A Mouse

  • 9 Posts
  • 120 Comments
Joined 2 years ago
Cake day: June 1st, 2023
  • A MousetoSelfhosted@lemmy.world•HeadscaleEnglish
    10·
    15 days ago

    Look at either putting it behind a reverse proxy or using the built in Let’s Encrypt / ACME configuration.

    Suggested documentation:

    The config linked to in their documentation states

    # Address to listen to / bind to on the server
#
# For production:
# listen_addr: 0.0.0.0:8080
listen_addr: 127.0.0.1:8080

# Address to listen to /metrics and /debug, you may want
# to keep this endpoint private to your internal network
metrics_listen_addr: 127.0.0.1:9090

    Port 8080 TCP is used for the connection, 9090 TCP is for metrics and not suggested to port forward. If you use a reverse proxy, you do not need to port forward to either of those ports directly, and instead to the reverse proxy.

  • A MousetoLinux Gaming@lemmy.world•8BitDo controllers?English
    1·
    16 days ago

    The last thing I can suggest are the last two comments on the steam-devices repo: https://github.com/ValveSoftware/steam-devices/issues/64#issuecomment-3092449971

    Try adding these to a file such as /etc/udev/rules.d/71-8bitdo-pro-2.rules

    # 8bitdo pro 2 bluetooth hidraw
ACTION!="remove", KERNEL=="hidraw*", KERNELS=="*2DC8:6006*", MODE="0660", TAG+="uaccess"

    and/or

    ACTION!="remove", KERNEL=="hidraw*", KERNELS=="*2DC8:6012*", MODE="0660", TAG+="uaccess"

    The reason I added ACTION!="remove" is due to a recent change with systemd.

    ACLs for device nodes requested by “uaccess” udev tag are now always applied/updated by systemd-udevd through “uaccess” udev builtin, and systemd-logind no longer applies/updates ACLs but triggers “change” uevents to make systemd-udevd apply/update ACLs. Hence, the “uaccess” udev tag should be set not only on “add” action but also on “change” action, and it is highly recommended that the rule is applied all actions except for “remove” action.

    Recommended example:

    ACTION!=“remove”, SUBSYSTEM==“hidraw”, TAG+=“uaccess”

    The following example does not work since v258:

    ACTION==“add”, SUBSYSTEM==“hidraw”, TAG+=“uaccess”

  • A MousetoFirefox@lemmy.ml•What does network.http.http3.sni-slicing do in Firefox?English
    11·
    3 months ago

    So I am not entirely sure. I did find the code for it however if you want to take a look.

    In Firefox it uses the variable for the neqo library, which is the the Mozilla Firefox implementation of QUIC in Rust.

    Line #284: https://github.com/mozilla-firefox/firefox/blob/57e6d88cb3ad7f9777145f2d4fba11d4fc9de369/netwerk/socket/neqo_glue/src/lib.rs#L284

    code:

    let mut params = ConnectionParameters::default()
    .versions(quic_version, version_list)
    .cc_algorithm(cc_algorithm)
    .max_data(max_data)
    .max_stream_data(StreamType::BiDi, false, max_stream_data)
    .grease(static_prefs::pref!("security.tls.grease_http3_enable"))
    .sni_slicing(static_prefs::pref!("network.http.http3.sni-slicing"))
    .idle_timeout(Duration::from_secs(idle_timeout.into()))
    // Disabled on OpenBSD. See <https://bugzilla.mozilla.org/show_bug.cgi?id=1952304>.
    .pmtud_iface_mtu(cfg!(not(target_os = "openbsd")))
    // MLKEM support is configured further below. By default, disable it.
    .mlkem(false);

    In the neqo library it’s used here: https://github.com/mozilla/neqo/blob/9e52e922343609dba5171c0adb869cff7bd8d3a0/neqo-transport/src/crypto.rs#L1594

    code:

    let written = if sni_slicing && offset == 0 {
    if let Some(sni) = find_sni(data) {
        // Cut the crypto data in two at the midpoint of the SNI and swap the chunks.
        let mid = sni.start + (sni.end - sni.start) / 2;
        let (left, right) = data.split_at(mid);

        // Truncate the chunks so we can fit them into roughly evenly-filled packets.
        let packets_needed = data.len().div_ceil(builder.limit());
        let limit = data.len() / packets_needed;
        let ((left_offset, left), (right_offset, right)) =
            limit_chunks((offset, left), (offset + mid as u64, right), limit);
        (
            write_chunk(right_offset, right, builder),
            write_chunk(left_offset, left, builder),
        )
    } else {
        // No SNI found, write the entire data.
        (write_chunk(offset, data, builder), None)
    }
} else {
    // SNI slicing disabled or data not at offset 0, write the entire data.
    (write_chunk(offset, data, builder), None)
};
  • A MousetoLinux Gaming@lemmy.world•Nobara 42: SteamOS alternative updated with better driver manager, custom app store, and new Linux kernelEnglish
    71·
    6 months ago

    From the Nobara changelog: https://nobaraproject.org/category/changelog/

    plasma-discover and gnome-software have both now been replaced with flatpost. Flatpost is a new in-house developed one-stop shop for flatpaks. It is able to handle installation, removal, upgrading, and permissions of flatpaks as well as flatpak repository management. You should find it provides all of the same permission toggles as flatseal. It is a simple application built on python and gtk, and is meant to be a desktop environment agnostic solution (meaning it should run in any DE). We did this because while we only support Gnome and KDE, we understand users still want to install their own environments and will do so regardless of whether or not it’s supported. If they are going to do that, again we prefer users to install flatpaks where possible for their software needs, and not all environments have a flatpak shop. For example if I’m using hyprland or labwc, now I have a shop I can use with them: https://github.com/GloriousEggroll/flatpost. Users can still manually install plasma-discover or gnome-software if they prefer.