diff --git a/sql/hpr.sql b/sql/hpr.sql
index aecbc4e..2ba54de 100644
--- a/sql/hpr.sql
+++ b/sql/hpr.sql
@@ -11806,6 +11806,18 @@ INSERT INTO `assets` (`episode_id`, `filename`, `extension`, `size`, `sha1sum`,
 (3882,'hpr3882.flac','flac',54360165,'e60818c0a46437e1179d93996eb74d7271fb8a29','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 136909306 samples'),
 (3882,'hpr3882.opus','opus',6727905,'9be328c07dbe2b1d64aaaf6f4cff328e3f05e613','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
 (3882,'hpr3882.wav','wav',273820004,'6fdc5731efabab479eb01e8c2586024df7f41dc2','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
+(3939,'hpr3939.wav','wav',506637644,'5b6b929e01bba23fc8d70c426f42c1f673a53b61','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
+(3939,'hpr3939.opus','opus',12433316,'4e80661faee3d2d26af31b4d40af915be327d1c2','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
+(3939,'hpr3939.flac','flac',103559688,'f00e283bff7fd99dbf9450cfbca4894f60844b3a','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 253318096 samples'),
+(3939,'hpr3939.spx','spx',4983811,'7b2f3da284aea4a3ab4f7a372be7a0ed2f3fd946','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
+(3939,'hpr3939.ogg','ogg',12433010,'2c49dc4f3c110b2feecc965cb16c263908be0902','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
+(3939,'hpr3939.mp3','mp3',10556885,'f331f16312585a1c6ac6253457f3b497581cb118','audio/mpeg; charset=binary','setgid Audio file with ID3 version 2.4.0, contains:MPEG ADTS, layer III, v1,  64 kbps, 48 kHz, Monaural'),
+(3937,'hpr3937.wav','wav',221858600,'568da706277445b167ce7a9eba4313c4e20ca89c','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
+(3937,'hpr3937.opus','opus',5402679,'f7ad9c335ba97aea3ee588eb0441c2dace3ff778','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
+(3937,'hpr3937.flac','flac',45593039,'44e3a6d155168d955446d9e93523091d8fc46f4b','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 110928597 samples'),
+(3937,'hpr3937.spx','spx',2182656,'845709313bfe6153c2a2ff4327b1ee75b5892857','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
+(3937,'hpr3937.ogg','ogg',5402419,'29c1b62a8014176db0cca25f9d8bb5df1ae074d0','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
+(3937,'hpr3937.mp3','mp3',4624039,'2435ea96680b4b90be2fb2be8ac153d622ca8dbc','audio/mpeg; charset=binary','setgid Audio file with ID3 version 2.4.0, contains:MPEG ADTS, layer III, v1,  64 kbps, 48 kHz, Monaural'),
 (3944,'hpr3944.wav','wav',394726012,'53400c703fc6d1b219d76eeb9152a9f69902a837','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
 (3944,'hpr3944.opus','opus',9686010,'280cf0112a78797c1084f7607122a5198416caa6','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
 (3944,'hpr3944.flac','flac',72945857,'040dfe89121b3b3f54d7505c2909cf9b966c8477','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 197362299 samples'),
@@ -11824,8 +11836,8 @@ INSERT INTO `assets` (`episode_id`, `filename`, `extension`, `size`, `sha1sum`,
 (3932,'hpr3932.spx','spx',1955882,'0abd8853875f92de0dbf987cba8b05a3a613c027','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
 (3932,'hpr3932.ogg','ogg',3968305,'a1a8387ee9569082189ee8452b773b59cbb4bce3','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
 (3932,'hpr3932.mp3','mp3',4143459,'7ed5642df83b7dc48c9f63266c1db7b156933885','audio/mpeg; charset=binary','setgid Audio file with ID3 version 2.4.0, contains:MPEG ADTS, layer III, v1,  64 kbps, 48 kHz, Monaural'),
-(3951,'hpr3951.wav','wav',691761706,'2efdc9f6da0e16a6566f2ae147d462a905114b80','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
-(3951,'hpr3951.opus','opus',16689261,'c6bd2939323c65d179a045c676e9e7e6366b9775','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
