2023-01-19T09:30:19Z https://njump.me andrew https://njump.me/npub1kundug94z4c9llhf29v3ar657she8wu9p80cr2z3e4dujj0vzveqwpp0ge https://qm.is/andrew-sunset.jpeg https://qm.is/andrew-sunset.jpeg https://njump.me/nevent1qqsp20ys7m6pqaxjn3h9a679t8fnaqmq68hatgvnwvs7pfn2sxq305qzyzmjdh3qk52hqhl7a9g4j8502n6zlyams5yalqdg28x4hj2fasfnytznkc3 In reply to <a href='/nevent1qqsx0vqmgjpx2ecmdlck0f3ca0r5ynwlheuzdfrerc7g40cs4ad36cc3mu3zc'>nevent1q…u3zc</a><br/>_________________________<br/><br/>RoR probably better than Py, especially at the time. 2023-01-30T03:41:43Z https://njump.me/nevent1qqs8stwqjmswt7vq7ae2ujpp4s2r8ld4g43w8lawhrs45rh9tnxa3lgzyzmjdh3qk52hqhl7a9g4j8502n6zlyams5yalqdg28x4hj2fasfnyrsvzgn In reply to <a href='/nevent1qqsdqkrggavwtar7xm3c5p3040vkhyx7wr2695j46vmgtnau7jnpzqs8cj8gj'>nevent1q…j8gj</a><br/>_________________________<br/><br/>So, looks like you didn’t actually try it in Safari? Still needs the resolver hack. However with a modified proxy.pac served from caddy (Safari needs SOCKS, does not respect SOCKS5), I could get it working without privoxy, thank you for that!<br/><br/>cat /opt/homebrew/etc/Caddyfile<br/>{<br/> admin off<br/> http_port 2019<br/> auto_https off<br/>}<br/><br/><a href="http://localhost:2019">http://localhost:2019</a><br/>header /proxy.pac Content-Type application/x-ns-proxy-autoconfig<br/>respond /proxy.pac 200 {<br/> body `function FindProxyForURL(url, host) { if (shExpMatch(host, &#34;*.onion&#34;))<br/> { return &#34;SOCKS5 127.0.0.1:9050;SOCKS 127.0.0.1:9050&#34;; } return &#34;DIRECT&#34;; }<br/>`<br/> close<br/>} 2023-01-05T06:49:13Z https://njump.me/nevent1qqsdqkrggavwtar7xm3c5p3040vkhyx7wr2695j46vmgtnau7jnpzqszyzmjdh3qk52hqhl7a9g4j8502n6zlyams5yalqdg28x4hj2fasfnyd6eql2 In reply to <a href='/nevent1qqsre88cj0tas4gr62erjkn7jr3dtruhnh9dns8wtyd7edlmynpnawg62mc8t'>nevent1q…mc8t</a><br/>_________________________<br/><br/>Looks smart, thanks! I didn’t know proxy auto-configuration can force Safari skip hostname resolution. Will try to simplify to this later (definitely using some non-Apache web server though haha). 2023-01-05T04:38:21Z https://njump.me/nevent1qqs23pdhmkrs5993n83cg0knqdh9gtft35e3uwqpeuajqslwxh3wucszyzmjdh3qk52hqhl7a9g4j8502n6zlyams5yalqdg28x4hj2fasfnygfvv6u Spent too much time making Safari and Orion open onion links on macOS. Local tor, privoxy, unbound — mDNSResponder kept dropping *.onion queries.<br/><br/>Tracked it down to undocumented Apple code. /etc/resolver/onion did the trick on Ventura. Ugh, what a mess.<br/><br/><a href="https://github.com/apple-oss-distributions/configd/blob/ebd2cef166d947659a001b076ea919351f7baf5d/Plugins/IPMonitor/controller.m#L1492-L1553">https://github.com/apple-oss-distributions/configd/blob/ebd2cef166d947659a001b076ea919351f7baf5d/Plugins/IPMonitor/controller.m#L1492-L1553</a><br/><br/>Here are the core configs:<br/><br/>/etc/resolver/onion:nameserver 127.0.0.1<br/>/opt/homebrew/etc/privoxy/user.action:{+forward-override{forward-socks5t 127.0.0.1:9050 .}}<br/>/opt/homebrew/etc/privoxy/user.action:.onion<br/>/opt/homebrew/etc/privoxy/user.action:check.torproject.org<br/>/opt/homebrew/etc/unbound/unbound.conf: private-domain: &#34;onion&#34;<br/>/opt/homebrew/etc/unbound/unbound.conf: domain-insecure: &#34;onion&#34;<br/>/opt/homebrew/etc/unbound/unbound.conf: local-zone: &#34;onion.&#34; nodefault<br/>/opt/homebrew/etc/unbound/unbound.conf: local-zone: &#34;onion.&#34; redirect<br/>/opt/homebrew/etc/unbound/unbound.conf: local-data: &#34;onion. IN A 1.1.1.1&#34; 2023-01-05T04:27:09Z