It's set up on the same box as my caddy install. I believe it's getting passed the real IP because that's what gets banned, and what I type in to unban it.

It just sees normal operations as http probing. Like if some other service goes down, my GetHomepage will then 404 and that's seen as probing. It bans surprisingly quick. Even after just one or two events (normal for someone just visiting the homepage) it'll just kick em right out

I've been having to inspect every alert and hand write whitelist parsers to whitelist 404s or whatever it may be for that app. Slowly accumulating a workable collection.. but seems like I'm missing something as no one else seems to complain about this in threads like these

Another example is my brother got banned for normal audiobookshelf usage. He just thought the server was buggy. It was just blocking him without us really noticing or thinking much of it at the time. Not great

Check out Komodo for doing docker UI work. Pretty new, but already awesome and making lots of progress

I've been using silverbullet! Been good to me, aside from the sync feature being a bit unreliable. I've had a few occasions where it reverted text I was actively typing, and/or didnt save my edits as I closed the window. Hoping they fix that soon as otherwise the app has been great

Recall Knowledge. If someone is going out of their way to do it, I try to round up a bit and give them something when I can. Also, I let them pick the type of info they want to learn about, like, "Does this creature seem to have high reflex". If you don't reward them enough, they just go back to blindly bashing, I think.

I'm also seeing if I want to add my own rules for peeking around a corner to shoot, since that's fairly unclear in the rules how that works. RAW just seems extremely punishing to need to spend two Step actions just to lean. For now, thinking about adding a peek action that lets you view around the corner for your next action, without needing to spend any more to go back once you're done.

For music, I've pulled it into my self hosted Plex setup, so even if the original sources like Bandcamp die, I am hosting my own copy.

Games are their own beast. Hard to do similar self hosted concepts when there are servers involved, other players, etc. I'm still 100% on the "streaming services" for games.

Yup! Spotify removing things off my playlists was a big initial factor into me getting into self hosting. All my music streams through Plex now and I haven't looked back

Huge fan of the cathedral view. It's the only thing that makes modding amazing.

In the parlor view, everyone is holding their secrets close to their chest and hiding the tricks, which means the community can't learn from each other nearly as well.

Cathedral is what allows tons of tiny contributions to add up to a vast amazing experience. Each person's work can be built upon by the next or used as inspiration and guidance for something new.

For an ecosystem built on people working after hours, this collaboration and knowledge exchange is fundamental.

Thanks for the insight! Does running this in a docker container help limit the damage at all? Seems like they'd only be able to access the few folders I have the container access to?

Just out of curiosity, is the tail scale part of this required? If i just reverse proxy things and have them only protected from there by the login screen of the app being shown, that's obviously less safe. But the attackers would still need to brute force my passwords to get any access? If they did, then they could do nasty things within the app, but limited to that app. Are there other vulnerabilities I'm not thinking about?

Ah, nice. I gotta do the reverse and check out Soularr a bit. I imagine my Deezer setup will eventually implode, so I'll need a fallback haha

Sure sure! Just a fallback to consider if you have trouble locating elsewhere, as I did. Spotify rippers were noticably bad quality, and torrents for music were very scarce compared to other media types. But maybe I missed something or there's better options now. Dropping $10 for a month to mass download everything at crisp quality isn't too bad an option, imo.

I use Deezer. You pay for it per month like Spotify, but they have API to just download the songs straight up. I think the open source UI I've been using for that is on the rocks a bit, but do far still been working for me

https://www.reddit.com/r/deemix/comments/zlswiz/last_update_is_now_out/?rdt=33875