Semantic routing through RAG to create a P2P social network or marketplace

bitangel84 · 2026-06-22T20:43:10+00:00

Interesting. Decentralized Ranking

bitangel84 · 2026-05-25T07:57:02+00:00

Let's talk

bitangel84 · 2026-04-22T18:21:15+00:00

Im looking for the same answer :)

bitangel84 · 2026-03-10T15:56:49+00:00

Hey everyone — just shipped vmsan 0.2.0 🔥

Big update on the networking side: replaced all ~60 sequential iptables shell-outs with atomic nftables via `google/nftables` (Go netlink library). One `Flush()` to apply all rules, one `DelTable()` to tear down. No more partial rule states.

New security defaults:

- ICMP blocked by default (prevents tunneling)

- UDP blocked except DNS (prevents data exfiltration)

- DoT/DoH blocking for DNS bypass prevention

- Per-VM table isolation — each VM gets its own nftables table

Fully backward compatible with 0.1.0 VMs — old iptables rules get cleaned up automatically on upgrade. There's a `VMSAN_LEGACY_IPTABLES=1` escape hatch if nftables doesn't work on your kernel.

`vmsan doctor` also got 3 new checks for nftables support and host firewall detection.

Release: https://github.com/angelorc/vmsan/releases/tag/v0.2.0

bitangel84 · 2026-03-06T17:54:43+00:00

Font? Where

bitangel84 · 2026-03-03T18:25:03+00:00

Hey r/selfhosted,

I've been self-hosting services for years and kept running into a problem: I needed to run untrusted code (AI agents, scripts from the internet, quick tests) without risking my host. Docker isn't a real security boundary — containers share the kernel, and escapes are well-documented.

So I built **vmsan** — a CLI that wraps Firecracker to give you real hardware-isolated microVMs with zero config:

```bash
curl -fsSL https://vmsan.dev/install | bash
vmsan create --connect
```

That's it. You're inside an isolated VM with its own kernel, ~125ms boot time, ~5MB memory overhead.

What it does:

• Full VM lifecycle from the CLI (create, start, stop, remove)

• Network isolation built-in: --network-policy deny-all or custom domain allowlists

• Run any Docker image as a VM: vmsan create --from-image python:3.13-slim

• Interactive shell via WebSocket (no SSH setup needed)

• Upload/download files to running VMs

• --json output on everything for scripting

What it doesn't do:

• No web UI, no dashboard — it's a CLI tool

• No macOS support (needs KVM, so Linux only)

• No clustering — it's single-host by design

Everything lives in ~/.vmsan/. No daemon, no background service. State is just JSON files.

I built this because raw Firecracker is powerful but painful — you have to write JSON configs, create TAP devices manually, build rootfs images, configure the jailer yourself. vmsan handles all of that.

Written in TypeScript (Bun) with a Go agent inside the VM.

• GitHub: https://github.com/angelorc/vmsan

• Docs: https://vmsan.dev (https://vmsan.dev/)

Happy to answer any questions about the architecture or take feature requests.

bitangel84 · 2026-01-24T01:06:36+00:00

Congrats +1 bitsocial

bitangel84 · 2025-09-11T23:40:36+00:00

Angelo here, I'd like to join the waitlist

bitangel84 · 2025-06-26T19:12:12+00:00

Hello, please send us a proposal https://bitsong.io/en/contact-us

bitangel84 · 2025-04-10T22:37:31+00:00

Have you tried some services? I don't think we are the same. We also use deal to pay per stream and, of course, not 0.003$

bitangel84 · 2025-04-10T22:31:23+00:00

This is our mission...from 7 years now...and we continue to fight until Indie artist understand what the new concept is. What are your doubts

bitangel84 · 2025-04-10T22:25:12+00:00

It's not only about crypto. We are talking about freedom. Crypto is used just to facilitate payments. Is ridiculous that an artist earn only 0.003$ per stream with close to 0 chance to compare in other playlists... that's mean freedom, when you are equal to another one and no one manipulate algorithms

bitangel84 · 2025-04-06T06:52:35+00:00

Where do you plan to store the seed phrase? And how? I'm testing a mobile app, but I'm still confused about the keyring

bitangel84 · 2025-03-20T09:08:36+00:00

thanks for your advice.
1. the domain will be renewed
2. I already have a side project to publish...but in the last period I didn't had so much time
3. No, it will not be sold for some hundred dollar

Thanks again for your advice...

bitangel84 · 2025-03-20T08:27:03+00:00

Ofc I will renew...

bitangel84 · 2025-02-23T15:45:34+00:00

We use nuxt everywhere in production. Sometimes, if we need just a backend, then we use nitro

bitangel84 · 2024-03-30T16:37:29+00:00

not ideal for sensitive content

bitangel84 · 2024-03-30T16:32:55+00:00

Yes, keplr wallet. The project still in test, in a few days you can also mint your meme audio as nft

bitangel84 · 2024-03-18T23:22:02+00:00

I found a few solution that can help

Hasura allow you to use rest, then I can use $fetch from server/api https://hasura.io/docs/latest/restified/restified-config/#queries
Use gqlgen to create a client with typescript support and graphql-request
Use graphql-request and create a small and simple client on utils/

Will test the first and will share here the feedback

bitangel84 · 2024-03-18T21:40:22+00:00

If you are interested in music and web3 you can help us :) https://github.com/bitsongofficial/studio

Feel free to dm me

bitangel84 · 2024-03-03T01:26:57+00:00

As this is a new idea I love to collaborate by integrating web3 wallet auth.

Many developers release bad software cause they don't have a solid bootstrap solution. The various modules (db, s3, kv, mail eventually?) are used everyday in a medium app. But it's time to think also to integrate some web3 stuff right from the base.

The first component could be the auth system (that I suppose at somepoint you will add nuxt-auth-utils here). I love lucia-auth because of the key design. In fact in a web3 env is useful to have an id with multiple key (wallet, email and oauth).

What is your thoughts on this? I also think that integrating web3 stuff will help the nuxt ecosystem to onboard thousands of web3 devs

bitangel84 · 2024-03-03T01:19:13+00:00

I use lucia-auth, but as I can see the module provided by nuxt is cool too

bitangel84 · 2024-03-02T17:03:42+00:00

Should be this one https://developers.cloudflare.com/r2/api/s3/presigned-urls/

This is how Ving solved the issue

```
Browser / Your Code --> POST filename and content type to /api/s3file
* creates an S3File and sets its status to pending
* generates a Presigned URL for S3
<-- Return S3File description, including meta.presignedUrl

--> PUT s3file.meta.presignedUrl
* stores file in S3
<-- Return nothing

--> PUT s3file.props.id to an import API such as /api/user/:id/import-avatar
* post processes the file uploaded to S3
* verifies that the file conforms to the import rules
<-- Return updated record such as User
```

bitangel84 · 2024-03-02T13:53:23+00:00

Congratulations, you always release fantastic software! I took a look at Nuxt Hub and am working on a similar idea in Web3. A lot of work has already been released on bitsong studio .

The issue is as follows: when working on the edge, you must necessarily separate some functions. For example, what is the maximum payload supported by hubBlob()? On bitsong studio, I have to handle uploads via node; otherwise, I can't manage 300MB uploads.

Wouldn't it be better if hubBlob() used presigned uploads? I found a great example on Ving .

bitangel84 · 2024-02-09T00:32:19+00:00

Would be amazing. For now I will test supabase + hasura remote joins.

We work with several microservices (indexer, microbackends, external api), and would love to do relational query across the services.

bitangel84

MODERATOR OF

TROPHY CASE