papul
hi
papul
do I need voice to chat here?
RN
no you do not
papul
ohh ok. I was just looking at /topic
RN
or or at least I can see you papul
RN
actually, you are already voiced here
papul
I have i2p finally running on a debian machine at my home and have proper ipv4 static IP this time.
RN
nice
papul
I want to host a wordpress site. any guides available?
papul
I am running i2p+
RN
papul, there are active wordpress vulnerabilty scans supected to be ongoing in i2p, so the guidance would be unless you are top of game on it and not needing to ask for a guide, use something else
papul
RN, what do you recommend? I have used Hugo but I find it cumbersome.
RN
I personally reccoment the built in jetty. use it for many years. but my site is not very sophisticated or modern.
Hikari
papul: what's your goal?
RN
you might look on ramble.i2p and forum if there is any help there, or listen to Hikari... they know some things...
papul
Hikari, for the time being a placeholder site. I find hugo not very user friendly when it comes to site customisation
papul
adding posts is very easy
Hikari
i mean, it's your server lol
Hikari
most wordpress bugs are of the "attacker can execute arbitrary code on your system" variety
Hikari
so i guess it really depends on your threat matrix ^^
RN
placeholder sites are a little bit lame... make your stuff before you claim a permanent name
Hikari
or literally
Hikari
<html><head><title>coming soon</title></head><body><h1>TODO: everything</h1></body></html>
RN
also, I have daily evidence that people try wordpress vulnerability scanners on eepsites
RN
so don't wordpress on I2P unless you don't need to ask us for help
not_bob
I would avoid wordpress.
papul
I already have a bunch of docker containers running with exposed ports. I can just route to them via I2P right?
not_bob
And there are scans all the time for many things.
RN
pick litterally anything else
Hikari
papul: yeah, i use that to get my eepsite exposed over wireguard to my prod host
not_bob
Just doing' use wordpress.
Hikari
good luck
not_bob
don't.
not_bob
It's mad.
not_bob
bad
not_bob
I can't type.
Hikari
not_bob: some lessons are best learnt the hard way
not_bob
Yes :(
Hikari
at least docker should theoretically limit the splash damage
Hikari
would require a separate 0day to get to the host cgroup
not_bob
Yes, but still best avoided.
RN
it might requrie more than a separate 0day
RN
we don't know how old these docker images are
RN
s/more/less/
RN
but that's up to papul's threat model to deal with
RN
we tried
RN
at least there werent' crickets
RN
y'all jumped in as quick as i did
RN
not_bob_afk, oh... nevermind afk already
dr|z3d
don't forget to point people at eyedeekay's railroad if they want a blogging platform.
RN
oh, yeah. good one dr
RN
though, it really is as simple as a port number to hook stuff up
RN
but he packages stuff up nice
RN
I really should take a look at railroad, just I don't think I think enough to blog
RN
cuz I don't get it down on paper
RN
so to speak
RN
what you up to dr|feelgood?
RN
♫ ♪ ♪ ♫
dr|z3d
you been on the booze again, RN? :)
dr|z3d
oh, and not saying wordpress isn't easy, but as Hikari mentioned, it's prone to vulnerabilities which means you really have to be on top of updates.
dr|z3d
what am I up to? some last minute theme tweaks for I2P+ before tomorrow's release.
RN
me? nawww.. just a few beers
RN
and maybe a couple shots of soco
RN
so prety much sober as a church mouse
RN
(the church mice know where the wine is... just sayin')
RN
and, of course "theme"
RN
love your dedication to beutifying the darknet
RN
you are truely one of my heros dr|z3d
RN
I'm kinda excited for the update
RN
I don't think any but one friend have tried my dev versions, but it will be nice for the routers I put that on to blend back into the crowd again
RN
did I tell you Uncle Joe is recovering from his hysterectomy?
dr|z3d
your dev version?
dr|z3d
and when you say friends, presumably those friends are your routers? :)
dr|z3d
you never mentioned
RN
LOL
RN
yeah, I don't really advertize it yet
RN
but I do build dev versions for Canon
RN
I have the same kinda 'when I feel like it' schedule as eche|on
RN
but I only build them without any mods from me, unless I get the wild hair for updating javadocs
RN
when I say friends, I mean more than zero actual persons other than me tried it at least once
dr|z3d
oh kay :)
RN
that friend is now on plus, so nobody is using it
RN
and that was a few versions back
dr|z3d
well, re I2P+, -43+ is now current.
RN
I think ech builds dev versions unmodified too,,, if they still build them at all
RN
daym
RN
I'm gonna wait for release now on my +
RN
so close
dr|z3d
good plan. it's all cosmetic changes at this point.
RN
but you did exceeed expetations, T3s|4 should be happy
RN
you went 'over .40'
dr|z3d
:)
RN
poof!
RN
that was exhausting
RN
remind me not to do that again
T3s|4
yep RN, just about to restart into dr|z3d's latest (again) :D
T3s|4
-43+ running here on both laptops :)
dr|z3d
-44+ uploaded.
dr|z3d
fixes the i2ptunnel refresh after restart issue.