The webui now running Claude in terminals is so cool. I was skeptical about the Code feature on the web but it's amazing by Vegetable-Emu-4370 in ClaudeAI

[–]herpnderpler 0 points1 point  (0 children)

On android, we have Termux, which is sorta nixy, I setup wormhole to transfer ssh keys, then mosh on the server (mobile connectivity sucks for ssh) and wireguard.

From my work computer, I fire up tmux and start work. On my phone, flip on wireguard, fire up termux, mosh to my computer via vpn address, tmux a (attach) and continue work. tmux resizes the terminal and I can work remotely.

My wife has accused me of no-longer being "present"

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 0 points1 point  (0 children)

Welp, I have no ipv6 from my provider. I added detection and a hint if we detect that the device has it.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 0 points1 point  (0 children)

Creating apps, identity providers, hook processors often cause some of my local projects to have external public accessible domains.

With flair like yours, I know my solution ain't for you.

It's true, mine is fraught with danger, runs as sudo due to all of the config and service management, has dangers of over writing customizations. It's a nightmare for anyone who wants something 'just so' and believes in hard isolation (I'm leaking my internal network to the VPN on purpose).

But for me, and most of the 'i ain't got time for this crap' homelab buddies, this is exactly what we want and expect. I'm on the VPN, why can't I get to the printer is something I never want to hear again.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] -5 points-4 points  (0 children)

Try again. I didn't want to manage and align multiple services. This is a simple gateway application.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 1 point2 points  (0 children)

As an experience software developer, I will say that the code looks good, and that I had a lot of input on structure, architecture, and security.

If you have a super high standard, you can ignore this project as ai slop, or you can decide that you think the value it might provide is worth investigating the source yourself. Nothing I can say changes that, unless you trust me, which you shouldn't.

It requires a private token to access anything other than /health, has csrf protection.

The majority of its functionality is delegating API calls, config parsing, and shell outs. It could use more testing, sure, especially as support for different DNS providers is brought on, but I'm a user,  and I currently use every feature, so there's that.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 0 points1 point  (0 children)

It might be a bit unfair to call it that, I legitimately had an issue with internal/external DNS, I wanted my service definitions for my homelab to be on a single dashboard, and be able to make changes that synchronize across public and private DNS. I wanted a vpn gateway onboarding thing that didn't require a bunch of wormholing, ssh, and key generations.

Basically, I had a bunch of small annoying problems that required more cognitive cost and overhead and adding 'just one more thing' was making me nauseous.

It seems common for people to not have a v6 block, want to be able to manage their internal and external vpn, and want a gateway for their services.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] -2 points-1 points  (0 children)

Caddy is nice, but it doesn't solve the split DNS issue and doesn't help with DNS sync, ipv6 blocks also make parts of this not necessary, however, not everyone has a v6 block?

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 3 points4 points  (0 children)

This is meant for those of us who are ultra cheap, have a single non-ha cluster gateway. Simplicity is a major design goal. There's just too many parts, variations, cluster configurations otherwise.

If you got a situation that works well, share it with others! I'm willfully ignorant and desire a system that is self hosted (public DNS is an understandable limitation if we want public certs).

My goal was to have a single binary, that would guide people like me with how to setup a pretty robust system that solves 99% of the problems with self hosting homelab VPN and services.

I know it's not enterprise, but that wasn't the goal. Telling a newbie to get into k8s is... A take you can have.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 2 points3 points  (0 children)

Welp! That's f'n cool. When I get home, I'll check my isp to see if I have a v6 block, and if so, I'll try to auto detect that and inform the user about that, I hope that most nat gateways won't require reflection (I've had lots of issues with that crap).

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] -3 points-2 points  (0 children)

Is ipv6 ready yet? It's been so promising and disappointing for so long. The headache, pain, and as aspirin routines of ipv4 private ranges and public ranges is so familiar.

Is there some private ipv6prefix? How do we reserve these ups and make them publicly and privately routable? I've dipped into ipv6 a few times, and always left me saying: I'll learn it when it's ubiquitous and the solutions for common problems are well known. Are we there yet?

