I've been the sole developer for my company's website for over a decade now. It's gone through a bunch of evolutions throughout the years, but I've been sidetracked lately and have let things stagnate as far as maintenance goes. Now, I'm looking to do some upgrades for security purposes and I'm trying to wrap my head around everything.

Some facts:

• PHP 8.0.12
• MySQL 5.7
• Symfony 5.4
• Web server is currently Apache only because that's what I've always used. I'm open to nginx or other options.
• Running on a Google Cloud VPS with Ubuntu 20.04
• I also use Google Cloud Storage to host thousands of images

My first thought was to take baby steps and start by upgrading Symfony as much as possible. However, the next major version (6.0) requires PHP 8.0.2. Symfony 6.1 requires PHP 8.1. Symfony 7.2 (the current release) requires PHP 8.2. So, then it just makes sense to upgrade PHP to the latest version.

However, I am terrified of upgrading PHP in the current (outdated) Ubuntu environment. So I might as well upgrade the distro while I'm at it.

And then, MySQL 5.7 is no longer supported, so I might as well bring that up to date too (8.0, I believe).

There will be no baby steps. I'm gonna have to just upgrade everything all at once. Which then leads me to my next question: should I stick with the self-managed VPS, or is it time to look at something like Google App Engine or Fly.io that is a little bit more managed and "locked down" than what I'm doing right now? Should I look into just going with Docker instead?

Put another way, if I'm going to start from ~scratch, what's the modern best practice to host all of this, given that I'm going to have to upgrade a bunch of different things all at once? (Turns out the "baby step" of upgrading Symfony will actually have to come last since I need to hit these prerequisites first).

Please let me know if I've left anything out. PS, security is a pretty big concern for us because we manage user auth, so I'm all for anything the cloud providers can do to take some of that responsibility away from me.

I'd just like to say that I never make meta posts like this one, but for some reason this topic has really struck a chord with me on this Wednesday evening...

We recently lost a user from Tildes. I don't know which day, but I'd already noticed they weren't around a few days before I did some digging into it. The names here are not important. But this user had been a prolific poster over the last six months. As someone on Tildes who does a lot of tagging, they were high up on my 'user interaction list' in the passive way that comes from amending tags can do.

Some departing users leave all of their contributions behind, along with their username, never to be seen from again. Perhaps they regenerate with a new handle or perhaps they find pastures fresh elsewhere. Some users take all of their topics with them, along with the conversations, the ideas, the thoughts, and in my mind a little piece of the Tildes community. The latter is what happened here with our prolific user.

This has made me unusually sad. There are lots of users I miss on a personal connection level, whether that be the status they held in the community, or simply missing the elegance of their prose. Sometimes they return and I smile at my keyboard. Sometimes I check how they're doing by looking on Reddit. The sadness here comes from a feeling that when a prolific user leaves with their topics, it feels like a library user leaving the country with their borrowed library books. I've never been very good with analogies.

People talk about link rot and video game preservation and the walled gardens of the internet and it feels like this mourning over lost information from a link aggregator with a close-knit community bound up in it fits in there somewhere in the discourse.

In a comment to this topic I'm going to link to as many of the lost topics as I was able to find. These will be direct links to the articles, not to the Tildes discussion. I don't want this act to feel like grave-robbing by linking to deleted Tildes pages.

This is the end of my hopefully only foray into meta posting. I don't think I have the wordsmith-ery for it.

I got this error message this morning when making content ( replying to a thread ) first thing in my Tildes.net session

https://paste.pics/SN1N0

Oddly, I didn't have any trouble making a new thread ( this one ), just replying to existing threads.

It happened on only the second comment I tried to make this morning.

What have you been doing lately for your own fitness? Try out any new programs or exercises? Have any questions for others about your training? Want to vent about poor behavior in the gym? Started a new diet or have a new recipe you want to share? Anything else health and wellness related?

So bit more than one month ago my very old Microsoft Sidewinder X4 keyboard broke the membrane on the 'A' key, meaning it was effectively kaput. I decided that I wanted to try a mechanical.

