From: Emil Williams On setting up chud.cyou/xolatile.top I created this server because I wanted a server to fuck around with. It was created on 20250211. It runs Debian Stable, on a VPS hosted on the Moon. It's primary functionality are the few public services that run on it. This includes HTTP, Email, IRC, XMPP, Git, & Mumble. I'll start with HTTP first, as it was the most painful. I set HTTP up pretty quickly, with Certbot as the certificate manager, and one daemon: Caddy. Later on I set up Mediawiki and a service requiring FastCGI. Caddy does support CGI, however I wasn't willing to install a source package for such a thing, hence I used NGINX. Apache way used for Mediawiki. This means I now had 3 HTTPDs. I had also installed Lighttpd, for something I don't remember. Eventually I broke Mediawiki when trying to install a different version of PHP, this resulted in all the images on the Mediawiki to be wiped. I eventually gave up on Mediawiki and uninstalled Apache. PHP remained, but downgraded from the supposedly "better" version. PHP is still used in a file uploading script which I found on a random Gunthub page. All the actually "formal" PHP projects I couldn't figure out how to install any of them and went with the simple one. Apache was nightmarish to interact with, but with the information I had at my disposal, my method was to simply just poke at the evil daemon inside of my server until it worked close enough to how I wanted. Dealing with NGINX was fine, as it is my current and only HTTPD, however I kept insisting on HTTP/3 because I considered it a decently valuable upgrade. Newer versions of NGINX support it via an option, however this version of Debian does not have such a thing. I used Caddy to talk to NGINX only when I needed its decent set of feature. NGINX was relatively painless minus some "fuck around and find out" testing with The next one was Email, which was fun because I had no idea what I was doing. I used Luke Smith's Email Wizard script because I remembered watching a video from him about setting up a self-hosted mail server - and that script seemed very easy in my memory. Anyhow, it didn't work at first. Dealing with Dovecot's configuration was a pain because I tried everything to get a database working, and ended up with This enabled me to not have that simple issue anymore. I couldn't figure out a way to set up the database, and considering my scale for this mail server was <10 people, and likely only 1-2 active users at any given time. The mail server functions, the only gripe I have currently is the authentication system, and the fact that it cannot be transported to FreeBSD. After making a temporary snapshot, I wiped and rebooted the server to play with and see if I could get FreeBSD as my server OS. It did not work out for mail especially, as using OpenSMTPd demostrated to me that I had no idea what I was doing. While trying to setup dovecot I nearly had a conniption because there was no way to install ARGON2I which was my choice of password hashing, meaning I had to reset everyone's password or have a copy - I had a copy of most user's randomly generated passwords in my personal KeePassXC DB as for their recovery. The idea of storing passwords in such a way is disgusting, however better than leaving them in plaintext on the server. I eventually got to the point where I switched to Postfix and had the ability to recieve mail, but not send it. Which I had experienced before setting up mail on linux, but I couldn't debug it before I simply decided to revert the snapshot. Regarding IRC, it was decent, but I made some severe mistakes. I wanted an IRC server that was powerful in the way that it had everything melted together, including IRCv3 features, & a bouncer. This did not go well in the long term. While my server daemon, Ergo, does work, it has some issues such as being an experimental version rather than a stable upgradable release, and an database format that stores Nickserv data that I haven't recovered. While ergo works great and does what I want, I realize that it is archaic in the fact that I can't migrate away from it without causing serious issues. If I violently remove the database and upgrade many users will need to intervene with a setting like Restarting has bricked two VPSs for me, one was one I gave up on under Vultr, and the other was this server during an upgrade. I was trying to setup IPTables as a firewall and I foolishly trusted a configuration detail added to Mumble and XMPP were completely opposing experiences. Mumble was click and go, install it, run it, connect this way and do that and this, done. XMPP, as in Prosody, was utterly confusing at times and still doesn't work how I want. I started off with installing it, running and getting connected, that part was easy, but I couldn't figure at first how to setup voice/video calls, filesharing, and a IRC bridge called Biboumi. The voice calls were actually relatively easy and only took two attempts, with the second being added by Someodd's Gopher blog entry here (HTTP link). The same is true for audio calls, see here (HTTP link). I've yet to verify the existence of video call functionality due to the lack of a (virtual) webcam. The file server was annoying because how it interacts with files and my file server - the lack thereof. Prosody, the XMPP daemon, fails to commit to UNIX and treat an uploaded JPEG as a file in a directory, a directory that I could mount over the network, locally, or symlink to, achieving a file server that provides the file that I could then specify the nature of the URL to Prosody and be done with it. No, this was not the case. Instead, the default configuration routes through port 5281, and shares links through there via my specific link, which cannot be the apex domain for *some reason*. The only method to have a "normal" port is to do some HTTPD routing magic with it through NGINX, which Someodd provided some information on however I couldn't get it to work on my system. I got the IRC gateway, Biboumi working to a percentage of 99%. Which means it doesn't work at all. I'm currently hoping to have the expert webshitter Someodd look at it and hopefully tell me what configuration detail to change by one character to make the thing go 1% further. By the way, all XMPP clients suck, especially Gajim, which has crashed repeatedly and doesn't have basic features builtin on Debian Stable - such as voice/video & Open/PGP/OMEMO is missing on Gentoo(?). Dino-im is much worse and babified, but it does have basic client functionality from a chat/talk program. Maybe these clients fucked and produce the Antichrist of programs - corporate messengers. Gitea, sitting on top of the reverse proxy, is a system to manage Git repositories from a browser and provide basic CRUD & authentication to users. This wasn't my first choice. At first I just wanted SSH keys, un/restricted user accounts, and Git repositories at a publicly accessible HTTP address. However, this quickly showed itself unused, so I decided to provide the more generally usable Gitea, which was very painful to actually import Git repositories into. My initial format was this: Above is stolen from some Stack overflow, and provides the ability to mirror from a server side bare Git repositories to a directory. Very useful. Ideally this would a feature into the crud, but it hardly matters as it is strictly to git that this is important. You have to I have written zero (0) SoystemD service scripts, I just use Cron @reboot and scripts describing restarts of applications. For fun, I've ran several temporary games servers, Factorio, CS 1.6, & Minecraft. These weren't particularly interesting, I just wanted to mention them.
