flisk

flisk, 5 months ago

@szescstopni easily, new setup is quite beefy

flisk, 5 months ago

@MagicLike @szescstopni my shelf

flisk, 5 months ago

this is excellent news because i no longer need to scale up my vps, which i almost had to do due to db size growth

flisk, 5 months ago

the setup is a little nastier than i'd hoped but also simpler in a way. the gist is:

for incoming traffic, i have two vpses reverse-proxying to my akkoma lxc container through wireguard (technically only one right now i still have to set the other one up and make the tls cert sync but shhh)

for outgoing traffic, i have a squid instance on the lxc container that round-robins between the two vpses, and then each of the vpses also has a squid instance that just spews out what it gets from the lxc squid. probably the easiest way to do redundant outgoing federation with a non-public backend host.

flisk, 5 months ago

current status: staring at the backend's nginx access log and the vpses squid log scroll across my screen with a stupid grin on my face

flisk, 5 months ago

@volpeon this is 100% on me for refusing to upgrade the CX11 this akkoma instance runs on (and to be fair these death hugs occur like once every couple months soooo... eh...)

flisk, 5 months ago

@volpeon would you like this post printed

flisk, 5 months ago

@volpeon here you go

flisk, 5 months ago

@cell capy

flisk, 5 months ago

@volpeon ich frag mich echt wie lang es noch dauert bis die breitere öffentlichkeit das thema auch leid ist

flisk, 5 months ago

this is actually very relevant for people with debian systems hosted on hetzner VPSes, because their package mirror doesn’t block access to that broken package right now. i had to do some surgery after running my routine upgrade playbook because the broken kernels got installed on some of my hosts.

if you have debian systems on hetzner cloud that use hetzners package mirrors, do not upgrade your kernel package at this time!

to prevent the broken package from being installed, you can do the following:

# cat > /etc/apt/preferences.d/debian_bug_1057843
Package: linux-image-6.1.0-14-amd64
Pin: version *
Pin-Priority: -1
[Ctrl+D]

please boost, this bug could break peoples servers if they’re not careful.

flisk, 5 months ago

@alyx totally real tho. the rind of some sausages totally smells like cum

flisk, 5 months ago

@alyx oh and how could i forget, this way i get to witness paris traffic again, which is, lmao

flisk, 5 months ago

@alyx i might look into it. i'd still have to get from the bus stop to the right train station and i'm not sure i wanna deal with any of that or ask to be spoon-fed which tickets to buy for what. thanks for the suggestion <3

flisk, 5 months ago

@alyx bercy is where i switch yeah

flisk, 5 months ago

@alyx i mean i took this same route on my first visit but started from bruxelles midi and took a train from germany to there because i could get that covered under deutsche bahn entirely, but that was a little too risky for me cause i barely caught that bus due to a train delay of almost an hour, so y'know