The Search

My use-cases are as follows, in the order of importance:

1. Gaming
2. Programming
3. General typing

These were the first requirements I settled on, based on my limited knowledge of mechanical keyboards:

• ISO nordic layout
• Full size: Because I make heavy use of both numpad and the insert-delete-home-end-page island of keys. Whatever it is called. I have zero interest in compromising on the standard layout.
• Nice to have: Metal body
• Nice to have: General high-quality
• Nice to have: Wireless, but only if 2.4Gz.
• Nice to have: Tactile switches
• Nice to have: Backlit keys
• Nice to have: Simple elegant aesthetic. I especially want to avoid typical gamer aesthetic.
• Budget basically unlimited

With these requirements I eventually settled on Keychron Q6 Max with Jupiter Brown. But just before ordering one, I started thinking about the height of the keys on a normal old-school mechanical.
I don't remember when I have last used one, all my recent keyboard had been modern low-profile so I didn't have a reference for what I was buying other than images.
I started reading about wrist problems from keyboard height and the recommendation of a wrist rest. I looked at the Keychron options and saw that they only had rests that were completely detached from the keyboard.
Thing is that I move my keyboard around my desk a lot, so I figured that having a wrist-rest that was not attached would become an annoyance.
After this I decided to just stick to what I am used to and added another requirement:

• Low-profile

Unfortunately when you set requirements for 100%, ISO, and low-profile, then the otherwise extensive Keychron catalogue becomes super limited. So I started looking elsewhere.
At the time there was a new post about a search engine on the /r/MechanicalKeyboards front page.
Using this I discovered the Cherry MX 10.0N. This seemed like a good deal. High quality all-metal body.
The only real sticking point was that the switches are linear with very short actuation, but I liked the look of this keyboard so much that I decided I could probably learn to live with it.

The review

The keyboard looks great in person. The all-metal body feels very solid and high-quality. It's got good heft and sticks to the table. The entire board is very thin and feels good to rest on.
The keys also feel high quality with minimal wobbling, and long keys sound and feel the same whether pressed on the edge or in the middle.

That's all the good stuff. Now on to the less good.

The foot

The adjustable foot in the back has no real positions. Meaning that there is no point in adjusting it where it will click in place and stay there, and it is under constant spring pressure to return to the stowed position. This means that the only thing keeping the extended foot in place is the weight of the keyboard. As mentioned I move my keyboard around frequently, and this means that everytime I move it I have to readjust the foot.
Additionally, it's highest position is sort of a balancing point, meaning that it you are a bit off, or accidentally push the keyboard a bit in this position, then the foot will suddenly collapse.
It's a minor annoyance, but one that is unique to this keyboard since I don't see this kind of foot design anywhere else. Otherwise the full-length metal foot is really nice, if only they had added proper click positions in its travel.

The switches

As mentioned, these are linear with very short actuation. CHERRY MX LOW PROFILE RGB SPEED switches to be specific. My first thought when trying to type with these was "Oh my god I hate this, how can some prefer this?!".
Constant mistyping was the name of the game. I was so used to being able to slightly miss a key, but still only actuate the intended. But that doesn't fly with this keyboard. If you depress any key even the slightest, it WILL actuate.
For gaming I first didn't understand why I sometimes kept jumping. I eventually figured out its because the mere weight of my thumb resting on the spacebar can be enough to actuate it sometimes.

After 1 month of regular usage, I can confidently say that my thoughts are now "Oh my god I hate this, how can some prefer this?!". Okay, I improved my typing somewhat to maybe half my mistyping. Gaming is still a pain, and I've had to regularly rest my thumb on the table instead to stop the sudden jumping.
Unfortunately this keyboard does not have hot-swappable switches, so there is no fixing it unless I want to buy a soldering iron and replace every single key, which I am not willing to.

Key spacing

So while the keyboard is technically 100%, Cherry has still designed it to be as compact as possible. One area where they have shaved off the length is the spacing between the main keys and the arrows keys and those above. Aswell as on the other side with the numpad.
I didn't know this prior to puchasing this keyboard, but apparently this spacing is essential for my muscle memory to be able to find those keys. The lack of spacing has meant that maybe 25% of the time I use them, I press the wrong key.

Overall

Now the issue with the switches and spacing is really an issue of preference. These aren’t quality issues. They were designed this way because some people like it (somehow). So if this keyboard looks interesting to you, and these preference design choices don't bother you, then I can only recommend the Cherry MX 10.0N. It really is a very high quality keyboard.