+ Overall setting this server up hasn't been the most painful thing ever, but it was an interesting experience and I enjoyed what I've done with it so far. It can't possibly get worse than this, unless I start using Windows or very old versions of Linux. This document wasn't meant to be very well written, it was not written over a long period of time - I just wanted to put what I generally remember about the last 2 1/2 months on a page. Copyright © emil $CURRENT_YEAR Public Domain On Solving All Of The Problems At The Same Time I fixed the clinical issue with Ergo the exact way you're supposed to, by being lucky! I made a backup of Ergo, got a copy of Ergo 2.16.0 - the latest version, of which I had an earlier experimental version. I simply copied over my configuration & database and magically the issue was fixed and the database was recovered from the abyss of "who the hell knows" to a mainline release. Automation of upgrades is technically done on the server, but not for Ergo as it's not in any release and the database format could change at any time meaning upgrading is more involved than downloading the package and restarting the daemon. I had to fix one issue with Ergo, it lacked the proper certs for a new domain it was supposed to be on. Egor on the IRC told me the proper fix faster than I could read the manual and it was solved as follows. I'm not a fan of YAML, but this wasn't unpleasant past not being my expectation. Limiting filthy mail users was an easy process. I had to do some slightly evil things like: Past that, I wanted to properly limit user account storage limits. I unfortunately still do mail on a userbasis instead of a database or centralized system that makes multidomain hosting easy - which is something I still need to do. With limits, their relatively easy with subvolumes, so I went that route. I made snapshot, deleted the user directories, and ran I wrote two files containing the numbers matching the subvolumes to the users that would be in a group - I didn't want mass allocations as one user could easily then remove storage from another. There was already a limited global capacity that would protect this from being excessive. This was relatively pleasant to to setup. I had also looked into ext4 user quotas, however I decided, since I was going to be using a loopback filesystem either way, I may aswell opt for the one with compression and learn both ways of doing it. due to new users, I had gotten a bug to secure precious data, and checked permissions on /etc/ files, such as Postfix, Dovecot, and my SSL directory. This will have consequences. I went on to do what I've already talked about and returned to verify that mail was still working. It broke tragically. This lead me down a path of finding several other issues with the system I had inplace. A broken Postfix configuration that should've been using the inet connection schema for OpenDKIM instead of the generally faulty socket schema. I made some mistakes with my overly zealous permission changes and had to debug them quickly. I decided to check the postfix queue while debugging and found many strange mails in holdings. Some were there temporarily due to the interuption in OpenDKIM, others were root to daemon emails, which brought me to setup aliases for many system users. I found a bunch of mail in system users' directories that led me to finding issues with a couple older cleanup scripts & some mail about a bug I had already fixed. All in all, this was pretty quick and painless for dealing with mail. I fixed chud.cyou, as I didn't properly manage the NGINX script by not including it in the deployed directory. I decided to go from a granular description of each subdomain and apex in available, to simply just the apex. To simplify the description of many subdomains - I'm not even sure if I know the proper way here - is to make a include in the base directory called the apex's name, that contains: This is shared among all apexes, ideally I could generize this with some variables - however while writing it was simply easier to copy over and make the small changes needed. Don't do this! Use variables. Additionally, I would include HTTP/3 support herein, however I'm using a earlier version of NGINX without support. Ideally, in a few thousand thousand million decades Debian can get to at least NGINX 1.26.0. I secured my uploading page - as it is completely unvetted. This wasn't so bad, but I'm sure there's a better way to do than the following: Ideally the Firewall would be the BSD pf, however I've yet to bake my own kernel with it sprinkled in. IPTables confuses and angers me, and pf is comparitively divine. For now, there is no strict fail2ban configuration or firewall - All I've done is make sure that all bindings are correctly oriented. However I'm not sure if this is sane, and I'm sure it is not fool-proof. The server has yet to explode.
