If you really want something upgradeable, used enterprise SFF is the way to go: https://discountelectronics.com/

However, the hardware market is in a weird spot right now; you’ll get far more bang for your buck with an Intel N150. You can find a 16GB DDR5 w/ 1 TB SSD around the $200 mark, and that’s what I’d roll with in your shoes, assuming you don’t mind living without a spinning disk. Your Jellyfin and Immich instances will run far smoother.

No notes — I’d do the exact same thing based on your description. You can always unwind if CPU usage is too high under load.

Ah that’s fair, I can see where you’re coming from on that. Those icons could 100% be generated with AI given the right prompting.

In my book, they look way more like stock assets to me due to how generic the symbols are, and the consistent styling. The “army guard” icon is kinda sus because of the stick “gun”, but that can be read as deliberate ambiguity to appease potential corporate customers who don’t want gun depictions in their vector stock images, and same deal with the generic “six point star”.

You’d also think they’d have chosen some sort of more detailed depiction of “isolation & surveillance” than a megaphone, or a lightning head for “fear & control”. If any of the accompanying text was included in the prompt to generate these images, the output would’ve been completely different.

I challenge you or anyone else who thinks this is AI to try to duplicate the image using any standard gen AI tooling. Please post what you get, I fucking dare you.

This is 100% crappy vector art thrown together into a crappy infographic by hand, and that thing on the bottom of the skeleton is called a pelvis.

Bovines are ungulates, and thus have hooves. These eggs do not have hooves, and therefore are not bovine eggs.

QED

This is the best satirical shitpost I’ve seen in yea- AN XBOX A BLOODY GODLESS XBOX

This is the way.

Depending on the nature of the sim, it could probably even be done with ~80 GB or less of existing SSD space using zram w/ zstd.

The TLDR is that a history podcaster started doing a martian sci-fi arc on his podcast series about political revolution, but delivered it 100% straight without any fanfare. It’s quirky but very good.

https://martianrevolution.fandom.com/wiki/Mike_Duncan

I got back yesterday from working on this dig. It was my first field school experience — but despite the fuckery that is tent-camping in central Texas midsummer, I can safely say I’ll be back every chance I get.

If anyone reading this needs a push to get involved with their local org: do it! Best decision I’ve ever made, and the best pool of people I’ve ever met.

The project was a beautiful reminder that even in rural Texas, there are plenty of unsung heroes out in the wild who dedicate their entire lives to building community and looking out for others.

Lampless.

I hope one day you see the light.

That is a setup guide for hardware key and passkey auth. It is not a hardening guide, and does nothing to mitigate these LPE vulns.

deleted by creator

Please tell me more, which firewall would you recommend that plays nice with Docker?

Firewalld

No NAT?

Another user in this thread suggested DMZing, so combine your advice with theirs and boom. It’s not uncommon, and it’s fine if you firewall the box yourself. Most people don’t knowingly choose to use a firewall that they don’t intend to work, like you would.

why would you copy paste a docker compose without reading it?

There’s more than one way to use docker. Spinning up an official mysql image using the official docker run OR docker compose calls suggested by the docs would start up a server wide open to the entire internet if DMZ’d.

Just to throw out an easy option: if the music is well-labeled on Youtube, you can get pretty close to that full suite with just yt-dlp by using --embed-thumbnail as a stand-in for album art, dumping your files with an “Artist - track - album” naming structure using the --output-template flag — then using an awk or python script as a second pass to add the artist/track/album names to each file as tags.

E: and in case it isn’t self-evident, you don’t have to give yt-dlp a URL for each track; it’ll work fine with a playlist URL.

Yt-dlp is the gold standard for that.

https://github.com/yt-dlp/yt-dlp

Tag cleanup and album art are their own beast that you’ll wanna tackle post-download, but beets is another gold standard tool that can help with that layer.

https://beets.io/

Gnome. The maintainers have a hard-earned rep for contemptuous attitudes towards community and end-user feedback.

You shouldn’t suggest UFW at all then. There are other firewall options that can be used just fine with docker.

It does have real potential to cause issues, e.g. if OP were to put their server in DMZ mode on their router and later copy some docker setup instructions that don’t explicitly bind to localhost.

This is dangerous advice because docker is well-known for undoing UFW’s iptable rules. It’s mitigated by binding to localhost, but still way too easy for people to shoot themselves in the foot by using the two together.

In that case… welcome to the club.

You might get more than you bargained for: Shuttleworth has one helluva grip after all these years.