• 3 Posts
  • 22 Comments
Joined 2 years ago
cake
Cake day: August 15th, 2023

help-circle


  • remotelove@lemmy.catomemes@lemmy.worldSpace Travel
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    4 days ago

    Lemmy.world is weird about posting grow pics. Dig around to about the start of my post history for pics about how grows are done on a moderate scale.

    I get my strains from Denver Spore Company. (It’s googlable, again, not posting direct links cause .world is weird like that.)


  • remotelove@lemmy.catomemes@lemmy.worldSpace Travel
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    4 days ago

    Depends on the strain and you. On average, between 1/4 gram and 1 gram dried for me to get a decent buzz, but if I want to visit another universe, +5 grams or so. (Warning: “breakthrough” doses are no joke. It’s full emersion and your visual cortex is kinda useless for a couple of hours. It’ll just nope-out in a geometric maze for a bit. For the inexperienced, this is also potential psychosis territory.)

    I don’t drink anymore, which was kinda the goal. There isn’t really a need for me to go high dosage anymore and haven’t in a year or more. Even my low altitude orbits are limited to once every other month or so now.








  • remotelove@lemmy.catoSelfhosted@lemmy.worldSecrets
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    9 days ago

    I would look into something like Doppler instead of Vault. (I don’t trust any company acquired by IBM. They have been aquiring and enshittifying companies before there was even a name for it.)

    Look into how any different solutions need their keys presented. Dumping the creds in ENV is generally fine since the keys will need to be stored and used somehow. You might need a dedicated user account to manage keys in its home folder.

    This is actually a host security problem, not generally a key storage problem per se. Regardless of how you have a vault setup, my approach here is to create a single host that acts as a gateway for the rest of the credentials. (This applies to if keys are stored in “the cloud” or in a local database somewhere.)

    Since you are going to using a Pi, you should focus on that being a restricted host: Only run your chosen vault solution on it. Period. Secure and patch it to the best of your ability and use very specific host firewall rules for minimum connectivity. Ie: Have one user for ssh in and limit another user account to managing vault, preferably without needing any kind of elevated access. This is actually a perfect use case for SELinux since you can put in some decent restrictions on the host for a single app (and it’s supporting apps…)

    If you are paranoid enough to run a HIDS, you can turn on all the events for any type of root account actions. In theory once the host is configured, you shouldn’t need root again until you start performing patches.