+ Nothing ever happens.
+ Copyright © emil $CURRENT_YEAR Public Domain On setting up 3chen.org with Kareha As of 20250627, 3chen.org has become actually alive. I had in prior over the period of 20250427 -> 20250528 had an OpenBSD to learn about the operating systems and write some basic board software. I eventually decided to decommission that server and opt for premade Japanese Warez. Setting it up per the information provided was quick - and the nginx configuration: Simple enough. Kareha is easy, databaseless, and old. It was developed over 2004~ -> 2009 as far as I can tell (Using 20 year old web software is generally frowned upon.) The configuration process was straight forward and I do not have any significant notes. I removed the "last 50/100" system in preference for just load everything. Copyright © emil $CURRENT_YEAR Public Domain This page has been deleted or moved. This page has been deleted or moved. Or simply never existed. This page has been deleted or moved. This website was made by A TERRORIST for Xolatile. Not Xolatile (Yet.) This page has been deleted or moved. This page has been deleted or moved. Or simply never existed. This page has been deleted or moved.
+XolaGit |
+Xolatile |
+IRC |
+Mumble |
+UpChud |
+Home |
+Weather |
+Exit
+ It's Copyright? It's free - as long as you don't value your time, idiot.
+XolaGit |
+Xolatile [Onion] |
+IRC |
+Mumble |
+UpChud |
+Home |
+Weather |
+Exit
+ I fucking LOVE avif I fucking HATE Git LFS We will forsake our countries, we will leave our mother lands behind us, and become one with CHUDness. We have no nation, no philosophy, no ideology, and no bitches. We go where we're needed for seething, not for country, not for government, but for ourselves, we need no reason to seethe. We seethe because we are needed, we will be the deterrent for those with no other recourse. We are CHUDS without borders, our purpose defined by the era we live in. We will sometimes have to sell ourselves and services if the times demand it. We'll be revolutionaries, criminals, terrorists, and yes, we may all be headed straight to hell, but what better place for us than this? It is our only home, our based-ness, and our- uh, whatever the opposite of based is, anyways, this is I demand FREE SHEKELS
+Current Balance:
+
+( $55.77 + ${jewish_student_loan} + ${bail} + ${credit_card_interest} + ${inherited_dept} + ${court_fees} + ${crack_dept} + ${what_i_own_to_the_jewish_mob} + ${what_i_own_to_the_german_trannies} + ${powdered_milk_for_wifes_boyfriends_baby[0-3]} + ${paying_lfs_damages} )
+ CHUD.CYOU was created by this internationally wanted chud Emil me about your lady-like concerns. Just kidding, all shit on this website is Public Domain, except this sentence It's how god wastes his time online 1980s TikTok | Xolatile Approved! | Old Jewish Men Only irc.xolatile.top Port 6697 (Connect with TLS 1.2+) Primary channel is #chud What the hell is an IRC I'm literally 17 and 8 months old IRC, Internet Relay Chat is the way the Russians communicated internally during the cold war, and was adopted by all militaries. It is still seen as the gold standard as it has been proven with connections that have been continually lurking for over 40 years. This continued until the universal adoption of French-owned Telegram due to the innovation of builtin stickers, reactions, and Durov's really really cool UI. You only recieve messages when connected. This implies you either need a stable connection (from a VPS) or a bouncer (hosted on someone else's VPS, or your local server), however there are more options. Many networks offer inbuilt bouncers, and that's how irc.chud.cyou works. Once you've registered, always-on will be enabled and you'll be able to recieve up to three days of historic messages. note: If You need more than three days of backlogs, you're either a lazy glowie or willing to read more than three days of backlogs, in both cases you can run an IRC connection persistently. Quotes You can upload files to this site via a simple HTTP POST, e.g. using curl: Or simply choose a file and click "Upload" below:
+How long a file is kept depends on its size. Larger files are deleted earlier
+than small ones. The UpChud page's source can be seen on the git. The unmodified PHP script used to provide this service is open source and available on
+GitHub. - No Porn Or Illegal Activity As Per U.S. Law. - For programming, screenshots, small file transfer, & mildly amusing images. If you want to report abuse of this service, or have any other inquiries,
+please write an email to $mail I have several (sub)domains managed by other real genuine authentic non-incandescent humans. These people are other entities and have no strong assocation with me past asking me nicely, or me asking not very nicely. There are more, however they require Top Secret clearance. - emil
+It is a peculiar thing, dear reader, to commemorate a man whose very name sounds as if it were plucked from the pages of a fable. Yet Ognjen Milan RoboviÄ was neither myth nor allegory, though his exploits might well fill the tall tales of a hundred countryside storytellers. Born in a modest hamlet tucked deep within the Balkan hills, he was the only Serbian programmer ever whispered about in both reverent awe and bewilderment. His earliest recollections, according to local lore, involved the familyâs sole typewriter, upon which he tapped out errant sequences of letters until he felt a curious tug in his fingersâa portent of the code he would one day forge to save the world. From the moment he learned to speak, it was said that machines listened and men stood still, awaiting the next brilliant spark of his mind.
