1 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
2 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
3 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
4 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
5 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
6 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
} |
|
Show voter details
|
7 |
DENIED
|
edit
|
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
} |
|
Show voter details
|
8 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1558
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1556
+user: Proxies\__CG__\App\Entity\User {#2468 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#2033 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2021 …}
+slug: "How-s-your-housing-market-these-days"
+title: "How's your housing market these days?"
+url: "https://slrpnk.net/pictrs/image/e5fb9f23-f436-4398-91c1-ca430cbdda16.webp"
+body: ""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 30
+favouriteCount: 648
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1705916733 {#2024
date: 2024-01-22 10:45:33.0 +01:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2036 …}
+votes: Doctrine\ORM\PersistentCollection {#2144 …}
+reports: Doctrine\ORM\PersistentCollection {#2061 …}
+favourites: Doctrine\ORM\PersistentCollection {#2084 …}
+notifications: Doctrine\ORM\PersistentCollection {#2076 …}
+badges: Doctrine\ORM\PersistentCollection {#2083 …}
+children: [
App\Entity\EntryComment {#1558}
]
-id: 31865
-titleTs: "'day':7 'hous':4 'market':5"
-bodyTs: "'/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':3 'slrpnk.net':2 'slrpnk.net/pictrs/image/dfbeedf6-3e90-4ad7-9504-dcc22a367e4a.webp)':1"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705811134
+visibility: "visible "
+apId: "https://slrpnk.net/post/5936378"
+editedAt: null
+createdAt: DateTimeImmutable @1705724734 {#2422
date: 2024-01-20 05:25:34.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+root: Proxies\__CG__\App\Entity\EntryComment {#1722 …}
+body: """
Also $83/mo HOA, oof.\n
\n
Thanks for looking it up!
"""
+lang: "en"
+isAdult: false
+favouriteCount: 4
+score: 0
+lastActive: DateTime @1705778075 {#1562
date: 2024-01-20 20:14:35.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
"@j_roby@slrpnk.net"
"@Peter1986C@lemmings.world"
]
+children: Doctrine\ORM\PersistentCollection {#1723 …}
+nested: Doctrine\ORM\PersistentCollection {#1617 …}
+votes: Doctrine\ORM\PersistentCollection {#1625 …}
+reports: Doctrine\ORM\PersistentCollection {#1599 …}
+favourites: Doctrine\ORM\PersistentCollection {#1628 …}
+notifications: Doctrine\ORM\PersistentCollection {#1630 …}
-id: 326308
-bodyTs: "'83/mo':2 'also':1 'hoa':3 'look':7 'oof':4 'thank':5"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2144310"
+editedAt: DateTimeImmutable @1727162014 {#1565
date: 2024-09-24 09:13:34.0 +02:00
}
+createdAt: DateTimeImmutable @1705778075 {#1554
date: 2024-01-20 20:14:35.0 +01:00
}
+"title": 326308
} |
|
Show voter details
|
9 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
10 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
11 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
12 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
13 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
14 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
} |
|
Show voter details
|
15 |
DENIED
|
edit
|
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
} |
|
Show voter details
|
16 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1549
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1585
+user: Proxies\__CG__\App\Entity\User {#2456 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: Proxies\__CG__\App\Entity\Image {#1724 …}
+domain: Proxies\__CG__\App\Entity\Domain {#1883 …}
+slug: "is-a-hot-dog-a-sandwich"
+title: "is a hot dog a sandwich"
+url: "https://lemmy.ml/pictrs/image/040a409d-729e-4d60-ba05-6d5f65e3df00.jpeg"
+body: null
+type: "image"
+lang: "en"
+isOc: false
+hasEmbed: true
+commentCount: 160
+favouriteCount: 906
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1729512743 {#1689
date: 2024-10-21 14:12:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#1908 …}
+votes: Doctrine\ORM\PersistentCollection {#1711 …}
+reports: Doctrine\ORM\PersistentCollection {#1604 …}
+favourites: Doctrine\ORM\PersistentCollection {#1404 …}
+notifications: Doctrine\ORM\PersistentCollection {#1405 …}
+badges: Doctrine\ORM\PersistentCollection {#2025 …}
+children: [
App\Entity\EntryComment {#1549}
]
-id: 31644
-titleTs: "'dog':4 'hot':3 'sandwich':6"
-bodyTs: null
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1705722347
+visibility: "visible "
+apId: "https://lemmy.ml/post/10738852"
+editedAt: null
+createdAt: DateTimeImmutable @1705635947 {#2460
date: 2024-01-19 04:45:47.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1576 …}
+image: null
+parent: null
+root: null
+body: "If somebody asked you to bring hot dogs and tacos to a party, the host would probably not be just as fine with you bringing only tacos or only hot dogs."
