Xavier

@kineticdiplomacy@infosec.exchange @technomancy@hey.hagelb.org it would be a poor use of limited resources to actively search and purge projects, plus it would encourage some sloppers to play cat-and-mouse or rules-lawyer. I assume they'll have the same enforcement policy as non-FOSS-licensed repositories: only scrutinize repos when requesting CI access, using too many resources or otherwise being disruptive. But even with timid enforcement, it is a great signal of what the project stands for and who's welcome. So I sent my membership application today.

#SilentSunday #Photography #Paris

@n1k0@mamot.fr Yep, passing the same money around in a circle of B2B startups selling to other B2B startups, all under the same "accelerator".

Chill sous un arbre avec un bon bouquin et deux canards amicaux. Le réaménagement du parc Georges Brassens est une franche réussite ! #paris #photographie

@elena@aseachange.com I summarized my knowledge of proxy caching in this blog post that is hopefully easier to digest. Hopefully, it can help other Fedi folks trying to understand the Fediverse server stampede.

@amelieh2@framapiaf.org ce gâteau au cacao et betteraves est excellent. Il se fait bien avec les betteraves pré-cuites vendues sous vide. Pour les plats, tu peux regarder du côté des lentilles et pois-chiches. Ottolenghi a plein de recettes gluten-free, dont ces lentilles aux aubergines, que je cuisine ce soir ! On a fait leur frittata aux brocolinis dimanche dernier.

Loving this Subway Stations and transfers project by @albertgui@social.ferrocarril.net: 3,169 stations from different European cities are hand-modeled and available to browse, some of them as interactive 3d models! Zooming and panning around the famous parisian Châtelet-les-Halles is impressive! (no deep link support unfortunately, you'll need to navigate to it). #Subway #PublicTransport #PublicTransit #Urbanism

@fabi1cazenave@mastodon.social discord [noun]: Lack of concord, agreement, harmony; disaccord. Tension or strife resulting from a lack of agreement; dissension.Any harsh noise, or confused mingling of sounds.(music) An inharmonious combination of simultaneously sounded tones; a dissonance. Si le choix de nom n'était pas intentionnel, il est vraiment approprié a posteriori. L'optimisation pour le "Daily Active User" amène aux mêmes dérives toxiques que les autres plateformes commerciales.

@elena@aseachange.com looking at the response headers, the assets (fonts, css, js) are indeed served from cache (cdn-cache: HIT), but fedi instances don't load the assets when generating the preview, only the main HTML. The main HTML file is still not cached by the Hostinger CDN (x-hcdn-cache-status: DYNAMIC header, then a x-powered-by: PHP/8.2.30 confirming that wordpress was called). I'm not certain about the specifics for Hostinger, but in most cases, DYNAMIC indicates that the wordpress server itself denied caching via a Cache-control header. Right now, I think the stampeede issue will still happen, unless you change the wordpress config to allow caching of generated pages. It's not enabled by default, because when you enable it, you need to setup cache invalidation for page changes to propagate.

"lukewarm to politics" isn't at all my perception of Mastodon, quite the opposite. @ahltorp@mastodon.nu this means "lukewarm to MY politics"

The new Nebula show Day Pass is off to a great start! @notjustbikes@social.notjustbikes.com spends one day in #Nantes, and uses a dozen different transit lines. The "birthplace of public transportation" claim can be disputed, but Nantes' transit system is indeed a joy to use. Looking forward to more episodes!

Oucb, #Hetzner has announced a general price increse, ~30% increase on cloud VMs. In unrelated news, don't forget to tip your instance admin!

@elena@aseachange.com I'm of the opinion that pair-programming / pair-sysadmin is the most efficient way to learn. Unsurprisingly, this is what many specialized trades do. Second best is learning by doing, which is what you're currently doing! I have a decade of experience self-hosting (and also years managing terrabyte/day ingestion systems), I have free time, want to hone my teaching skills and live in Paris. Ping me if you'd be interested in free 1-on-1 mentoring sessions.