+
+Ognjenâs first notable foray into the grand theater of computing came with a curious fascination for the language Adaâa creation by the angels (or perhaps the angels of bureaucracy, but angels all the same) that attempted to discipline the unruly beasts of machine code. While most novices found Adaâs strict typing and florid syntax a stifling yoke, Ognjen saw poetry in its precision. When he wrote a subroutine, the compiler would tremble as if it sensed the artistry behind every semicolon; when he refactored legacy modules, the documentation itself seemed to sigh in contentment. No sooner had he mastered Ada than he crafted a program so deft that, in whispered tones, folks claimed the compiler greased its own gears in eager anticipation of his commands.
+
+But code alone is a sterile thingâletters and digits dancing about in cold confinement. Ognjen understood this truth, and so he turned his prodigious talents toward the art of text alignment, insisting that words, like fine porcelain, must be handled with gentleness. He devised algorithms to corral stray paragraphs and tame protesting margins, bringing harmony to the haphazard world of digital prose. Some say he would sit by candlelight, lining up verses in neat columns until midnight, remarking that a misaligned stanza was akin to a misaligned universe. His colleagues marveled at the effortless grace with which he balanced left-justified manifestos and right-justified paeans, convinced that his passion for alignment was the secret key to his later victories against far more fearsome foes.
+
+It was not long before Ognjenâs restless spirit sought more dimensions than mere text could afford. With a mischievous grin and a pocketful of dreams, he ventured into the domain of 3D modeling, welding vertices and textures with the zeal of a blacksmith forging an iron blade. He crafted landscapes so vivid that travelers claimed to smell pine trees and feel mountain breezes within their screens. More notably, when the world teetered on the brink of doom under a siege of genetically resurrected raptors, it was Ognjenâs 3D simulationsâmeticulous recreations of coastal ravines and ancient ruinsâthat allowed the global council to predict the beastsâ every move. Pilots and tacticians could rehearse their maneuvers long before the raptors appeared, thanks to models so precise that even the dinosaurs themselves seemed to hesitate in wonder.
+
+Yet if his 3D triumphs were grand, his devotion to ASCII rendering was nothing short of divine. In an age of sumptuous graphics, Ognjen found sublime beauty in the simplest of characters. He built historic battlefields, roaring dragons, and the phantoms of long-forgotten castles, all composed of slashes, underscores, and asterisks arranged with meticulous care. His most famous pieceâa gargantuan depiction of a raptor poised to strikeâwas etched entirely in monochrome code, so compelling that it is said the very sight of it caused real raptors to cower in confusion. From this monument, the âChads of Might and Magicâ emerged: digital knights formed of # signs and hyphens, emboldened by Ognjenâs vision to do virtual battle in defense of humankind. When the true raptors stormed the ramparts, these ASCII champions guided the armies, their heroic shapes flashing across screens like beacons of courage.
+
+Thus it was, dear reader, that Ognjen Milan RoboviÄâequal parts poet, engineer, and wanderer of the digital frontierâcame to be enshrined in legend. He who spoke Ada like a sonnet, who coaxed order from unruly text, who sculpted entire worlds in three dimensions, who breathed life into mere symbols, and who rallied the Chads of Might and Magic to stand against the roaring jaws of extinction. Yet above all else, and when he felt up to it, he remained simply a C programmer, eyes twinkling at the promise of bare pointers and unbridled control. In his passing, the servers weep, and the code repositories stand silent, for no programmer since has dared to dream so grandly. May his memory endure not as a footnote in dusty volumes, but as a blazing testament to the boundless wonder that can spring from a single, determined mind.
+ I don't understand half English words I type... --- Ognjen Milan Robovic IRC is for the mentally mental and the very well. It serves as a great retard filter, supposedly. IRC.Xolatile.Top <- Secure Connections Only | Port 6697 | Use TLS 1.2+ You need a client that can connect with SASL (Weechat, irssi, etc.) and must fully set it up BEFORE reconnecting. You'll have exclusive control over your nick and will have enabled a server-side bouncer.
+ First you have to register... Use KeePassXC to keep your passwords. Simple plaintext password, the most widely supported and relatively easy to setup.