+(3951,'hpr3951.wav','wav',691761706,'2efdc9f6da0e16a6566f2ae147d462a905114b80','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz');
+INSERT INTO `assets` (`episode_id`, `filename`, `extension`, `size`, `sha1sum`, `mime_type`, `file_type`) VALUES (3951,'hpr3951.opus','opus',16689261,'c6bd2939323c65d179a045c676e9e7e6366b9775','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
 (3951,'hpr3951.flac','flac',113070772,'2c1607f13d72225908a59f75bcaad444ef178cbb','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 345880146 samples'),
 (3951,'hpr3951.spx','spx',6804587,'855f3267083d19e240f18ed90d6e82a2b7c6ee91','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
 (3951,'hpr3951.ogg','ogg',16688993,'2f8788c4f4a4a999bb98c20d6184709f4ab9bdf9','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
@@ -11836,8 +11848,8 @@ INSERT INTO `assets` (`episode_id`, `filename`, `extension`, `size`, `sha1sum`,
 (3929,'hpr3929.flac','flac',42307647,'23433f9e6e308187cb0b5ec577ed27d3183a862d','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 128286459 samples'),
 (3929,'hpr3929.spx','spx',2524111,'be9bebc74d2de6c0282c09e64662ad4601f4771d','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
 (3929,'hpr3929.ogg','ogg',5787231,'198e03bc83cd615dcea8de9a185be48acd28df46','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
-(3929,'hpr3929.mp3','mp3',5347109,'c9473b6880d22550d1ebde7fdb2f3d77cd9e8b0f','audio/mpeg; charset=binary','setgid Audio file with ID3 version 2.4.0, contains:MPEG ADTS, layer III, v1,  64 kbps, 48 kHz, Monaural');
-INSERT INTO `assets` (`episode_id`, `filename`, `extension`, `size`, `sha1sum`, `mime_type`, `file_type`) VALUES (3928,'hpr3928.wav','wav',594289860,'7dd203d6ec7375187e1e696a7d5ed00489ab52c2','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
+(3929,'hpr3929.mp3','mp3',5347109,'c9473b6880d22550d1ebde7fdb2f3d77cd9e8b0f','audio/mpeg; charset=binary','setgid Audio file with ID3 version 2.4.0, contains:MPEG ADTS, layer III, v1,  64 kbps, 48 kHz, Monaural'),
+(3928,'hpr3928.wav','wav',594289860,'7dd203d6ec7375187e1e696a7d5ed00489ab52c2','audio/x-wav; charset=binary','setgid RIFF (little-endian) data, WAVE audio, mono 192000 Hz'),
 (3928,'hpr3928.opus','opus',14811435,'b7cca64f2d5afff0deca1ded3a9dc700493421e0','audio/ogg; charset=binary','setgid Ogg data, Opus audio,'),
 (3928,'hpr3928.flac','flac',122090659,'9d3694e84c9c0aa6e374e278c1d3d495b178214e','audio/flac; charset=binary','setgid FLAC audio bitstream data, 16 bit, mono, 192 kHz, 297144229 samples'),
 (3928,'hpr3928.spx','spx',5845891,'667e89fa9e5d5215adf46965132064a297b3cc31','audio/ogg; charset=binary','setgid Ogg data, Speex audio'),
@@ -20217,8 +20229,10 @@ INSERT INTO `eps` (`id`, `date`, `title`, `duration`, `summary`, `notes`, `hosti
 (3932,'2023-08-29','Short introduction to inxi',437,'folky gives the show about inxi that Ken wished for','<h2 id=\"link\">Link:</h2>\n<ul>\n<li><a href=\"https://github.com/smxi/inxi\">inxi - a command line system\ninformation tool</a></li>\n</ul>\n',309,23,0,'CC-BY-SA','shell,inxi,forum',0,0,1),
 (3971,'2023-10-23','RERERE: How to make friends.',2164,'Sgoti and Mugs chat with friends about how to make friends on the internet.','<h2 id=\"rerere-how-to-make-friends.\">RERERE: How to make friends.</h2>\n<p>We could make a series of this?<br />\n</p>\n<ul>\n<li><p><strong>Source:</strong> <a\nhref=\"https://hackerpublicradio.org/eps/hpr3904/index.html\">hpr3904 ::\nHow to make friends</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://hackerpublicradio.org/eps/hpr3942/index.html\">hpr3942 ::\nRE: How to make friends.