Hmm. Is the upstream AP some kind of fancy deal or a run of the mill consumer router?

I’ve seen some Cisco APs configured to not allow multiple MAC addresses from the same station. Caused problems when trying to do VMs on my laptop that had the network in bridge mode.

Are you able to put your phone into hotspot, connect to that instead of the upstream AP, and see if it works?

I did that with a GL.iNet travel router after flashing stock OpenWRT, and used it as a wireless bridge for several years. It uses relayd to bridge the Wifi station interface and Ethernet. Once you have an ethernet bridge, you can connect another AP or do whatever from there.

If you create a second wifi interface in AP mode (in addition to the station/client one connected to the upstream), you should be able to add that to the LAN bridge alongside the ethernet interfaces. That bridge will then be part of the relayd bridge, and it all should just work (should, lol. I haven’t tested that config since I only needed to turn wifi into wired ethernet with this setup).

Interfaces:

LAN Bridge: Ethernet interfaces to be bridged to the wifi

I have both of its interfaces in this bridge, and it also has a static management IP (outside of the WLAN subnet). This management IP is a static out-of-band IP since the devices connected over ethernet won’t be able to access it’s WLAN IP (in the main LAN) to manage it. To access this IP, I just statically set an additional IP on one of the downstream ethernet client devices.

The LAN bridge is in a firewall zone called LAN.

WWAN: Wireless station interface that’s configured as a client to the AP providing upstream access. I have this configured statically, but DHCP is fine too. Firewall zone is WLAN.

WLANBRIDGE: The relayd bridge (Protocol: relay bridge). It’s interfaces are the LAN bridge and the WWAN interface.

Disregard the WGMesh parts; that’s separate and not related to the wireless bridging mode.

He’s a bastard coated bastard with bastard filling, but got dayum I love Bob Kelso.

Edit: Also, that’s the Ally McBeal-esque daydream sequence playing in my mind when I have to go into the office.

Wait, y’all announce when you leave? I just slip out like a ninja

Probably not cook, but reheat definitely. There are also frozen lasagnas that are microwavable.

Pro tip: Half the power, double the timer.

Can’t answer for them, but I really wish people would stop posting screenshots of Bluesky or Mastodon posts which are themselves screenshots of Twitter posts and calling it “breaking news”. Hardly quality sources.

Who would win the Space Karen contest? Ælon or Kai Winn?

Lemmy-UI is the “default” way to interact with lemmy on most instances. It’s kind of a dumpster fire in a lot of ways, but you only really start to notice it after you’ve used a third party client for any length of time.

The link in the post, LemmyApps.com, is a directory of actively supported 3rd party clients. You’re on Lemmy World, and they already run a few alternate frontends you can try with little/no effort:

• Alexandrite: https://a.lemmy.world/
• Photon: https://p.lemmy.world/
• Voyager: https://m.lemmy.world/
• Mlmym: https://old.lemmy.world/

Ok, so it’s the Windows 7 of Lemmy clients then lol. (minus the open source anyway)

Nice! Yeah, I’ve been a big fan of it. Planning to eventually replace my custom Snapdrop with Pairdrop since they’ve made quite a few other improvements.

Pair Drop

Quickly send files, paste images/text snippets between devices.

I’m using the older Snapdrop (which PD was forked from) with some patches I made to:

• Work behind Authelia for SSO + 2FA
• Use the display name provided by Authelia instead of the random usernames it gives out by default
• Send transfers over the internet without dealing with the temporary “rooms” that Pairdrop uses (it’s behind Authelia, so only authorized users can get to it).

It has 100% replaced emailing things to myself or shuffling files to/from Nextcloud. I probably use it to send text (URLs, clipboard contents, etc) to/from my phone as much as I use it for sending files back and forth.

https://smallstep.com/docs/step-ca/index.html

There’s basically two executables involved:

• step is the CLI app used to request certificates
• step-ca is the server process the step client connects to

I’ve got the CA portion bundled into Docker. It can also run as an ACME server (and is compatible with certbot).

I run a custom build of Nginx with a few extra modules compiled in:

• ModSecurity
  • https://github.com/SpiderLabs/ModSecurity-nginx.git
  • https://github.com/SpiderLabs/ModSecurity
• Nginx GeoIP2 Module (https://github.com/leev/ngx_http_geoip2_module.git)
• OWASP Core Rule Set: https://github.com/coreruleset/coreruleset/tree/v4.10.0/rules

Some guidance can be found here: https://docs.nginx.com/nginx-waf/admin-guide/nginx-plus-modsecurity-waf-owasp-crs/

That guidance is for NginxPlus, but you can compile the dynamic module yourself with the community versions.

made an awkward gesture in a moment of enthusiasm

Twice. Once, maybe it was an unfortunate, awkward moment. Twice? Ehhhhhh, doubtful.

The most charitable thing I can say is that if he’s not literally one, he’s signaling the ones who do identify as such.

Right, that’s…what they all say. But if you’re blocking the ramps and I have to heave-ho my cart over the curb and/or walk around a parade of other parked cars, it gets annoying.

It’s better than that lol. The last time I heard that announcement at the airport (been several years), it was “The loading zone is for immediate loading and unloading only”. These people park in the fire lane for 15-20 minutes while their passenger “just goes in for a few things”.