+# sites-available/xolatile.top
+# Pretty much every domain looks like this file +- a few declarations
+server {
+ server_name xolatile.top;
+ root /var/www/xolatile.top;
+ location / {
+ try_files $uri $uri.html $uri/index.html =404;
+ }
+ include xolatile.top.base;
+}
+
+try_files
.passwd-file
. Dealing with Mbox vs. Maildir was lots of fun because it didn't make any sense, but eventually I got the system to use the correct sendmail
from Postfix and my mail system could then curry local mail to external peers & vice versa. Setting up Spamd was actually very easy, the hardest part was testing and dealing with the minor configuration bugs along the way - doing the necessary parts of domain configuration was really easy. Luke Smith's script got me close enough to functionality that I fucked with Dovecot and Postfix enough to permit myself to send emails - from any address unrestricted.smtpd_sender_restrictions = reject_sender_login_mismatch
+set sasl_fail = continue (weechat)
to even automatically reconnect. This means everything is fine as long as I don't touch it, however I will eventually have to either do a breaking upgrade or recover the data and hope that it is in fact compatible with a newer database or plaintext./etc/network/interfaces
. This was fine, however, because of something I initially disliked, VNC. Which is a video sharing(?) protocol that let me access the video console of the remote server and fix the issue that way. Redundancy aiding my stupidity. This issue was fixed within an hour and was harmless as my server isn't exactly in need of high uptime. Uptime, apart from those chosen periods of downtime is relatively high, minus me forgetting to enable a service at boot & test it or simply not have restarted a service correctly after making a configuration change. More than half of this server has been guess and check, which is unproductive but it has gotten it to the point of this page delivering correctly.names/repo.git
which I hand-sorted. However, Gitea did not automatically import these into those existing users. It did however provide information for them existing in the admin UI. I eventually found that and I had to write a script to say "YES" to all of them, because of the web page's shittiness, it would send the POST and reload the page at incredibly slow speeds and there was no way to select several at once or a "yes to import everything." Gitea has very poor tooling. The CLI is utterly shit, and offers no useful features in the general sense. Gitea isn't the worst from the commandline as you can basically pretend it doesn't exist past your initial setup. In the past I've met others with issues involving GPG setup and SSH setup - to be fair this was over TOR - which was exceptionally annoying to deal with as a user and an admin. It's not the best interface by far, but it loads without Javascript and is relatively unassuming. One feature it arguably could use and does in fact lack is its inability to mirror a repository to a local directory, so you cannot turn the Gitea into it's own description. Additionally, if you use such a post-receive Git hook script as:
+#!/usr/bin/env bash
+TARGET=".../xolatile.top"
+GIT_DIR=".../repositories/emil/xolatile.top.git"
+BRANCH="master"
+
+data=$(cat)
+exitcodes=""
+hookname=$(basename $0)
+GIT_DIR=${GIT_DIR:-$(dirname $0)/..}
+
+ref=$(echo $data | awk '{ print $3 }')
+for i in $ref ; do
+ # only checking out the master (or whatever branch you would like to deploy)
+ if [[ $ref = refs/heads/$BRANCH ]];
+ then
+ echo "Ref $ref received. Deploying ${BRANCH} branch to production..."
+ git --work-tree=$TARGET --git-dir=$GIT_DIR checkout -f
+ else
+ echo "Ref $ref received. Doing nothing: only the ${BRANCH} branch may be deployed on this server."
+ fi
+done
+
+# the rest is just the stuff gitea expects
+
+for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
+ test -x "${hook}" && test -f "${hook}" || continue
+ echo "${data}" | "${hook}"
+ exitcodes="${exitcodes} $?"
+done
+
+for i in ${exitcodes}; do
+ [ ${i} -eq 0 ] || exit ${i}
+done
+
+chattr +i
this file to protect it.
+
+server:
+ name: xolatile.top
+ listeners:
+ ":6697":
+ tls-certificates:
+ -
+ cert: .../xolatile.top/fullchain.pem
+ key: .../xolatile.top/privkey.pem
+ -
+ cert: .../chud.cyou/fullchain.pem
+ key: .../chud.cyou/privkey.pem
+
+
+fallocate -l 64G .../home
+mkfs.btrfs .../home
+echo '.../home /home btrfs noexec,autodefrag,compress=zstd 0 0' >> /etc/fstab
+mkdir .../mig; mount .../home .../mig; mv -a /home/* /home/.* .../mig
+# I should probably of made a backup here of /home, but I have a recent snapshot on my VPS before I started doing all this
+umount .../mig ; mount -a
+
+
+for i in $(cat .userlist) ; do btrfs subvolume create $i ; done
+
+
+for i in $(cat .usermail) ; do btrfs qgroup limit 256M 0/$i . ; done # Mail users. AKA all users
+for i in $(cat .userssh) ; do btrfs qgroup limit 2G 0/$i . ; done # Privileged SSH users.