</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Friendship\">Friendship</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Interpersonal_relationship\">Interpersonal\nrelationship</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Affection\">Affection</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Blood_brother\">Blood\nbrother.</a><br />\n</p></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Honour\">Honour</a><br />\n</p>\n<ul>\n<li>If one\'s honour is questioned, it can thus be important to disprove\nany false accusations or slander. In some cultures, the practice of\ndueling arose as a means to settle such disputes firmly, though by\nphysical dominance in force or skill rather than by objective\nconsideration of evidence and facts.<br />\n</li>\n</ul></li>\n<li><p><strong>Source:</strong> <a\nhref=\"https://en.wikipedia.org/wiki/Ted_Bundy\">Ted Bundy</a><br />\n</p></li>\n</ul>\n<p>I thought this was funny: <a\nhref=\"https://www.wikihow.com/Ask-a-Friend-to-Hang-Out\">How to Ask a\nFriend to Hang Out.</a></p>\n',391,0,1,'CC-BY-SA','making friends, Mugsup, group chat',0,0,1),
 (3944,'2023-09-14','Race for the Galaxy',947,'tuturto explains very basics of card game called Race for the Galaxy','<p>Race for the galaxy</p>\n<p>Race for the galaxy is a four player card game published by Rio\nGrande Games.</p>\n<p>The goal of the game is to build a space imperium and the player with\nmost victory points wins.</p>\n<p>There\'s also a computer version of the game, which saves you from\npacking up the game after playing.</p>\n<h1 id=\"turn-sequence\">Turn sequence</h1>\n<p>There are five phases in turn:</p>\n<ul>\n<li>Explore</li>\n<li>Develop</li>\n<li>Settle</li>\n<li>Consume</li>\n<li>Produce</li>\n</ul>\n<p>At the beginning of turn, every player selects one of these phases\nand selections are revealed simultaneously. Only selected phases will be\nplayed. Player who selected a phase gets a small bonus.</p>\n<p>Explore</p>\n<ul>\n<li>draw two cards and keep one</li>\n<li>bonus: draw five cards and keep one</li>\n<li>bonus: draw one additional card and keep one additional card</li>\n</ul>\n<p>Develop</p>\n<ul>\n<li>place development card in play and discard cards from your hand to\ncover the cost</li>\n<li>bonus: -1 to cost</li>\n</ul>\n<p>Settle</p>\n<ul>\n<li>place a planet card in play and discard cards from your hand to\ncover the cost</li>\n<li>except military planets, which you\'ll conquer with your military\nscore</li>\n<li>if it\'s a windfall world, produce on it</li>\n</ul>\n<p>Consume:</p>\n<ul>\n<li>use consume powers on cards to turn good into victory points</li>\n<li>you have to keep consuming until you can\'t anymore</li>\n<li>bonus: trade one goods card for 2-5 cards</li>\n<li>bonus: 2xVPs gain twice the victory points</li>\n</ul>\n<p>Produce:</p>\n<ul>\n<li>produce on regular planets</li>\n<li>bonus: produce on windfall planet</li>\n</ul>\n<p>repeat until:</p>\n<ul>\n<li>one empire is 12 cards big</li>\n<li>VP tokes run out</li>\n</ul>\n<p>score:</p>\n<ul>\n<li>points for cards on the table</li>\n<li>cards in the hand (+1 for each)</li>\n<li>VPs earned</li>\n</ul>\n<h1 id=\"special-rules\">special rules</h1>\n<ul>\n<li>cards on the table</li>\n<li>draw extra cards</li>\n<li>trade goods on planets</li>\n<li>add up your military score</li>\n<li>settle planets for cheaper</li>\n<li>have bigger empire limit</li>\n<li>produce on a windfall planet after discarding a card</li>\n<li>etc.