Was this comment meant for a different conversation? We’re talking about VPNs here.

I’ve got probably 30+ households of people and multiply that by number of devices…this is also something that will only be live for 12 months maybe. I think if I was doing something long-lived it might be worth the effort to get everyone onto VPN but for this…just can’t justify the time. Thanks anyway.

Hey thanks for this. Yep I’ve got too many users and most are not technical so it’s just a huge headache to get them all onto VPN not matter how simple. That said I’d consider tailscale/funnel for other projects and it’s always good to hear what others are using.

👍 looks like its fairly easy to add something like ModSecurity WAF to nginx

Thought process is: Peertube or some other service’s first job is the purpose for the service, so security likely won’t be as good as a service who’s first job is security.

Really good point. I see many selfhost instructions now that say ‘we don’t bother with HTTPS, just use a proxy to handle that’ and maybe auth should go the same way as in there’s good solutions that specialise in auth so it’s not worth each project doing it themselves.

apps can’t deal with hitting Authentik 1st afaik

Another good consideration. There is an early Peertube app but I doubt my users will be using it, web access is fine for this. Perhaps apps for things like Lemmy/Mastodon/Peertube etc will need to work better with these auth frontends in future.

Thanks for this suggestion - this is interesting because it looks like pangolin combines almost all the measures mentioned so far here apart from Anubis: auth provider with one-time email passcodes, geoip blocking, crowdsec plus bonus automated cert handling. It does look like it does nearly everything in one package and I can pay for them to host it for me if I don’t want to selfhost those parts. Strong contender!

Really good point. I can definitely restrict to one country and anyone using their own VPNs/TOR/whatever will be sophisticated enough to understand why its restricted and how to keep their access.

Super useful thanks!

Good to hear Anubis is effective - I would hope that takes the site out of the ‘easy target’ sort of category and most bots give up. Yeah I think monitoring is gonna be key to keep an eye on threats. Thanks!

I had to look up NPM as in my head it’s NodeJS Package Manager but TIL there’s also Nginx Proxy Manager!

I like your VPN solution for a small group and actually tying it to their home network/router could make sense and further restrict attacks I have to deal with. However in my case I could be dealing with 30+ households of users and as others say I am bound to get people on mobiles complaining they can’t access it. However noted for future projects.

That’s a great suggestion, then I’m not relying just on the app/service to have super secure auth.

Hey thanks for these links I will check them out! Magic links would be great actually as then I am not relying on them to set decent passwords or giving them burden of TOTP/etc which some may not have used before.

…it allows users to configure their Ollama server or API key for OpenAI once, and then create many different agents using different models or configuration underneath…we’re also introducing a new integration, OpenRouter, which is a unified LLM interface giving access to over 400 extra LLM models.

I’m not familiar with these but sounds like they are leaving some choice to the admin

These results may depend on your region, looks like you are both seeing different prices

Yes please!

Changelog

https://docs.luanti.org/about/changelog/#5120--5130

5.12.0 → 5.13.0 #

Released on 1 August 2025.

Deprecations and compatibility notes #

Vectors passed to C++ API functions may no longer have nil components.

This change can reveal logic issues within mods.

Client / Audiovisuals #

9-slice formspec image buttons now display correctly with gui_scaling_filter (Krock)

Fixed an issue where main menu dialogs could overlap upon start (grorp)

Tabs in formspecs can now be changed using Ctrl(+Shift)+Tab (siliconsniffer)

The formspec element model[] now supports floating-point frames (appgurueu)

The minimap now correctly displays drawtype = “air” nodes (Xeno333)

Main menu ContentDB usability improvements (grorp)

Meshgen (i.e. visible mapblocks) code cleanups and improvements (sfan5)

Add keybinding for world close key (keymap_close_world) (DragonWrangler1)

Relaxed path checks in the main menu to allow downloading mods to symlinked directories (sfan5)

World / Server / Environment #

The Luanti version is now printed after the ASCII logo (sfan5)

Fix main menu hang caused by dropped DNS packets (sfan5)

Fix newline conversion in formspecs on Windows (copy & paste) (PtiLuky)

Fix crash caused by empty particle spawner texture (Krock)

Script API / Modding #

Various lua_api.md improvements (grorp, jordan4ibanez, Xeno333, TheEt1234)

Empty Voxel Manipulators can be created using VoxelManip:initialize() (sfan5)

Fixed an issue where sizeless text input formspecs would incorrectly send ExitButton as text (Krock)

core.show_formspec now allows showing a player inventory (Krock)

core.get_node_raw is now a public API (sfan5)

New API function core.get_mapgen_chunksize() (sfan5)

Newly spawned entities now have a persistent GUID, see ObjectRef:get_guid() (sfence)

Misc / Maintenance #

Many various code improvements and cleanups (sfan5, PtiLuky)

Improved unit tests (sfan5, lhofhansl)

Model skeleton animation cleanups, test and documentation (appgurueu)

Header files are now added as CMake sources (useful for Visual Studio (Code)) (PtiLuky)

I moved to virt manager from boxes as I it let me down too many times with bugs. VMs would not restart and snapshots would fail to launch.

This is similar using nix: https://devenv.sh/

It has a few more features like git hooks and spinning up long-running processes like web servers

I like you can set custom exif tags like artist with open camera.