+for i in $(cat .userlist) ; do cp snapshot/$i/* snapshot/$i/.* $i/ -rf ; done
+
+
+listen 80;
+listen [::]:80;
+listen 443 ssl http2;
+listen [::]:443 ssl http2;
+
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers on;
+ssl_ciphers "EECDH+AESGCM,EDH+AESGCM";
+ssl_dhparam /etc/nginx/dhparam;
+ssl_session_timeout 1d;
+
+ssl_certificate .../xolatile.top/fullchain.pem;
+ssl_certificate_key .../xolatile.top/privkey.pem;
+
+add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
+
+location ~ /\.git { # see the last bloog for the justification - in short git repos are placed in directories both indirectly and directly
+ deny all;
+}
+
+error_page 404 /404.html;
+
+
+location = / {
+ include authorized;
+ deny all;
+ # FastCGI PHP here...
+}
+
+
+server {
+ server_name 3chen.org;
+ ...
+ root /var/www/3chen.org;
+
+ # /index.html -> /
+ rewrite ^/index.html$ / permanent;
+ rewrite ^/$ /index.html last;
+
+ # /kareha.pl/.../ -> /.../
+ rewrite ^/kareha.pl/([0-9\#\/]+) /$1 redirect;
+ rewrite ^/([0-9\#\/]+) /kareha.pl/$1 last;
+
+ include .../3chen.org/bans;
+
+ location ~ \.(css|js|png)$ {
+ add_header Cache-Control "max-age=86400";
+ }
+
+ location ~ (captcha|admin|kareha)\.pl {
+ add_header Cache-Control "max-age=0; must-revalidate; no-cache";
+ include fastcgi_params;
+ fastcgi_pass unix:/run/fcgiwrap.socket;
+ }
+
+ location / {
+ add_header Cache-Control "max-age=0; must-revalidate; no-cache";
+ index kareha.pl;
+ }
+
+ location = /config.pl {
+ deny all;
+ }
+}
+
+
+
+
+
diff --git a/by.html b/by.html
new file mode 100644
index 0000000..d78348b
--- /dev/null
+++ b/by.html
@@ -0,0 +1,29 @@
+
+
+
+
+
+
+
+
+There Be Chuds In Them Series Of Tubes
+
+Sopel Help
+ ADMIN
ADMINCHANNEL
ANNOUNCE
CALC
CHOOSE
CLOCK
CORETASKS
COUNTDOWN
CURRENCY
DICE
EMOTICONS
HELP
INVITE
ISUP
LMGTFY
PING
PRONOUNS
RAND
RELOAD
SAFETY
SEARCH
SEEN
TELL
TLD
TRANSLATE
UNITS
UPTIME
URL
VERSION
WIKIPEDIA
WIKTIONARY
XKCD
+- - - - - - - - - - - - - ChudHome - - - - - - - - - - - -
+
+
+
Peak Web Design
+
+> Imagine not using AVIF & JXL (browser VILL NEVER support JXL by default)
+> No wonder everything loads so slowly - At least the bandwidth costs are lower, right? Right?!
+> If only it was JXL
+
+
+You're Illegally in â¶Chud Airspaceâ¶
+
+
+
+
+
+
+
+
+
+
+
+
+CHUD.CYOU
+
+
for buying the dip of INTC
and paying back the fines I keep getting from the German government
+
+
+
+
"I fucking hate <The Web> so much it's unreal"
+
- Email , 79 AH"I fucking hate <Git LFS> so much it's unreal"
+
- Lime , 79 AH1 BILLION YEARS of torture will be admitted to copyright ignorers
+IRC IRC IRC
+
+
+---------------------------------------------------
+ https://chud.cyou/
+ ____ _ _ _ _ ____ _ ____ _ _
+ / ___| | | | | | | _ \( )___ | _ \ | | | |___
+| | | |_| | | | | | | |// __| | |_) | | | | / __|
+| |___| _ | |_| | |_| | \__ \ | _ < | |_| \__ \
+ \____|_| |_|\___/|____/ |___/ |_| \_\ \___/|___/
+
+---------------------------------------------------
+
+>>> No Indians, Porn, Or Illegal Activity As Per U.S. Law. <<<
+<<< SAdmin is emilemil <admin@chud.cyou>, bother him. >>>
+
+
+
+
+
+
+
+Warning: php.ini: $ini_name ($ini_val) set lower than $var_name ($var_val)\n
");
+ };
+
+ $warn_config_value('upload_max_filesize', 'MAX_FILESIZE', CONFIG::MAX_FILESIZE);
+ $warn_config_value('post_max_size', 'MAX_FILESIZE', CONFIG::MAX_FILESIZE);
+ $warn_config_value('max_input_time', 'UPLOAD_TIMEOUT', CONFIG::UPLOAD_TIMEOUT);
+ $warn_config_value('max_execution_time', 'UPLOAD_TIMEOUT', CONFIG::UPLOAD_TIMEOUT);
+}
+
+//extract extension from a path (does not include the dot)
+function ext_by_path(string $path) : string
+{
+ $ext = pathinfo($path, PATHINFO_EXTENSION);
+ //special handling of .tar.* archives
+ $ext2 = pathinfo(substr($path,0,-(strlen($ext)+1)), PATHINFO_EXTENSION);
+ if ($ext2 === 'tar')
+ {
+ $ext = $ext2.'.'.$ext;
+ }
+ return $ext;
+}
+
+function ext_by_finfo(string $path) : string
+{
+ $finfo = finfo_open(FILEINFO_EXTENSION);
+ $finfo_ext = finfo_file($finfo, $path);
+ finfo_close($finfo);
+ if ($finfo_ext != '???')