For me though, I just can't overlook these choices, so I have started looking for another keyboard again. I'm currently split between the Cherry KW X ULP and Logitech G915 X Lightspeed. None of them are full-metal body unfortunately. The cherry one seems to be the higher quality, but the the key caps remind me of laptops keys, which I really hate the feel of. Maybe I'm overreacting to it. The Logitech one is lower quality, but has all the the features that I would want. If you know of something better then please do leave a comment. I might reconsider my low-profile requirement. I'll give it at least another month before I become serious about switching again.

Have you watched any TV shows recently you want to discuss? Any shows you want to recommend or are hyped about? Feel free to discuss anything here.

Please just try to provide fair warning of spoilers if you can.

Any poly folks struggling with judgement from family, friends, or strangers? I'm openly bisexual and polyamorous to my friends and some family, and I've been steadily trying to let the veil down more lately. However, I've been feeling resented and mistrusted by folks -- some online and in person. These experiences aren't exclusive to conservative regions, either. A lot of the online hate I've received has been in Greater Boston community spaces, one of the cities with the most non-monogamous folks. I suppose I'm just feeling bad and isolated about it all. Would love to hear about experiences (good and bad) y'all have had!

New Thread

Server host: tildes.nore.gg (Running Java 1.21.1)
Dynmap: https://tildes.nore.gg
Playtime Tracker: https://tildes.nore.gg/playtimes.html
Tildes website extension (shows online status & location): Firefox (Desktop and Android) - Chrome
Verification site: https://verify.tildes.nore.gg
Patreon: https://www.patreon.com/TildesMC

The server operates on a soft whitelist. Anyone can log in and walk around, but you need a Tildes account to gain build access.

New Thread

I've been self-hosting for a few years. However, now I have a single server hosting all of my things whereas, before, I had multiple old machines physically isolating services. I'm getting ready to host a game server or few (at least one for Tilde) on this machine.

While I'm not a neophyte to Linux, I'm not a guru and definitely not an infosec expert.

Given that, what steps do you take to secure a Linux server, LXCs, and docker containers that are receiving port-forwarded internet traffic?

FWIW, I expect I'll have an LXC running docker containers. I can instead run a VM doing same.

Advice welcome!

As the year draws to a close, let's take a moment to chat about the tools we've been using in our various crafts.

• What have been your go-to art/craft supplies this year?
• What have you tried for the very first time?
• Have you returned to using something you haven't touched in a long while?
• Have you been pleasantly surprised by something?
• Has something disappointed you?
• Was there something you dreamed about making art with, but couldn't get for some reason?

Last year's thread: 2023 art supplies highlights

This question is inspired by two things:

1. @carsonc’s comment in the hard sci-fi topic about Kim Stanley Robinson’s Red Mars starting off in 2026 (which is right around the corner).

2. I started reading Ministry for the Future (coincidentally also by Kim Stanley Robinson) for the Tildes Book Club, and the titular organization starts in, of all times, January 2025 (as in, right now! The book was a perfect pick for this month).

It got me thinking about how a lot of science and speculative fiction books from the past imagined a future ahead of themselves, and how the passage of time has brought us to or even past those imagined futures.

So I’m interested in specific date milestones from fiction that we have met or passed already. They do not have to specifically be from science/speculative fiction, though I imagine most will be.

CES 2025 kicked off with some big hardware announcements.

• AMD CPUS for desktop, mobile, and handhelds
• Nvidia 5000 GPUs (see separate discussion here)

But what else are people excited (or not excited) for that doesn't necessarily deserve its own thread?

I'm in need of inspiration for tasty and fun food combinations to make myself eat more natural yogurts instead of the preflavoured ones (which I found out are definitely not as healthy!). What are your preferences and recommendations, oh fellow yogurt eaters? Which natural yogurt is superior for such a snack? What do you mix with it and how much? I must know!

I imagine most people don't save or just keep images together with the photos they've taken on their phones. But it would be nice to have a simple place to store and organize those images.

I've seen these recommendations: https://tildes.net/~tech/1l48/pinterest_alternatives , but I don't know if that's the best format. Maybe I'm just overthinking it. For now I only have a folder on iCloud with sub-folders. Quick and simple, syncs across devices, but not super organized.

What have you been watching and reading this week? You don't need to give us a whole essay if you don't want to, but please write something! Feel free to talk about something you saw that was cool, something that was bad, ask for recommendations, or anything else you can think of.

If you want to, feel free to find the thing you're talking about and link to its pages on Anilist, MAL, or any other database you use!