I built hoist, a small push-to-deploy tool for one Linux box (systemd + Cloudflare Tunnel, Python stdlib). To keep myself honest I installed Dokploy on the same laptop and deployed the same Dockerfile app through both, polling the public URL every 50 ms:

• push to live, median of 6: 1.54 s vs 2.53 s
• downtime during swap: 0.00 s vs ~0.1 s
• broken build: old version keeps serving on both

The first run, hoist lost (0.65 to 1.45 s gap during rollover). The fix was a small TCP front that owns the public port and only switches once the new container answers HTTP. Method, raw logs and bugs found are in docs/benchmark.md.

One laptop, one competitor: a method, not a verdict. I'd like critique on the method more than the tool.

Built with AI assistance (Claude), designed and tested by me.

https://github.com/nikhilcherry/hoist

Im planning on buying a webdomain soon to run a few projects and i just want to make sure i am able to do it i am planning on buying with ventraip since i can verify with my medicare card. just want a second opionion

I've been using WPBakery for years and have bought 21 "lifetime" licenses over time. I regret every single one of them at this point.

The update process is a fucking nightmare. It's been bad for years. As a "lifetime" licensed user you can't just update from the WP dashboard if you don't have a support license. I don't need support. I just need to update the plugin. But to do that simple task, you have to log in to the WPBakery site, find your version/license and then download a ZIP. This ZIP has to be unpacked and transferred to your site. And ofcourse the site breaks for a few seconds in the process

How can this be right? In Denmark we have this saying: "May your ass itch and your arms be too short to scratch it." – The late stage capitalist scumbag at WPBakery that came up with this should have the biggest itch and the smallest arms IMO.

Mi hermano ganó (su proyecto fue aprobado) en toy no toy en su última edición que transmitieron por telémetro y Mayer le ofreció $15k para invertir en su proyecto, hasta el día de hoy todo fue un teatro y nunca hicieron nada en apoyar, taquillaron todo eso y no apoyaron los emprendimientos, no solo fue mi hermano, ninguno de los otros participantes se llevó nada, toda una estafa en la que lucraron con eso, con la imagen de los participantes y se llevaron toda la plata de los patrocinios de empresas grandes que participaron.

Que burla, alguno más tiene información?

On a subdomain Multisite install, WordPress by default scopes its auth cookies to the network domain: ms_cookie_constants() sets COOKIE_DOMAIN to '.' plus the network's cookie_domain if one is set, otherwise the network domain. (ms_cookie_constants reference)

Why it matters: say old-staging.example.com was CNAMEd to a host or page builder, the account was closed, and the DNS record stayed. If that provider lets anyone claim an unclaimed hostname, someone else can serve content on your subdomain (OWASP calls this subdomain takeover).

The record itself leaks nothing. The risk is that when a logged-in admin's browser makes a request to that subdomain, it sends any cookie whose Domain, Path and Secure attributes match, including wordpresslogged_in*, to the server the other person now controls. (MDN on Set-Cookie)

To find candidates, start from your DNS zone. One useful cross-check is certificate transparency logs (crt.sh, query %.example.com), which often surface old hostnames that got their own certs. They won't list names covered only by a wildcard cert, so treat them as a supplement. Then for each name:

dig +short CNAME old-staging.example.com dig old-staging.example.com # NXDOMAIN vs NOERROR curl -sI https://old-staging.example.com

A CNAME whose target returns NXDOMAIN is the classic red flag. A provider's generic "no such site" page only matters if that provider actually lets a stranger claim the name, so check their docs.

When you decommission, remove the DNS record first, then delete the environment or cancel the service. The other order leaves a window where the name points at something nobody owns.

For those running subdomain networks or sharing COOKIE_DOMAIN: do you audit the zone when a site leaves the network, or does DNS just accumulate forever?