@elena@aseachange.com when loading your page, the browser loads data from two domains: https://elenarossini.com Hostinger proxy -> Wordpresss, for the "dynamic" page contenthttps://elenawp.b-cdn.net Bunny CDN -> (probably Hostinger proxy?) -> Wordpress, for the "static" assets. For this one, cache invalidation is not an issue because the urls have a ?ver= parameter, for what we call "cache busting": instead of purging the cache, we generate a new URL that will bypass the existing cache For the main domain, you cannot use the "cache busting" technique, so there's three options for cache invalidation: the simple "cache for 1 hour, fetch afterwards" cache-control: max-age header: simple to setup, but page changes don't propagate quicklythe more complex "cache indefinitely, setup the CRM to signal changes to the cache": needs a plugin and can be hard to debugthe simple "cache indefinitely, manually go in the CDN config to purge caches", viable when changes are infrequent Looking at https://blog.elenarossini.com/ we can see cf-cache-status: HIT and cache-control public, max-age=0 headers on the main HTML, which is option 2. I've seen too many people struggle with option 2 on wordpress and don't have the wordpress voodoo skills to guide you through it, but if the website is an infrequently updated one, option 3 could be the least painful to setup? You'd need to have https://elenarossini.com also go through BunnyCDN (or another) and set it's config to always cache pages (except the admin, of course), then find out how to manually purge (or build a small script to do so).

@karolherbst@chaos.social nope, the Go ecosystem rejects metaprograming and there's no macros in the language. Calling Server.HandleFunc is the idiomatic way to wire up endpoints. @aks@scalie.zone looking at your server definition, I'd encourage you to allocate a http.Server and use that instead of the package methods that use a hidden singleton server. It's even more important for http.Client. We tend to avoid global state in Go because it makes side-effects harder to track. The default http client, mux and server singletons are tech debt and should be avoided.

@x_cli@infosec.exchange same here, they definitely watch TLS Certificate Transparency logs. The intrusion scanners come almost immediately to check for open ports and php files, but the copyright launderers start scraping a couple of hours after.

@bonkers@nerdculture.de @alexglow@chaos.social rules that curtail "human nature" are called a social contract. You are indeed free to ignore it, in which case we're free to refuse to associate with you.

@siltaer@piaille.fr si l'introduction du vibe coding fonctionne, c'est grâce au manager. Si cela échoue, c'est la faute des employés. Rien de nouveau sous le soleil du "vous ne le tenez pas comme il faut".

@inex@pony.social but AI agents don't go on strike when the company sell weapons to genocidal nations. That's worth the added cost for many companies.

@inex@pony.social what, are they down again? And when they're up, github is down?

@scottjenson@social.coop and to preempt accusations of piling-on, I am replying to a post that is on my home timeline, because I used to follow you. I unfollowed you and moved on, but seeing you double-down in this thread prompted me to reply. Maybe we'll cross timelines again in the future and I'll follow you again.

@pwaring@social.xk7.net nope, blocks and mutes are private on ActivityPub because that information can be used for harassment purposes. Unsavory people on BSky have been going through their sempai's blockers to find harassment targets.

@petitmote@toot.aquilenet.fr jamais entendu parler, mais rien d'alertant quand je cherche des témoignages utilisateurs. Serait-ce pour un VPS ou un hébergement web ? Je souci avec les VPS pas cher est que cela va attirer les bidouilleurs, qui peuvent causer des dégradations de service. Dans ce cas, ne pas hésiter à ouvrir un ticket de support et demander d'être transféré sur une autre machine.

@petitmote@toot.aquilenet.fr oui, reviews typiques pour un petit hébergeur. une fois ajouté la TVA, leurs VPS performance sont au prix des VPS Hetzner et plus cher pour moins de disque que le français IONOStu cours toujours le risque que le réseau soit saturé par d'autres serveurs, même si le CPU et mémoire sont garantis.les trois hébergeurs proposent d'étendre le stockage avec un disque bloc supplémentaire, mais garde en tête que c'est un disque séparé, pas un agrandissement du disque principal. Il faudra manuellement répartir tes données entre les deuxles backups sont intéressants pour récupérer son serveur après une mise à jour foirée, mais ma préconisation est de ne jamais avoir les sauvegardes chez le même hébergeur que le serveur, cf OVH qui a perdu ses sauvegardes lors de l'incendie et celleux qui se font jetter de Hetzner et perdent l'accès du jour au lendemain. Je conseille de configurer restic ou borg, en utilisant par exemple le stockage S3 de scaleway. Heureux de t'aider à configurer cela si besoin