</li>\n</ul>\n<h1 id=\"examples-of-cards\">Examples of cards</h1>\n<h2 id=\"star-nomad-raiders\">Star nomad raiders</h2>\n<ul>\n<li>military 2 planet, worth 1 vp</li>\n<li>+1 to military</li>\n<li>+2 cards when trading goods</li>\n</ul>\n<h2 id=\"terraforming-robots\">Terraforming robots</h2>\n<ul>\n<li>development 3, worth 2 vp</li>\n<li>draw 1 card after placing a world</li>\n<li>discard 1 rare elements good to gain 1 card and 1 vp</li>\n</ul>\n<h2 id=\"public-works\">Public works</h2>\n<ul>\n<li>development 1, worth 1 vp</li>\n<li>draw 1 card after placing a development</li>\n<li>discard 1 good to gain 1 vp</li>\n</ul>\n<h1 id=\"expansions\">Expansions</h1>\n<p>All expansions add new cards.</p>\n<h2 id=\"the-gathering-storm\">The gathering storm</h2>\n<blockquote>\n<ul>\n<li>goals (first and most)</li>\n<li>extra player</li>\n</ul>\n</blockquote>\n<h2 id=\"rebel-vs.-imperium\">Rebel vs. Imperium</h2>\n<blockquote>\n<ul>\n<li>solo play</li>\n<li>take over (conquer other player\'s worlds)</li>\n<li>extra player</li>\n</ul>\n</blockquote>\n<h2 id=\"brink-of-war\">Brink of War</h2>\n<blockquote>\n<dl>\n<dt>- prestige</dt>\n<dd>\n<ul>\n<li>counts as VP in the end</li>\n<li>can be used to perform actions</li>\n</ul>\n</dd>\n</dl>\n<ul>\n<li>requires two previous expansions</li>\n</ul>\n</blockquote>\n<h2 id=\"alien-artifacts\">Alien Artifacts</h2>\n<blockquote>\n<ul>\n<li>incompatible with previous expansions</li>\n<li>49 cards representing alien orb players can explore</li>\n<li>balance between expanding and exploring</li>\n</ul>\n</blockquote>\n<h1 id=\"verdict\">Verdict</h1>\n<ul>\n<li>fun and quick game</li>\n<li>every player concentrates on their own imperium</li>\n<li>keep an eye what opponent is doing (trading / military)</li>\n<li>cards are dense with information</li>\n</ul>\n<h1 id=\"example\">Example</h1>\n<ul>\n<li>I recorded myself playing against computer: [Race for the galaxy -\nthree medium AIs](<a\nhref=\"https://diode.zone/w/rw8z8pqeqAauENSufmgkjV\">https://diode.zone/w/rw8z8pqeqAauENSufmgkjV</a>).</li>\n<li>for some reason, you can\'t follow me outside of the instance</li>\n</ul>\n<h1 id=\"in-closing\">In closing</h1>\n<dl>\n<dt>- questions, comments, feedback?</dt>\n<dd>\n<ul>\n<li><a href=\"mailto:tuturto@mastodon.art\">tuturto@mastodon.art</a></li>\n<li>or even better, record your own episode</li>\n</ul>\n</dd>\n</dl>\n',364,0,0,'CC-BY-SA','race for the galaxy, card game',0,0,1),
-(3937,'2023-09-05','Adventures in Pi-Hole',497,'Noodlez recounts their experience getting a pi-hole server','<h1 id=\"adventures-in-pi-hole\">Adventures in Pi-Hole</h1>\n<p>Hi all! Today I\'m gonna be talking about my adventures in setting up\nPi-hole. This will be without screenshots, but instead in all text,\nsorry! Also this is all written as kind of an \"Aftermath\" story. This is\nbeing written after the fact, so this might be missing some details, but\nmost of it is there.</p>\n<h2 id=\"intro-what-is-pi-hole\">Intro: What is Pi-hole</h2>\n<p><a href=\"https://pi-hole.net/\">Pi-hole</a> is a DNS/DHCP server that\nallows for easy network-wide ad-blocking, along with all the nice\ncustomizations that come with being a DNS server, such as custom\ndomains.</p>\n<h2 id=\"first-step-get-it-running\">First Step: Get it running</h2>\n<p>The first step was getting Pi-hole running. I did this using Docker\nCompose on a \"NAS\" which is honestly a full on server at this point. A\nquick copy/paste from <a\nhref=\"https://github.com/pi-hole/docker-pi-hole/#quick-start\">Pi-hole\'s\nREADME</a> and I was up and running! I set a singular system to use this\nas a DNS server, and after that, I figured I was set and ready to\ngo.