screaming in digital

are you able to give additional info on the DNS issue you had?

dont discount the utility of running containers in an abstracted Hardware Virtual Machine (HVM) away from your physical hardware. it expands your testing surfaces and sandboxes immeasurably.

little wins and small victories is very low volume, but wonderful to see pop up in your feed.

and how has, literally, anything he has been doing for the past 12+ years not been focused on ensuring that there is a deep, substantial, robust pool of people to do exactly that?

honestly, I have always had pretty decent experiences with non-oem lead-acid batteries. my local battery place has a decent supply and longevity is roughly the same as the oem ones (3-4 years). I have never had any issues (type or frequency) that were not also an issue with oem batteries.

almost no UPS mfcr makes their own batteries, so if you strip off the labeling from the oem ones, you may even find an exact replacement.

edit: another advantage of a local place is the core-return rebate and disposal of your old batteries.

thats a pretty astute observation. still, narrowly missing a “state-level charlie kirk” because the fascists are just fucking bad at the job is not the type of comfort I hope for.

this looks like a state charge. trump (theoretically) has no control over state pardons.

You shouldn’t be getting downvoted.

agreed. a tad snarky, but it was an honest opinion. lemmy will grow and communities will fill out.

HAHA HaHa haha… * cry *

federation certainly allows the bubble to close - {dot}world is an example; zero hate, people can absolutely choose to ensmollen their PoV if that makes their world safer. the nice thing is, interesting, thriving alter-views are only a federated instance away :-)

I tend towards the democratic socialist point of view as a default, but damn-me if hexbear isn’t both entertaining and informative, even if I disagree with some of their more… spicy(?) positions (sometimes vehemently).

lemmy{dot}ml is one of the most widely federated instances around, primarily because its a pretty diverse mix of lefty and lefty-ish ideas. lemmygrad{dot} hexbear{dot}net and blahaj{dot}zone and others equality as infuriating/interesting are all accessible from lemmy{dot}ml. its a pretty ideal instance, for me at least.

one thing I do try to make a point of doing is preferentially interacting on non {dot}world posts and comments. many peeps will post across community instances to encourage engagent diversity. keeping things active on non-{dot}world communities helps everyone.

this is an important observation. lemmy users are pretty damn protective of our signature drive-by commentary and federation makes it easier to enforce “small world graph” etiquette.

holistically, I have never seen any situations where federation, on net, did not make things objectively better.

but… see! v0t3r Fr4uD! now praise your orange jeebus.

there will be violence from a small, but thoroughly brainwashed group of fascists.

This is the aftermath of the supreme court’s disastrous 6-3 ruling in Louisiana v Callais, decided less than a month ago, which gravely weakened the Voting Rights Act’s protections for Black representation. Ever since, Republicans have resembled eager children on Christmas morning, tearing our electoral maps to shreds.

you utter trash. you absolute excrement of humanity. we will remember every one of you racist fucks. retribution may be delayed, but it will come and your graves will be pissed upon for generations, you loathsome, useless waste of oxygen.

used to use anysoft keyboard, but development seems to have died a while ago. so I got on the heliboard train like many others. preferred anysoft because of flexibility, but heliboard is open and works well enough.

get this man on a goddamn ballot somewhere.

its not, really. and its something you get used to and come to appreciate.

the city analogy is a great one - every town has its own flavor. many towns build roads (federation) between them so all inhabitants can easily travel to each other… as a city.

some towns self-isolate or are isolated from other towns (defederated) for all sorts of reasons and, if you want to see what they have to offer, you can set up a house directly in that town or another town with a road to (federated with) that town. it really does allow some very cool places to thrive - like the internet was before it was purchased.

lemmy{dot}.world chooses to keep things pretty… bland? thats their right, but there is quite a bit of quality spiciness out there if you have a house in a well connected (widely federated) town or decide to set up a few additional houses in some of the more exotic towns.

does anyone have a federation graph up and running right now? should be easy-ish based on instance published federation lists.

“I think the audience of receptive Republicans is a lot bigger than what most folks would think in the Republican party,” Duncan said. “It’s not fun to have to defend Donald Trump.”

W.T.A.F?!

any time I think there just might be some minor redemption for these ghouls, their inner bootlicker congeals and oozes out of their putrid, flapping face-hole.

why did you defend this narcissistic, child raping, snake-oil pimping, murderous megalomaniac in the first place? it certainly wasn’t fun for any of his victims for decades and isn’t fun now. fuck all the way off, you useless sycophantic piece of shit.

no. I will call it what it is and shame anyone who uses weasel words to excuse the butchery of entire groups of people.

fuck anyone to hell if they choose to do otherwise.

agreed. you are using DNS-01 challenges. so the workflow is…

your local certbot machine initiates an https connection to the letsencrypt servers to start the DNS-01 challenge. during this HTTPS dialog, your local certbot is informed of the key material to insert into your DNS records. your local certbot then modifies your netcup DNS server (hosted remotely, not on your local network) with the keying material and the letsencrypt servers verify that the keys are actually there, proving that you control the domain. the letsencrypt serves then issue you the certificate (again, via HTTPS) and your local certbot stores it in your local host.

the issue is most likely stems from the initial HTTPS connection that certbot tries to make to the let’s encrypt servers. while your firewall allows this traffic out, it does not allow return traffic back in because of your explicit blocking of US (and perhaps other) based addresses.

even through your are using DNS for your domain autentocation, your local host - the machine running certbot - is unable to initiate the certificate transfer because of the firewall blocking return traffic.

the two external networks (and, therefore IP ranges/subnets/etc) that are important here are the let’s encrypt servers and the netcup DNS servers. certbot will have to talk to both of these in order to function.

not sure what you mean by external DNS

not hosting your own DNS server. specifically it sounds like your DNS server is hosted on your domain provider, not your own local network. you have set up certbot to automatically configure your remotely hosted DNS server for the DNS based renewal.

if DNS based recert was working before then it should be working now.

as I said in my edit, you are likely blocking the return https traffic from the US based let’s encrypt acme servers - so your initial diagnostic is correct. your local firewall is likely stopping the acme servers from talking back to your local host.

you are right back where you started, asking for info in how to allow-list the acme IP ranges. but at least we may now know why it is not working and you are seeing an https timeout even though you are using DNS based certificate renewals.

edit: typos