• 2 Posts
  • 33 Comments
Joined 2 years ago
cake
Cake day: March 22nd, 2025

help-circle










  • I tried hosting the bridge and it was hard to set up and unreliable. Right now I have WhatsApp installed on Graphene OS in a work profile so it doesn’t get access to all my contacts, only the ones I had to specifically add in this profile. In theory you can restrict it even more using labels but managing this was a pain in the ass.

    WhatApp will still know who are you talking to and you still have to run their app somewhere so in my opinion setting up the bridge just so I don’t have their app on my phone is simply not worth the hassle.



  • I remember when I was dualbooting Windows and Linux. The year was 2006 and many devices needed special drivers that were closed sourced and available only for Windows. Laptop cameras, WiFi, memory card readers… Linux would run on most laptops but many things still didn’t work right. Similar thing with some software. You would buy a smart watch or something and it would require running some weird Windows only app to set it up. We’re so lucky those strange times are behind us now.






  • Also, vaultwarden requires HTTPS?? Ah drat, that’s not good :/ I don’t have experience with that.

    Yes, the clients work only over HTTPS. Caddy can handle that:

    vaultwarden.cosmos.internal {
            tls /opt/caddy/certificate.crt /opt/caddy/private.key
            handle /* {
                    reverse_proxy http://localhost:8081/
            }
    }
    

    The certs need to be generated for this specific domain:

    openssl req   -x509   -newkey rsa:4096   -keyout key.pem   -out cert.pem   -sha256   -days 36500   -nodes   -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=cosmos.internal"
    

    Some more details are here: https://bitwarden.com/help/certificates/ under “Using a self-signed Certificate”