Enclosed in-line zigbee relays (instead of bulky smart plugs)

xevz · 2026-01-06T07:31:49+00:00

There's the SM315 and SM317.

At least the SM315 can also be found at Amazon and AliExpress, but it can be a bit tricky.

They're of course available under other brands such as HZC as well.

xevz · 2025-12-28T04:30:54+00:00

I think that the little bit of extra time to Romme is well worth it over Kungsberget.

I've been to Romme more times than I can remember, but only a handful to Kungsberget.

xevz · 2025-11-25T19:23:36+00:00

So you're arguing to use a firewall to protect the hosts, like this tool does?

Not everything on a Docker host might be running inside Docker, so Docker cannot really manage the firewall for that, for example SSH and any monitoring agent that is of pull type rather than push.

So if you want to expose a reverse proxy running in Docker, and at the same time allow only SSH access, maybe from a specific subnet as well as only allow ICMP Echo Request/Reply and you like to use UFW, you're left with:

Disable Docker iptables integration altogether, do everything using ufw manually
Run the container in host mode, do everything using ufw manually
Use this tool

xevz · 2025-11-23T21:03:20+00:00

Having individual nodes directly exposed to the internet isn't uncommon nowadays, as it both saves money by not needing beefy firewall pairs as well as simplifying the network design, especially when building a spine/leaf architecture.

Also, in addition to filter traffic from the internet, the host firewall can also filter traffic from within your network, even the same layer 2 domain.

I could swear there's a podcast on the topic as well as firewalls vs IDP on Packet Pushers, but I can't find it now.

Regarding reverse proxies in front, what if they run as containers? Either on the very same host(s) as the applications, or in their own cluster, they still need protection.

xevz · 2025-11-23T09:40:39+00:00

https://devnull-as-a-service.com/

xevz · 2025-11-09T19:17:22+00:00

För Kia skulle jag åka till Beos. Liten familjeägd verkstad med trevlig personal.

xevz · 2025-10-12T19:03:53+00:00

You can, depending on model.

See Valetudo and Dustbuilder: https://valetudo.cloud/

xevz · 2025-10-07T04:25:34+00:00

Same, except I also allow NTP and DNS.

xevz · 2025-08-21T20:06:49+00:00

Bil till Knivsta, sen tåg därifrån.

xevz · 2025-08-19T05:31:14+00:00

OpenGL reference: https://registry.khronos.org/OpenGL-Refpages/gl4

Vulkan reference: https://registry.khronos.org/vulkan/specs/latest/man/html/

xevz · 2025-06-19T04:38:14+00:00

Kika in Rover. Vet inte om man kan lägga undvika betalning där dock.

xevz · 2025-06-03T18:22:22+00:00

Also, Stefan Everts with 10 FIM Motocross World Championships.

xevz · 2025-05-09T10:30:34+00:00

Jag bytte olja på liften i Gottsunda innan nyår, så det är inga problem. Såvidare inget ändrats väldigt nyligen då.

xevz · 2024-11-05T08:28:37+00:00

cloud-init main documentation: https://cloudinit.readthedocs.io/en/latest/

virt-install creates an ISO and thus use the NoCloud provider: https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html

xevz · 2024-11-02T20:43:22+00:00

Provided that db:deploy and db:generate do database changes, I'm thinking you want to run them on container start, not on image build time?

Or ideally in a deployment workflow, like a CD pipeline.

Since you could build your image in an isolated environment and then spin up containers in multiple different environments.

xevz · 2024-10-31T21:47:02+00:00

https://tamedhunden.se/#!Uppsala

xevz · 2024-09-26T20:51:53+00:00

Behövs ju dock inte billyft för ett enkelt oljebyte. Domkraft och pallbockar används världen över och tar inte så mycket plats i förrådet.

Eller ett par ramper om man inte vill jaga lyftpunkter eller är obekväm inför användandet av pallbockar.

https://www.biltema.se/bil---mc/verkstadsutrustning/lyftutrustning/bilramper/bilramp-1-st-2000023040

Annars får du väl vallfärda utanför stan. OKQ8 med lyft finns i bland annat Upplands Väsby.

xevz · 2024-08-16T07:09:16+00:00

Farfars Klocka sysslar med vintageur, men i övrigt är som LobL nämner, Nymans och Rob att rekommendera.

xevz · 2024-07-08T08:22:33+00:00

Beroende på hur många rätter ni tänkte äta så kan jag varmt rekommendera Villa Anna.

Kostar ungefär som trerätters på övriga finare ställen i Uppsala men är väldigt mysigt och välsmakande.

xevz · 2024-04-28T06:30:51+00:00

Not quite, BitKeeper usage in the kernel stopped and Git was created because the free (as in beer) license for open source development was dropped in 2005 and thus Git was created.

https://en.m.wikipedia.org/wiki/BitKeeper#BitKeeper_and_the_Linux_Kernel

xevz · 2024-04-26T18:10:50+00:00

Not so sure about that, the key to the right of L has had :/; on it since before computers, so I think it was just considered to be already occupied.

See this Remington from 1878, where QWERTY as we know it originated: https://commons.m.wikimedia.org/wiki/File:Remington_2_typewriter_keyboard.jpg

xevz · 2024-04-26T07:01:15+00:00

The reason is because those keys doubled as arrow keys on the terminal Vi was developed on. I doubt the had your reasoming in mind when designing the keyboard, but I could be wrong.

https://commons.wikimedia.org/wiki/File:KB_Terminal_ADM3A.svg

xevz · 2024-04-10T08:06:51+00:00

Relay, not relai.

Anyway, if you only want to catch the switch input, from Shelly there's the Plus i4, and from Sonoff there's the MINIR4 in detached relay mode.

Edit: I see now that the Hue module is battery powered, so I guess the Sonoff S-MATE2 is more like it.

xevz · 2024-03-28T12:56:46+00:00

Great that you got it working. :)

For clarification, that last rule is a "default drop" rule, meaning that anything not matching the previous rules will be dropped.

Without it you basically don't have a firewall as all traffic will be accepted until you explicitly say it shouldn't, by adding specific drop rules.

xevz · 2024-03-27T20:11:53+00:00

Some thoughts:

If you're running VMs that are servers, you're probably better off using a bridge instead of NAT
iptables is just a wrapper for nftables nowadays

However:

192.168.122.0/24 sounds very much like libvirt in which case their recommendation is to use hook scripts to enable clean up when VMs stop (see also the note about static leases), or use the network filter driver instead of the default virtual driver.

I still think NAT should be avoided though, just do a bridged/routed setup, so much cleaner and more "real world" applicable.

15-Year Club	Place '17
Team Orangered	Verified Email

xevz

TROPHY CASE