunch of nginx config and I couldn’t be bothered copy pasting that when an LLM can gen that it can probably gen all this tbh).

    Also how u doing auth for searxng? Cos if ur opening it to the internet as a whole u might end up with lots of traffic from randos.







  • It has nothing to do with electricity. It actually has everything to do with the unites states, the CIA, and a country it is now illegal for me to criticise.

    Essentially Ukraine surrendered their nuclear weapons and received a treaty from Russia, UK, and USA all promising to Ukraine it would be protected by their nuclear umbrella.

    Well Russia invaded Ukraine. Ukraine called the Wests bluff and thus got military backing under the gambit that if the treaty is broken by someone other than themselves they are all well good and free to go make nukes and not be in violation of said treaty thus forcing the west to give them military backing else risk a nuclear rearmed Ukraine (if Kyiv falls to Russia they are gonna take Moscow with them)

    Then Donald Trump cut em off and now they are being slowly crushed by the Russia meatgrinder.

    Australia has “assurances” that we will be backed by the united states up to and including US solders and deployment of US nuclear weapons. Ukraine his proven that these “assurances” are a load of shit. Also we are essentially a vassal state of the US. The CIA couped us cos our prime minister threatened to not renew the lease for pine gap (a US military base on Australian soil). He wanted to impose a clause where the Australia government could inspect said base to ensure no war crime where happening (we have since learned that war crimes where almost certainly happening). The unites states military base which proxed every single drone used by the unites states in every war in the middle east. And the rely station used by redacted nation as part of their intelligence sharing agreement used for guiding missiles.

    The assurances we where given are very similar to those that where given to Ukraine and thus the Australian defence force has realised we need nukes to ensure our sovereignty is maintained if the unites states stops backing us or becomes actively hostile to us.

    Technologically the tech and expertise for nuclear reactors are highly applicable for the manufacture of nuclear weapons. Defence has advised the government that we need nuclear reactors so we can make nuclear weapons and remove the blanket nuclear ban (the ban that doesn’t apply to the unites states base on ur soil that they couped our government to keep, commit war crimes at, and most likely hold some of the units states nuclear arsenal itself thus making Australia a target if anyone wants to nuke the unites states).

    Ohh and also the politicians got given a shitonne of money from the fossil fuel mogals who want to delay renewables. The fossil fuel mogals that wouldn’t exist if the government hadn’t been couped while in the process of nationalising all of Australia’s resources thus robbing every single Australian citizen of $130,000 USD

    tldr it’s the unites states fault.



  • U clearly have no idea how NASA actually accomplished man in the moon. Most of the rocket and infrastructure was built and designed by private companies being paid by NASA. NASA just did the integration, design, and analysis. Its the perfect example of a socialist policy taking advantage of capitalist industry.

    Capitalism, communism, socialism, and feudalism have nothing to do with democracy. They for the most part only refer to property in how its owned, who owns it, and what is property. Marx says everything that is not a person or a person labour is property owned by the state.

    This is a direct analogue to feudalism and its structure of property ownership. Under feudalism the state owns everything including you, under communism the state owns everything except you. Marx himself comments on the similarity and how that relationship can be leveraged to bring in a communist regime.









  • Someone claimed it contained hallucinations. I read through the entire thing as well as doing all the research and understanding of the concept being talked about. If someone is claiming that their are issues I expect them to be able to prove that. I’m not asking for a fact checker I’m asking for someone to provide evidence of the thing they verbatim claimed. If u wanna tell me that my research showing the sky is blue is wrong I would appreciate u pointing out my error otherwise ur just making baseless claims.