• 0 Posts
  • 15 Comments
Joined 3 years ago
cake
Cake day: January 7th, 2022

help-circle



  • I removed mine since I moved away from Gitlab. There’s other comments with working docker composes, but here’s the latest working version of mine if you’re interested:

    services:
      gluetun:
        image: ghcr.io/qdm12/gluetun:latest
        container_name: gluetun
        # line above must be uncommented to allow external containers to connect. See https://github.com/qdm12/gluetun/wiki/Connect-a-container-to-gluetun#external-container-to-gluetun
        restart: always
        cap_add:
          - NET_ADMIN
        devices:
          - /dev/net/tun:/dev/net/tun
        volumes:
          - ./data:/gluetun
        environment:
          ## ProtonVPN Wireguard
          - VPN_SERVICE_PROVIDER=custom
          - VPN_TYPE=wireguard
          - VPN_ENDPOINT_IP=${WIREGUARD_ENDPOINT_IP}
          - VPN_ENDPOINT_PORT=${WIREGUARD_ENDPOINT_PORT}
          - WIREGUARD_PUBLIC_KEY=${WIREGUARD_PUBLIC_KEY}
          - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
          - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
          - TZ=Etc/UTC
        ports:
          - ${QBITTORRENT_EXPOSED_WEBUI_PORT}:8080/tcp # qBittorrent Web UI
    
      qbittorrent:
        # https://docs.linuxserver.io/images/docker-qbittorrent
        build: .
        container_name: qbittorrent
        restart: always
        volumes:
          - ./config:/config
          # using download path as mount so other services can play nice
          - ${QBITTORRENT_DOWNLOAD_PATH}:${QBITTORRENT_DOWNLOAD_PATH}
          - ${QBITTORRENT_THEMES_PATH}:/themes
        environment:
          # https://github.com/linuxserver/docker-qbittorrent#umask-for-running-applications
          - PUID=${QBITTORRENT_WRITE_UID}
          - PGID=${QBITTORRENT_WRITE_GID}
          - UMASK=0002
          - TZ=Etc/UTC
          - WEBUI_PORT=8080
        network_mode: "service:gluetun"
        depends_on:
          gluetun:
            condition: service_healthy
    
      portcheck:
        image: eiqnepm/portcheck:latest
        container_name: portcheck
        restart: always
        environment:
          - QBITTORRENT_PORT=6881
          - QBITTORRENT_WEBUI_PORT=8080
          - QBITTORRENT_WEBUI_SCHEME=http
          - QBITTORRENT_USERNAME=admin
          - QBITTORRENT_PASSWORD=${QBITTORRENT_ADMIN_PASSOWRD}
          - TIMEOUT=300
          - DIAL_TIMEOUT=5
        network_mode: "service:gluetun"
        depends_on:
          qbittorrent:
            condition: service_healthy
    

  • Pretty simple to switch (if you have a little docker experience). Create a folder (e.g. ./postgres), add the folder as a volume in the postgres portion of the compose file (maybe something like /db), then run just the database with newly mounted folder, shell in, and copy everything from the Postgres folder to this new folder. After that, swap mounts so the new folder is used as Postgres db and you’re good. If something went wrong, the pgdata volume is still there to switch back to.


  • Good share. I saw the nudge in the mobile app, but I didn’t realize there was breaking changes and upgraded in the middle of the night before bed (what the hell was I thinking???). Spent a good extra hour trying to figure out why.

    Key take away, the pgvecto.rs version needs to be upgraded. If you are using docker, update the docker-compose.yml. If you’re not, upgrade your pgvector.rs version first. 🙏







  • I’m getting at the fact that most platforms do stupid shit like “this message might not be deleted if the receiver already saw it” like WhatsApp does and/or replacing messages with placeholders saying “this message was deleted”. Telegram can be plain-text and can have a lot of issues but it guarantees that stuff is actually removed without trying to bullshit you like other do.

    There’s absolutely 0 guarantee that what you’ve “deleted” is deleted. On any platform really. But what you can rely on is the fact that the E2EE is there to make sure things are only readable by whoever the messages were intended for (barring being hacked and compromised keys etc). The message can say whatever it wants, doesn’t mean a lot if you can’t trust the source. Again, we’re just talking about different threat models. With Telegram, it’s not meant for secure and private communication. It has a different audience. And to push Telegram as a private or secure communication, you’re actively doing the public a disservice.

    If we assume that your privacy / security is broken (because it is) I might as well use the platform that provides the best desktop and mobile experience with fast syncs, ability to disable animations, have real desktop apps and not electron shit.

    If you can’t trust even open source technology that you can review and build yourself. And trust renowned cryptographers reviews of this technology… then why are you in a privacy community telling people their experiences aren’t true to what they’re telling you?


  • Most people I chat with on Signal uses desktop too, I’ve never heard complaints. Most of my contacts use it now. There were hiccups in the earlier months but now it’s smooth and works great.

    I use Telegram every now and then. It’s has some nice features. But it’s not secure. The reason the messages “sync” fast there… is because it’s all plain text and on the server. For everyone to read. This is an undisputable fact about Telegram. The nature of the large channels you mentioned requires this insecure mode of storing chat histories, so that everyone can access. Where as with Signal, everything is E2EE. Except a tiny bit of metadata. Telegram everything is unencrypted until you use secret chats. Again. Different threat models. You can’t really compare it to Signal. It’s more akin to FB messenger. Which is not secure. Or private.

    Messages being deleted for everyone is a pretty common feature across all the platforms now. I’m not sure what you’re getting at. Arguably, chat history being stored plain text is much more a privacy nightmare (it’s literally the reason people want E2EE) than anything else.



  • I never understood these arguments for Telegram. Sure, it does have more features. It’s not better in terms of usability and cross platform support though. I use Signal desktop everyday. It’s a great experience. Cross platform… The only platform Signal doesn’t support is Web. Which… if there are mobile apps and desktop apps. Web is an insecure redundant need IMO. For the argument that web is good for scenarios where you can’t install desktop apps: I would flip the question to… why would you give a platform you have 0 control, permission to access your secure & private messaging? It just comes down to threat modelling. Telegram is neither secure, nor private. It shouldn’t even be in the same conversation unless talking about FB Messenger, messaging on Instagram or DMing on Twitter/X.