+lang: "en"
+isAdult: false
+favouriteCount: 5
+score: 0
+lastActive: DateTime @1705686570 {#1673
date: 2024-01-19 18:49:30.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@getoffthedrugsdude@lemmy.ml"
"@getoffthedrugsdude@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1526 …}
+nested: Doctrine\ORM\PersistentCollection {#1527 …}
+votes: Doctrine\ORM\PersistentCollection {#1525 …}
+reports: Doctrine\ORM\PersistentCollection {#1550 …}
+favourites: Doctrine\ORM\PersistentCollection {#1548 …}
+notifications: Doctrine\ORM\PersistentCollection {#1566 …}
-id: 323398
-bodyTs: "'ask':3 'bring':6,25 'dog':8,31 'fine':22 'host':15 'hot':7,30 'parti':13 'probabl':17 'somebodi':2 'taco':10,27 'would':16"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/2133983"
+editedAt: DateTimeImmutable @1726814250 {#1560
date: 2024-09-20 08:37:30.0 +02:00
}
+createdAt: DateTimeImmutable @1705686570 {#1568
date: 2024-01-19 18:49:30.0 +01:00
}
+"title": 323398
} |
|
Show voter details
|
17 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
18 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
19 |
DENIED
|
edit
|
Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
20 |
DENIED
|
moderate
|
Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591 …2}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
} |
|
Show voter details
|
21 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
22 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
} |
|
Show voter details
|
23 |
DENIED
|
edit
|
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
} |
|
Show voter details
|
24 |
DENIED
|
moderate
|
App\Entity\EntryComment {#1709
+user: App\Entity\User {#265 …}
+entry: Proxies\__CG__\App\Entity\Entry {#1591
+user: Proxies\__CG__\App\Entity\User {#2098 …}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+domain: Proxies\__CG__\App\Entity\Domain {#2080 …}
+slug: "How-to-secure-podman-or-docker-containers-for-public-facing-hosting"
+title: "How to secure (podman or docker) containers for public-facing hosting?"
+url: null
+body: """
Context\n
-------\n
\n
I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further.\n
\n
Requirements\n
------------\n
\n
I want to run applications within containers such that they\n
\n
- Must not be able to interfere with applications running on host\n
- Must not be able to interfere with other containers or applications inside them\n
- Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh.\n
\n
> Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept.\n
\n
What I found so far\n
-------------------\n
\n
- **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user\n
- **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged\n
- **Networking:** The container’s networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources.\n
\n
Alternative solution\n
--------------------\n
\n
I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
"""
+type: "article"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 21
+favouriteCount: 83
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1719138740 {#2085
date: 2024-06-23 12:32:20.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: null
+comments: Doctrine\ORM\PersistentCollection {#2064 …}
+votes: Doctrine\ORM\PersistentCollection {#2088 …}
+reports: Doctrine\ORM\PersistentCollection {#2087 …}
+favourites: Doctrine\ORM\PersistentCollection {#2086 …}
+notifications: Doctrine\ORM\PersistentCollection {#2093 …}
+badges: Doctrine\ORM\PersistentCollection {#2094 …}
+children: [
App\Entity\EntryComment {#1709}
]
-id: 27753
-titleTs: "'contain':7 'docker':6 'face':11 'host':12 'podman':4 'public':10 'public-fac':9 'secur':3"
