Jnr

It states it is "peak performance". Probably in a very specific use case. Or maybe it reaches the peak for an extremely short period of time before it drops the performance.

It runs on Linux. I wanted to get rid of dual boot and Windows partition. And also the UI interface performance is much better in FreeCAD.

I do have FreeCAD Ribbon addon, but I think the rest is as is. Indeed, it is the development version and it is stable, but I'll probably switch to 1.1 stable once it is released, just so that I automatically get the package from my distro.

...which is Arch, by the way :D

They only recently (a year ago) released v1 of FreeCAD.

Blender 2.5 came out ~15 years ago, and as I was learning Blender in 2010/2011 it did not feel nearly as good as it does now. I believe that something similar could happen with FreeCAD, as I tried it some years ago and it was unusable in my opinion, but now I can work with it without any major issues. And the more attention they get, the better it will become.

It is far from perfect, but it is quite usable now. https://i.imgur.com/4CezlnJ.png

Going back in history works better in Fusion360 than FreeCAD currently, but...

In FreeCAD it works but you have to think a bit how you approach it. For example, if you reference an edge that you later on go back and delete, of course it will break things. Also if everything is not correctly constrained and you go back and edit it, it will likely break things. And then there are some bugs as well, but it's free and open source so I am not complaining. :)

Similarly as with mesh modeling, where correct modeling style is needed for smoothing not to break things, with CAD you also have to get used to certain approach to modeling, you can't be as chaotic.

But the more you do it, the better you will become and in my opinion learning proper CAD modeling approach is easier than proper mesh modeling in Blender.

As someone who has modeled in 3DSMax and Blender using the mesh modeling approach and in Fusion360 and FreeCAD using the CAD modeling approach, for 3D printing I really recommend learning CAD modeling in FreeCAD.

The ability to make models precise, constrained and and parameterised more easily allows going back to previous steps to make adjustments.

For 3D printing it is very helpful to be able to change a defined variable and have the whole model recalculated. I often use variables for clearance, screw hole diameters, etc.

Recently FreeCAD has become very good and I have switched to it. And there are a lot of great FreeCAD tutorials on Youtube.

Once you have worked with the large cloud providers (AWS, Azure, GCP), you start to realize that solutions built on those platforms frequently differ a lot from what can realistically be self hosted. Especially when it comes to large SaaS platforms. They probably could not provide it even if they wanted to. Or it would be only viable to large enterprises being direct competitors, but not viable to a homelab.

I think it makes no sense for them to put much focus on developing a separate small open source version of their server. So it is good that they actually support its development.

I think you are correct. https://news.ycombinator.com/item?id=33990413 From the headscale commit log, seems like it was https://github.com/kradalby not the owner of the headscale repo. And he is making a lot of commits.

So, looks like Tailscale is paying one of the developers to develop for headscale, as par of his job.

This is one of the best ways a company can support an open source project though.

Religious or political ones? :) I did not know, but after quick search online, it states that Tailscale blocked russian IPs at some point in the past.

I guess it doesn't really matter, but it would have been nice to give some transparency to the reader that it was not due to actual technical limitations.

I learned this from hosting SmallStep CA behind Traefik. You can use TCP mode for specific subdomains and match it using HostSNI. Then if the client uses SNI it should work. So you can use both TCP and HTTP routers on the same port.

https://github.com/Janhouse/tailscaled-derper/blob/main/dock...

Since we use TLS passthrough and Traefik just proxies TCP, you have to pass certificates to derper, so you either use the Traefik certificate extractor or some other tool to get them.

And initially I though that I would have to integrate libproxyproto into derper in order to handle client IP addresses correctly behind Traefik but it looks like it doesn't really need it.

I am not sure I understand why Headscale was excluded. As far as I know, it is made by people not related to Tailscale.

It would be like complaining Vaultwarden is bad because the Bitwarden project is not fully open source even though Vaultwarden is fully open source and has most of the features implemented.

And Headscale kind of ticks all the other boxes mentioned, except "not headscale", because:

* p2p mesh network - it is a mesh network. And even when mesh is blocked, you can use multiple relay servers (derp) which will relay to the mesh from closest location. And you can host your own derp servers.

* Open source and selfhosted - check

* Not Wireguard (Signature-based blocking) - in cases where wireguard is blocked, the derp relay servers run over https and are usually not blocked based on signatures. For example, I use it with Traefik proxy in TCP mode so I could run derp and other http services on the same 443 port and it works great. So - check?

Packaged in nixpkgs - check

On top of that, if you add Headplane admin UI you get nice graphical management, very similar to the one of Tailscale.

I am actually playing around with something similar to nginx proxy manager but for Traefik. It's quite early version but already now it's nice for quickly sharing some services with people temporarily. https://github.com/Janhouse/traefik-proxy-admin I personally use it in homelab together with docker label based configuration. Adding headscale in the mix allows easily serving my development services with outside world.

I wonder how you are using it. I am mainly using Traefik with docker compose labels and it was not that hard to set up once you understand the concepts of routers, middlewares and services. I would use it for any homelab that has to host more than one service.

I also recently started playing around with web UI layer that generates traefik json config. Currently it is quite basic since it was initially made to provide limited time access to development instances but it could in theory manage most important aspects of proxy config and replace something like nginx-proxy-manager. https://github.com/Janhouse/traefik-proxy-admin

Having non-working grand parents that can help with watching kids is a nice way to ensure you actually get more kids in the first place. No sane parents will make lots of babies if there is no one who can help them with babysitting. And no, just kindergarten is not sufficient.