+ {
+ return explode('/', $finfo_ext, 2)[0];
+ }
+ else
+ {
+ $finfo = finfo_open();
+ $finfo_info = finfo_file($finfo, $path);
+ finfo_close($finfo);
+ if (strstr($finfo_info, 'text') !== false)
+ {
+ return 'txt';
+ }
+ }
+ return '';
+}
+
+// store an uploaded file, given its name and temporary path (e.g. values straight out of $_FILES)
+// files are stored wit a randomised name, but with their original extension
+//
+// $name: original filename
+// $tmpfile: temporary path of uploaded file
+// $formatted: set to true to display formatted message instead of bare link
+function store_file(string $name, string $tmpfile, bool $formatted = false) : void
+{
+ //create folder, if it doesn't exist
+ if (!file_exists(CONFIG::STORE_PATH))
+ {
+ mkdir(CONFIG::STORE_PATH, 0750, true); //TODO: error handling
+ }
+
+ //check file size
+ $size = filesize($tmpfile);
+ if ($size > CONFIG::MAX_FILESIZE * 1024 * 1024)
+ {
+ header('HTTP/1.0 413 Payload Too Large');
+ print("Error 413: Max File Size ({CONFIG::MAX_FILESIZE} MiB) Exceeded\n");
+ return;
+ }
+ if ($size == 0)
+ {
+ header('HTTP/1.0 400 Bad Request');
+ print('Error 400: Uploaded file is empty\n');
+ return;
+ }
+
+ $ext = ext_by_path($name);
+ if (empty($ext) && CONFIG::AUTO_FILE_EXT)
+ {
+ $ext = ext_by_finfo($tmpfile);
+ }
+ $ext = substr($ext, 0, CONFIG::MAX_EXT_LEN);
+
+ if (CONFIG::LIMIT_EXT) {
+ $permitted_ext = CONFIG::PERMITTED_EXT;
+ if ($permitted_ext[$ext] != true) {
+ header('HTTP/1.0 400 Bad Request');
+ return;
+ }
+ }
+
+ $tries_per_len=3; //try random names a few times before upping the length
+
+ $id_length=CONFIG::MIN_ID_LENGTH;
+ if(isset($_POST['id_length']) && ctype_digit($_POST['id_length'])) {
+ $id_length = max(CONFIG::MIN_ID_LENGTH, min(CONFIG::MAX_ID_LENGTH, $_POST['id_length']));
+ }
+
+ for ($len = $id_length; ; ++$len)
+ {
+ for ($n=0; $n<=$tries_per_len; ++$n)
+ {
+ $id = rnd_str($len);
+ $basename = $id . (empty($ext) ? '' : '.' . $ext);
+ $target_file = CONFIG::STORE_PATH . $basename;
+
+ if (!file_exists($target_file))
+ break 2;
+ }
+ }
+
+ $res = move_uploaded_file($tmpfile, $target_file);
+ if (!$res)
+ {
+ //TODO: proper error handling?
+ header('HTTP/1.0 520 Unknown Error');
+ return;
+ }
+
+ if (CONFIG::EXTERNAL_HOOK !== null)
+ {
+ putenv('REMOTE_ADDR='.$_SERVER['REMOTE_ADDR']);
+ putenv('ORIGINAL_NAME='.$name);
+ putenv('STORED_FILE='.$target_file);
+ $ret = -1;
+ $out = null;
+ $last_line = exec(CONFIG::EXTERNAL_HOOK, $out, $ret);
+ if ($last_line !== false && $ret !== 0)
+ {
+ unlink($target_file);
+ header('HTTP/1.0 400 Bad Request');
+ print("Error: $last_line\n");
+ return;
+ }
+ }
+
+ //print the download link of the file
+ $url = sprintf(CONFIG::SITE_URL().'/'.CONFIG::DOWNLOAD_PATH, $basename);
+
+ if ($formatted)
+ {
+ print("Uploaded!
Access your file here: $url
- - - - - - - - - - - - - UpChud - - - - - - - - - - - -
+curl -F "file=@./file" https://chud.cyou/up
+Notice: by using this method, you accept that you have lost "The Game"
+
+
+
+Limits!
+$permitted_ext
+
This relation is non-linear and skewed in favour of small
+files.
+MIN_AGE + (MAX_AGE - MIN_AGE) * (1-(FILE_SIZE/MAX_SIZE))^$decay
+
+Aliases
+These really aren't aliases, but bash functions, but... it's bash. - And I put these in my aliases file.