-bodyTs: "'abl':50,61 'accept':133 'access':74,94 'altern':202,211 'applic':9,41,54,68,157 'appreci':199 'bubblewrap':207 'compromis':17,86 'contain':21,43,66,140,149,159,164,169,177 'context':1 'daemon':150 'devic':79,96 'direct':223 'eventu':121 'exampl':118 'explor':32,194 'face':8 'far':138 'fix':123 'found':136 'get':122 'home':15 'host':5,57,154 'influenc':76 'inform':228 'insid':69 'intend':219 'interfer':52,63 'kernel':116 'like':114,125,215 'local':82 'manner':226 'may':110 'might':22 'mode':143 'must':47,58,71,180 'network':83,91,175,179 'note':99 'occasion':112 'one':24 'otherwis':85 'present':208 'public':7 'public-fac':6 'ran':171 'realiz':20 'reason':104,128 'requir':36 'resourc':201 'restrict':182 'risk':124 'rootless':142 'rout':34 'run':40,55,139,147,156 'scarc':235 'secur':18,88 'seem':214 'seen':206 'server':12 'shall':193 'solut':203 'sometim':108 'ssh':98 'still':93,185 'sure':187 'understand':106 'unprivileg':153,161,174 'use':222,230 'user':155,162,165 'via':97 'vulner':113 'want':3,30,38 'way':25 'will':131 'within':42,103,127 'without':16 'word':146 'would':120,198"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1704677667
+visibility: "visible "
+apId: "https://lemmy.ml/post/10216078"
+editedAt: DateTimeImmutable @1712598393 {#2029
date: 2024-04-08 19:46:33.0 +02:00
}
+createdAt: DateTimeImmutable @1704591267 {#2371
date: 2024-01-07 02:34:27.0 +01:00
}
+__isInitialized__: true
…2
}
+magazine: Proxies\__CG__\App\Entity\Magazine {#1584 …}
+image: null
+parent: null
+root: null
+body: """
Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.\n
\n
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in [this documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/)) as an ingress.\n
\n
With Cloudflare Tunnel, if you create an [application](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/) in front of it, you can require authentication and add a list of allowed emails.\n
\n
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
"""
+lang: "en"
+isAdult: false
+favouriteCount: 0
+score: 0
+lastActive: DateTime @1704593934 {#1439
date: 2024-01-07 03:18:54.0 +01:00
}
+ip: null
+tags: null
+mentions: [
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
"@cyclohexane@lemmy.ml"
]
+children: Doctrine\ORM\PersistentCollection {#1579 …}
+nested: Doctrine\ORM\PersistentCollection {#1577 …}
+votes: Doctrine\ORM\PersistentCollection {#1578 …}
+reports: Doctrine\ORM\PersistentCollection {#1571 …}
+favourites: Doctrine\ORM\PersistentCollection {#1574 …}
+notifications: Doctrine\ORM\PersistentCollection {#1667 …}
-id: 287485
-bodyTs: "'/cloudflare-one/applications/configure-apps/)':55 '/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':41 'add':65 'allow':69 'and/or':80 'applic':52 'authent':63 'cloudflar':30,46,82 'common':93 'consider':13 'contain':10 'could':72 'creat':50 'developers.cloudflare.com':40,54 'developers.cloudflare.com/cloudflare-one/applications/configure-apps/)':53 'developers.cloudflare.com/cloudflare-one/connections/connect-networks/routing-to-tunnel/dns/))':39 'differ':77,86 'disclaim':1 'discuss':15 'distribut':79 'dns':34 'document':38 'e.g':88 'email':70 'front':57 'funnel':90 'ingress':44,87,94 'k3s':28,74 'know':5 'kubernet':78 'like':35,95 'list':67 'most':18 'much':6 'network':19 'nginx':96 'person':23 'replac':73,81 'requir':62 'rout':32 'secur':8 'tailscal':89 'tunnel':31,47,83 'use':27,33 've':22"
+ranking: 0
+commentCount: 0
+upVotes: 0
+downVotes: 0
+visibility: "visible "
+apId: "https://beehaw.org/comment/1977165"
+editedAt: DateTimeImmutable @1712611390 {#1435
date: 2024-04-08 23:23:10.0 +02:00
}
+createdAt: DateTimeImmutable @1704593934 {#1436
date: 2024-01-07 03:18:54.0 +01:00
}
+"title": 287485
} |
|
Show voter details
|
25 |
DENIED
|
ROLE_ADMIN
|
null |
|
Show voter details
|
26 |
DENIED
|
ROLE_MODERATOR
|
null |
|
Show voter details
|