</p>\n<h2 id=\"second-step-dhcp-town\">Second Step: DHCP town</h2>\n<p>Of course, I wasn\'t satisfied just finishing there. I want automatic\nDNS setting for any device that connects to my network. Of course, I\ncould just set the DNS upstream in my <a\nhref=\"https://openwrt.org/\">OpenWRT</a> router to use the IP address of\nmy server, but that isn\'t good enough for me. This means I\'d be missing\nout on automatic per-client information, since when setting a DNS server\nfor OpenWRT, it only sets itself to forward any DNS requests up to the\nDNS server, which means from Pi-hole\'s perspective, all the requests are\ncoming from the router and nowhere else. The solution is to set up\nPi-Hole as a DHCP server. Keep in mind this isn\'t a tutorial, so let\'s\ngo through what I did first. The first step was to turn on the DHCP\nserver in Pi-Hole. This was super easy, just a checkbox and click save.\nCool! Then I disabled the DHCP server in OpenWRT, and that was all set.\nA few restarting of network devices later, like my phone, and they\nautomatically connected to the Pi-Hole server, and worked like a charm.\nNext up, I set up Tailscale. I use <a\nhref=\"https://headscale.net/\">Headscale</a>, but the setup is\nessentially the same as if you were using Tailscale\'s UI. Set in the\nconfig to override local DNS, set the nameserver to the Tailscale IP\naddress of the server, and turn on magic DNS, et voila! Now to restart\nthe Tailscale nodes, and make sure that on the server, you set it to not\naccept the DNS from Tailscale. If you don\'t do that, it\'ll get in an\nendless loop of trying to use itself as the DNS server, and it\'s just no\ngood. Okay! It\'s all set, and I check the dashboard, and it\'s already\nblocking DNS requests. Perfect!</p>\n<h2 id=\"third-step-whoopsies\">Third Step: Whoopsies!</h2>\n<p>This was fine and great, but when I went to reboot my server, which I\ndo weekly, something bad happened. The interface for the server didn\'t\ncome up. This is a problem, since it\'s the DHCP server for my network,\nso without that working, the network was dead in the water. It can\'t\ngive out IP addresses. What\'s going on? I go ahead and access my server\ndirectly. No matter how hard I try, it can\'t connect to the interface.\nWhat\'s the big deal? Well this is pretty simple, and a question popped\nin my head that go me there. \"How does this server even get its IP\naddress?\" You see when I set up pi-hole, it just kept using the IP\naddress that the router gave it, which it was more than happy to use,\nbut the moment the router didn\'t have a DHCP server, the NAS didn\'t have\na way to get an IP address anymore. So what do you do then? The answer\nis pretty simple. Give the server a static IP. Make sure in the DHCP\nserver of pi-hole, you set a reservation in it for the server, then in\nNetworkManager, which I use, set it to have a static IP, and set its DNS\nto point to localhost. Perfect! This works like a charm!</p>\n<h2 id=\"fourth-step-adlists\">Fourth Step: Adlists</h2>\n<p>Okay, phew! Crisis averted. Just some missing networking knowledge.\nSo what\'s next up on the list? Hmmm... Let\'s see... The default adlist\nis kinda small, let\'s go see if we can find some new adlists. Apparently\nthis is more difficult than you\'d think. A quick search on DDG only came\nup with an equivalent search in GitHub. Not useful! I have no idea the\ntrustworthiness and stability of these adlists. Let\'s see. Another\nsearch leads to a Reddit article that then links to a different list.\nBingo! <a href=\"https://firebog.net/\">An Adlist list</a>. Exactly what I\nneeded. I went ahead and looked into these lists, and added a few of\nthem. Perfect!</p>\n<h2 id=\"fifth-step-maintenance\">Fifth Step: Maintenance</h2>\n<p><code>docker compose pull &amp;&amp; docker compose up -d</code><br />\nOf course, this isn\'t it. I actually use an a/b update scheme, but you\nget the gist. Updates are taken care of, and just make sure you try and\nkeep the server up as long as possible, and keep downtime to a\nminimum.</p>\n<h2 id=\"sixth-step-moving-off-the-nas\">Sixth Step: Moving off the\nNAS.</h2>\n<p>After a while of running this, the necessity of having the NAS on the\nwhole time was starting to get frustrating. The answer there was to move\nit off the NAS. I did this by installing it on a Raspberry Pi 3B,\nrunning Arch Linux ARM. The setup was identical to before once I had\ngotten ALARM running.</p>\n',423,0,0,'CC-BY-SA','pi-hole,linux,networking,self-hosting',0,0,0),