+$alias_file
+
+Source
+
+"Muh TOS"
+
+Contact
+
+
In remembrance | Ognjen "Xolatile" Milan RoboviÄ | 1984 - 2025 | Most Based Man To Ever Live
+
+
+< Back
+Join...
+Registering In Xolatile.Top
+
+/nick your_nick_forever
+/msg nickserv register
+Recommendation for server-side bouncer settings, bouncer will always print missed messages hereon:
+
+/msg nickserv set AUTOREPLAY-MISSED on
+/msg nickserv set AUTOREPLAY-LINES 0
+
+Authentication Methods (Pick One)
+1. SASL PLAIN
+
+set sasl_mechanism = plain
+set sasl_username = nick
+set sasl_password =
+
Certificate based authentication, more intensive setup. You're objectively cooler for using it.
+The generated certificate must be added to your client before you register, or you should supply the following to Weechat.
++set sasl_fail = continue ++
The following commands are required, this generates a valid certificate and prints the fingerprint which you must copy to your IRC client.
++$ openssl genpkey -algorithm ed25519 -out private.pem +$ openssl req -new -x509 -key private.pem -out cert.pem -days 365 +# go through the prompt, just hit enter... +$ cat private.pem cert.pem > nick.pem +$ rm private.pem cert.pem +# then get your fingerprint, copy this into your clipboard... +$ openssl x509 -in nick.pem -outform DER | sha256sum -b | awk '{print $1}' +$ mv nick.pem ~/.cert/ ++
Add that fingerprint like this:
++/msg nickserv cert add FINGERPRINT ++
For weechat, you may configure it like this, and in general these are the details you must supply:
++set sasl_mechanism = external # overrides sasl configuration and uses client-side tls cert +set tls_cert = ~/.cert/nick.pem ++
For the documented and booked wellness officers. Ideally there'd be a way to for XMPP losers to connect to IRC, but we're waiting on the troons to engineer a solution with the bridge known as "Biboumi."
+As for registering on xolatile.top, ask emilemil on the IRC or email emil@chud.cyou. For now, registration will be a general "no" as per the usefulness of this service is low and it may be pruned.
+talk.xolatile.top Public Test Channel This is subject to closure or rapid unplanned destruction at anytime.
+ + diff --git a/prep.sh b/prep.sh new file mode 100644 index 0000000..c722bc4 --- /dev/null +++ b/prep.sh @@ -0,0 +1,45 @@ +#!/bin/bash +. /etc/porky.ini + +pbo="-k $dns_porkbun_key -s $dns_porkbun_secret" +domain=${DOMAIN:-xolatile.top} + +nginx() { + user=$1 + echo -e \ + "server {\n" \ + " server_name $user.$domain;\n" \ + " root /home/$user/www;\n" \ + " location / {\n" \ + " index index.html;\n" \ + " autoindex on;\n" \ + " }\n" \ + " include $domain.base;\n" \ + "}" +} + +dns() { + user=$1 + pkb-client $pbo create-dns-record xolatile.top ALIAS --name $user --ttl 86400 $domain > /dev/null 2>&1 || true +} + +case "$1" in + "regen" ) x=3 ;; + "dns" ) x=2 ;; + "nginx" ) x=1 ;; + * ) x=0 ;; +esac + +shift +if [[ $x = 0 ]] ; then + echo -e \ + 'Need one of:\n'\ + 'regen [(/home/($users))+]\n' \ + 'dns [(/home/($users))+]\n' \ + 'nginx [(/home/($users))+]' +else + for user in $@ ; do + [ $(( $x & 2 )) = 2 ] && dns $user + [ $(( $x & 1 )) = 1 ] && nginx $user + done +fi diff --git a/robots.txt b/robots.txt new file mode 100644 index 0000000..c2a49f4 --- /dev/null +++ b/robots.txt @@ -0,0 +1,2 @@ +User-agent: * +Allow: / diff --git a/rs.svg b/rs.svg new file mode 100644 index 0000000..1fe4d67 --- /dev/null +++ b/rs.svg @@ -0,0 +1,256 @@ + + \ No newline at end of file diff --git a/sitemap.xml b/sitemap.xml new file mode 100644 index 0000000..8759d91 --- /dev/null +++ b/sitemap.xml @@ -0,0 +1,99 @@ + + +> what is Webring, I am literally Indian
+Rather than typing it I'll commit neodigital cyberplagiarism
+Webrings are links with banners. They act as a loose social network. Think of it like: a secret government agency, although here you've spoken to the other webring owner once - instead of working with him for twenty odd years on the force - it's not really like a a secret government agency.
+Here's the xolalite.top banner
+
+Download the banner onto your server or use the image link below. Here's the HTML, change to your needs. the link for the image is static, if the site is up the banner is there. Still best to make it static.
+
+<a href="https://Xolatile.Top/webring"><img alt="Xolatile's website" class="banner" src="/xolatile.top.png"></a>
+
+