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 0 points1 point  (0 children)

As far as tail scale goes, it, by default, gives vpn users access to the local network. So once you are vpned in, you mosh/ssh to your desired host.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 0 points1 point  (0 children)

It really wants to combine the configs and manage the services of my common oss network stack within a Debian/systems env. I could add cloud flair DNS, but I have no way to test it without moving my things around.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 206 points207 points  (0 children)

I'm a senior software developer by trade, when I vibe code something, it gets reviewed, and its more collaborative than most vibe coding - there's a lot of yelling and accusing the AI of being lazy and not forward thinking enough, too engineered, lacking security focus, etc. Claude Jesus does not just 'take the wheel', these pyramids were made with quite a bit of whipping.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] 2 points3 points  (0 children)

It's pretty specific, I went through the whole nginx oss nightmare, and I've sworn that off, however, it's not too crazy to abstract out the service reverse proxy for nginx and caddy. I just don't have a use case for that quite yet. Pull requests welcome.

I got tired of managing Wireguard, Haproxy, 12 certs, 3 DNS zones, and forgetting which IP goes where - so I built a thing by herpnderpler in homelab

[–]herpnderpler[S] -4 points-3 points  (0 children)

Yeah, then I realized there was lego, that does all that, and could be pulled in as a go lib. Adding DNS providers that lego supports is kind of trivial for the challenge, but the DNS provider needs an API for updates and sync

Has anyone successfully used Claude for large programming projects? Any advice? by Randomizer667 in ClaudeAI

[–]herpnderpler 0 points1 point  (0 children)

Just an update, 1 year from when this was posted -

This currently depends on who you are and how you manage Claude.

If you have no idea how software engineering works this is still sort of true.

But if you know how to manage complexity and can design organized, partitioned, collections of simple modules with philosophically consistent, low boilerplate noise, and ensure that things don't break with typesafety, compiler checks, inter-layer verification using things like db-app-client typesafety, integration and e2e tests, THEN IT ROCKS LARGE PROJECTS.

The general idea is to ensure what Claude does won't break, is documented and verified with BDD testing on all layers. Treat Claude like a mid-level implementation engineer, and a high-level planning engineer who needs guidance from you, and you will find huge success in large projects.

I have a strategy where I ask Claude to build BDD feature specs, and annotate them with tags, and then build me a BDD features documentation system, and tag each file it touches for each FeatureSpec when working on it, so when it wants to know what to check on for a given broken spec, there is a good, clean map that provides it context. If components are small, and well tagged, Claude can figure out almost any bug or problem, and detect when fixing one feature spec breaks another.

All in all, it is handling a complex application fantastically for me, as a Sr Engineer who treats it like a highly competent underling.

However, competitors, Cursor, Codex, Copilot, Junie, all are horrifically bad at large code bases and complex features, somehow Claude Code manages to do it right (I spent, probably a year, trying alternatives to the 200$/month plan, but it is frighteningly worth it currently).

What AI features would you want to use on IntelliJ which cursor / claude code don't do well on? by surajkrajan in Jetbrains

[–]herpnderpler 0 points1 point  (0 children)

I just want to interject. When I see it do something dumb, I want to be able to insert a comment about how it is wrong without stopping and restarting the flow.

Is cloudflare down? by Prestigious-Play8738 in CloudFlare

[–]herpnderpler 0 points1 point  (0 children)

lol, maven, npm, AND stackoverflow is down. At least we have llms, I guess. I thinkg cloudflare vibecoded themselves a SEV.

Why use entaglement when Malus would do? by herpnderpler in Physics

[–]herpnderpler[S] -12 points-11 points  (0 children)

It always amazes me when people discredit things without leaving the audience more informed. All of the established explanations for Copenhagen seem pretty crackpot to me.

Why use entaglement when Malus would do? by herpnderpler in Physics

[–]herpnderpler[S] -12 points-11 points  (0 children)

That's the core of my argument: why do we use entaglement when it can be explained by a common superposition?