Starting in v3, more info here: https://github.com/immich-app/immich/discussions/29439

Love immich, but recently have been cleaning up my server and watching for stray processor and io use. This was one thing that jumped out. Personally, I don't want my full image library checked each night and fixed it to something that made sense for me.

So i was working on my website and deleted a random port that wasnt in use, instantly all my websites weren't being displayed on the domains anymore?
i restored another random port (not the same as the one i deleted) and my websites came back im just wondering. How does this even make sense? that shouldnt work right?

FlockPHP is an open-source, free, and native alternative to Laravel Herd with macOS, Windows, and Linux support on day 1!

No paid tier; every feature included. Out of beta and ready for your projects.

Get started by visiting FlockPHP.com

Estimados contactos:

Este mensaje nace desde el fondo de mi corazón y probablemente sea una de las publicaciones más personales que he escrito...

Después de tantos años de esfuerzo, aprendizaje, creatividad y dedicación profesional, tengo que reconocer algo que nunca pensé que tendría que decir: Estoy perdiendo la esperanza de encontrar una oportunidad laboral donde mi experiencia y mi trabajo sean realmente valorados.

Durante años he trabajado en creatividad, diseño, desarrollo de productos, construcción de marcas y comunicación estratégica. He tenido la oportunidad de trabajar con grandes marcas, desarrollar conceptos, transformar ideas en productos y aportar mi trabajo a diferentes proyectos y empresas.

También he invertido tiempo, recursos y mucha ilusión en desarrollar mis propios proyectos, con la esperanza de convertirlos en algo más grande. Sin embargo, la realidad económica me ha obligado a detenerlos temporalmente.

Y aquí estoy.

Con experiencia, con ganas de trabajar, con ideas y con mucho que aportar, pero enfrentándome a una realidad difícil: encontrar una empresa o un proyecto donde realmente valoren lo que puedo hacer.

No busco que me regalen nada ni tampoco privilegios.

Quiero una oportunidad para demostrar lo que sé hacer, trabajar dignamente, recibir una remuneración justa y ayudar a construir algo bueno.

Por eso quiero pedirles algo muy simple:

Si conocen alguna empresa o persona que esté buscando talento en diseño, desarrollo de productos, creatividad, branding o comunicación estratégica, les agradecería muchísimo que compartieran esta publicación o me ayudaran a conectar con esa persona.

A veces las oportunidades llegan de donde menos lo esperamos. Quizás alguien que lea esto conozca a alguien que necesite justamente lo que puedo ofrecer.

Tal vez este sea el puente que conecte el punto A con el punto B.

No quiero rendirme. Todavía tengo muchas ideas, proyectos y ganas de seguir creando. Quiero trabajar, salir adelante y poder seguir construyendo mi futuro con el esfuerzo de mi propio trabajo.

Gracias por tomarse unos minutos para leerme. Y gracias de corazón a quienes puedan compartir este mensaje.

Mil gracias.

S.

Es curioso cómo incluso bancos pertenecientes a grupos extranjeros están incorporando elementos de identidad nacional en sus marcas.

I built some date time pickers in my react bulma component library
https://github.com/allxsmith/bestax

Looking for some feedback. What do you like, what needs improvement.

DateInput
https://bestax.io/docs/api/form/datetime/dateinput#basic-dateinput

DateRangeInput
https://bestax.io/docs/api/form/datetime/daterangeinput#basic-daterangeinput

DateTimeInput
https://bestax.io/docs/api/form/datetime/datetimeinput#basic-datetimeinput

TimeInput
https://bestax.io/docs/api/form/datetime/timeinput#basic-timeinput

For the time selection, I implemented IOS inspired time wheels. One problem I faced: was the lack of haptic feedback APIs exposed by browsers in IOS. As a workaround, the time-wheels make a clicking sound to fake the feeling of haptics. (Android does have haptic feedback apis, no problems there)

Note: this is based off Bulma CSS, so the look and feel is opinionated.

[ Removed by Reddit on account of violating the content policy. ]