Mal eine klare Empfehlung für #SearXNG
Das läuft seit einen Monat ohne Probleme bei mir.
Die Suchmöglichkeiten und Ergebnisse finde deutlich besser als bei #DuckDuckGo
Was auch ziemlich cool ist ist die Netzwerkfähigkeit mit #nginx und #Tor Hidden Service.
Für Firefox gibt es ein passendes addon Namens #SearXNG4all
Da kann man dann die passende Adresse eingeben.
Leider findet #Torbrowser für Android das addon nicht und ich musste mir da ein Lesezeichen setzen.
https://github.com/searxng/searxng

Ok, time to deploy Anubis in front of Gitea, I'm done with those FAANG oligarchs scraping my repos 24/7 to check if anything changed...

F*ck off.

But that also means Gitea might get unstable for some time, woops

If you are curious : https://git.halis.io

If you see the cute furry, it worked

Another short blog post on blocking #AI #LLM #Bots that slow down a website. Using #NGINX, but easily adaptable to #ApacheWebServer #Caddy etc

https://www.infosecworrier.dk/blog/2025/07/botblocker/

Mises à niveaux services de la soirée…
#Nginx Proxy Manager passe en version 2.12.4
Site officiel : https://nginxproxymanager.com
#Mastodon passe en version 4.3.9
Site officiel : https://joinmastodon.org/fr
Chez Blabla Linux : https://mastodon.blablalinux.be
#PwPush (Password Pusher) passe en version 1.58.3
Site officiel : https://docs.pwpush.com
Chez Blabla Linux : https://pwpush.blablalinux.be

#Invoice #Ninja als Alternative zu Lexware und anderen #Abrechnungsportalen.

#Rechnungsstellung leicht gemacht: Wie ich als #Technik-Blogger mit Invoice Ninja via #Docker und #Nginx kostengünstig professionelle Rechnungen erstelle. Ideal für Selbsthoster\:innen, die eine freie und flexible Lösung suchen.

https://gnulinux.ch/invoice-ninja-als-alternative-zu-lexware-und-anderen-abrechnungsportalen

Nginx Proxy Manager 2.12.4 lands with API schema fixes, performance improvements, and a batch of new DNS providers for Certbot plugin support.
https://linuxiac.com/nginx-proxy-manager-2-12-4-released-with-certbot-enhancements/

Here is one of those nuggets of information that will save 2.3 humans hours of troubleshooting...

...when using contenarised "Nginx Proxy Manager" to serve a static website...
Disable Cache assets - As there is no upstream (internal server) to cache from. Your #NginX *IS* the web server.
Otherwise you will have a wild goose chase with some assets not rendering and logs not very helpful.

Ask me how I know
#docker #podman #selfhosting

Is this a bug with the Docker Compose version? #2204 #docker #nginx

https://askubuntu.com/q/1551638/612

"Creating my own small CDN for my Mastodon instance metalhead.club"

https://thomas-leister.de/en/creating-own-small-cdn-for-mastodon-instance-metalheadclub/

I've created my own little CDN for my Mastodon instance metalhead.club recently! And it works well! Here's how I did that

Switched this server to my new #Hetzner Object Storage backend. Also switched from #NGINX as reverse proxy to #Caddy.

This AI scrapping war is disgusting

Today, my ingress node was dropping packets because EVERYONE decided to scrape the hell out of my Gitea instance (Forejo soon)

OpenAI, Microsoft, Amazon and some other rando were all trying to gather data THEY ALREADY HAD

I really need to configure Anubis at the ingress level...

Just released: #swad 0.12

swad is the "Simple Web Authentication Daemon". It basically offers adding form + #cookie #authentication to your reverse proxy (designed for and tested with #nginx "auth_request"). I created it mainly to defend against #malicious_bots, so among other credential checker modules for "real" logins, it offers a proof-of-work mechanism for guest logins doing the same #crypto #challenge known from #Anubis.

swad is written in pure #C with minimal dependencies (#zlib, #OpenSSL or compatible, and optionally #PAM), and designed to work on any #POSIX system. It compiles to a small binary (200 - 300 kiB depending on compiler and target platform).

This release brings (among a few bugfixes) improvements to make swad fit for "heavy load" scenarios: There's a new option to balance the load across multiple service worker threads, so all cores can be fully utilized if necessary, and it now keeps lots of transient objects in pools for reuse, which helps to avoid memory fragmentation and ultimately results in lower overall memory consumption.

Read more about it, download the .tar.xz, build and install it .... here:

https://github.com/Zirias/swad

Nginx: "ssl_stapling" ignored, no OCSP responder URL in the certificate

https://linuxspicker.net/nginx-stapling-ignored-ocsp-responder-certificate_68

kubuntu 24.04.2LTS + nginx + apache2 + php 8.3 + all timeout settings correct = still a '502 bad gateway' error #kubuntu #apache2 #php #nginx

https://askubuntu.com/q/1551000/612

I'm thinking of developing a new course or workshop in the fall.. would any of these interest you?

Seit einigen Tagen werden Medien meiner Mastodon-Instanz metalhead.club global verteilt über ein eigenes CDN ausgeliefert.

Das verringert die Latenzen für Benutzer aus nicht-EU Ländern und sorgt für weniger Frust bei den Ladezeiten.

Was ein CDN ist, welche Implementierungsmethoden es gibt und wie ich mein kleines CDN umgesetzt habe, erfahrt ihr in meinem neuen Blogpost:

"Ein eigenes kleines CDN für meine Mastodon-Instanz metalhead.club" - https://thomas-leister.de/mastodon-media-storage-cdn/

For people with large WebSocket workloads using the ingress-nginx controller.

I recently hit this issue:

https://github.com/kubernetes/ingress-nginx/issues/2461

This drops all current WebSocket connections when ever the controller reloads the config. This can be triggered by adding/removing a new Ingress object (which this project does regularly due to customer load).

We ended up moving the WebSocket ingress to a separate LoadBalancer/Ingress class.