I use tailscale and wireguard and I route traffic between them, so I can't understand why are so many lines of code needed? Can't you simply enable subnet routing on the tailscale node (single argument does that) and perhaps add additional subnet to the addresses list of wireguard peer?

As a "Linux at home - macOS at work" user, I can't stand Window management on macOS. It is so inefficient and hard to manage.

AeroSpace tiling window manager finally changed my work day from constant struggle to only occasional struggle with macOS. I use it with sketchybar which is not yet perfect, but it could become quite good and performant with some work on it.

I currently use Gnome on Linux, not a tiling window manager, and I would gladly go with Hyprland, but about a year ago while I was trying it out, it crashed quite a few times so it clearly was not ready for production use back then. Will give it a shot again.

Initially I also tried debugging, writing reports, etc. Some 8 years later I have given up and just live with the occasional crashes.

Yes, I have Steam Deck and it works great. But I also have 2400G and 5700G and both of those have graphics issues (tested with different recommended RAM sets).

I have not had any issues with Intel or AMD CPUs but I have so many issues with AMD APUs, I would steer clear of them. In my experience with different models, they have many graphics issues, broken video transcoding and overall extremely unstable. If you need decent integrated graphics then Intel is the only real option.

I like it. I have been involved in software development for 20+ years - Perl, PHP, Java, Pyhon. And Nextjs and React gave me back the joy to develop web frontend again.

There are a lot of gotchas and considerations with Nextjs, but it is a framework and it is not unexpected that unless it is developed by yourself, frameworks require some getting used to.

There are some things that could be better, especially in non-Vercel-hosted scenarios, and if the backend for frontend part becomes too complicated, I would switch to Nest.js, but overall I am satisfied with Next.

The biggest deal breaker for me was no support for external displays (through DP alt mode/thunderbolt).

Also the infrequent random OS crashes were annoying. And sometimes WiFi would stop working after sleep (wold not show any access points) and would require a reboot.

M1 is 5 years old already and is still not fully stable and lacks features. It seems like the overall development effort started slowing down a couple years ago and while we did get the amazing audio daemon and graphics driver, development of other things seem to be stuck.

If I remember correctly, there were also some comments from Marcan (?) on social media about issues with supporting newer chips (M3/M4), hinting that M3 and M4 are vastly different and require significant effort to add Linux support.

So if M3, M4 and other future versions are too different to get supported in decent time frame, then that means that Asahi is all about supporting years old hardware. That reduces interest by Linux users looking to buy a laptop now, and thus potentially reducing available donations, developer pool, interest, etc.

I love what Marcan, Alyssa, James and others have achieved and how they have pushed Linux further. I think that their contributions will stay relevant and be useful for other hardware for many years to come.

Agreed, it is not that stable/usable. I tested it on M1 Pro and was hopeful, but after some years I realized it is not viable for daily use. Many things still don't work and I doubt that they will any time soon. Last year I was given M4 Pro at work and it is not supported at all.

Looking at the drama and people stepping down, I don't think MacBooks will be properly supported on Linux in this decade.

I don't think they are really blocking anything unless you specifically enable it. But it gives some piece of mind knowing that I could probably enable it quickly if it becomes necessary.

You pass all traffic through Cloudflare. You do not pass any traffic to Crowdsec, you detect locally and only report blocked IPs. And with Modsecurity CRS you don't report anything to anyone but configuring and fine tuning is a bit harder.

Looks similar to MetaMCP https://github.com/metatool-ai/metamcp

Not sure which of these tools is currently the best but they are clearly needed.

I am testing MetaMCP to expose internal MCP servers to the cloud version of Claude, enabling me to use Home Assistant and some other internal services in verbal conversations with Claude app on the phone.

I think 3rd party MCP server use is available in other AI assistants as well but Claude is the only one who allows using them in Europe.

I can only wish that this would become a standard approach with any AI assistants, including the built in phone assistants like Siri, but Apple is so so far behind and always trying to squeeze every bit of money wherever they can, I doubt they will ever do that.

This approach enables better integrations with local services specific to different regions, and I would somewhat compare this to RSS feeds which were popular 15 years ago. Would be nice if most e-commerce sites would provide their own MCP servers for managing carts, placing and tracking orders, etc. I don't want to see a world where single monopoly grabs this market and makes things shit again (like it happened with social media), especially for those who live outside of USA.

Externally I use Cloudflare proxy and internally I put Crowdsec and Modsecurity CRS middlewares in front of Traefik.

After some fine-tuning and eliminating false positives, it is running smoothly. It logs all the temporarily banned and reported IPs (to Crowdsec) and logging them to a Discord channel. On average it blocks a few dozen different IPs each day.

From what I see, there are far more American IPs trying to access non-public resources and attempting to exploit CVEs than there are Chinese ones.

I don't really mind anyone scraping publicly accessible content and the rest is either gated by SSO or located in intranet.

For me personally there is no need to block a specific country, I think that trying to block exploit or flooding attempts is a better approach.

When setting up the API key, use the "Select zones to include or exclude." section. Works fine on the free account.

Cloudflare also issues certs and logs them in transparency logs. If you do not create a wildcard cert in Cloudflare, your subdomains will leak. And Cloudflare offers free wildcard certs only on the domain root.

I use Headscale, an open source implementation of Tailscale control server. And it doesn't have funnel functionality implemented out of the box, but I use a custom Traefik proxy manager Web UI in which I can expose ports on different Tailnet nodes.

In order to avoid exposing something unnecessarily in the certificate transparency logs, I use a single wildcard certificate, so all the subdomains are not listed anywhere automatically.

I use the same approach for services hosted in the internal subdomain, because I don't want everyone to know what exactly I'm running in my homelab.