-(3939,'2023-09-07','How I got into tech and hacking',1238,'Getting interested in tech can start in both odd and familiar places. This is Trixter\'s story.','<p>In the show, I mention that leaving Mark Williams Company was \"a\nstory for another time\", but the short answer is that Linux crushed\nthem. Coherent Unix had to make a choice to compete with either Windows,\nSCO Unix, or Linux, and had enough budget to add either X Windows or\nTCP/IP networking. They chose X11, and IMO that killed any chance of\nCoherent Unix being useful in a world of Linux and FreeBSD.</p>\n',149,29,0,'CC-BY-SA','demoscene, hacking, programming, assembly, gaming',0,0,0);
+(3937,'2023-09-05','Adventures in Pi-Hole',497,'Noodlez recounts their experience getting a pi-hole server','<h1 id=\"adventures-in-pi-hole\">Adventures in Pi-Hole</h1>\n<p>Hi all! Today I\'m gonna be talking about my adventures in setting up\nPi-hole. This will be without screenshots, but instead in all text,\nsorry! Also this is all written as kind of an \"Aftermath\" story. This is\nbeing written after the fact, so this might be missing some details, but\nmost of it is there.</p>\n<h2 id=\"intro-what-is-pi-hole\">Intro: What is Pi-hole</h2>\n<p><a href=\"https://pi-hole.net/\">Pi-hole</a> is a DNS/DHCP server that\nallows for easy network-wide ad-blocking, along with all the nice\ncustomizations that come with being a DNS server, such as custom\ndomains.</p>\n<h2 id=\"first-step-get-it-running\">First Step: Get it running</h2>\n<p>The first step was getting Pi-hole running. I did this using Docker\nCompose on a \"NAS\" which is honestly a full on server at this point. A\nquick copy/paste from <a\nhref=\"https://github.com/pi-hole/docker-pi-hole/#quick-start\">Pi-hole\'s\nREADME</a> and I was up and running! I set a singular system to use this\nas a DNS server, and after that, I figured I was set and ready to\ngo.</p>\n<h2 id=\"second-step-dhcp-town\">Second Step: DHCP town</h2>\n<p>Of course, I wasn\'t satisfied just finishing there. I want automatic\nDNS setting for any device that connects to my network. Of course, I\ncould just set the DNS upstream in my <a\nhref=\"https://openwrt.org/\">OpenWRT</a> router to use the IP address of\nmy server, but that isn\'t good enough for me. This means I\'d be missing\nout on automatic per-client information, since when setting a DNS server\nfor OpenWRT, it only sets itself to forward any DNS requests up to the\nDNS server, which means from Pi-hole\'s perspective, all the requests are\ncoming from the router and nowhere else. The solution is to set up\nPi-Hole as a DHCP server. Keep in mind this isn\'t a tutorial, so let\'s\ngo through what I did first. The first step was to turn on the DHCP\nserver in Pi-Hole. This was super easy, just a checkbox and click save.\nCool! Then I disabled the DHCP server in OpenWRT, and that was all set.\nA few restarting of network devices later, like my phone, and they\nautomatically connected to the Pi-Hole server, and worked like a charm.\nNext up, I set up Tailscale. I use <a\nhref=\"https://headscale.net/\">Headscale</a>, but the setup is\nessentially the same as if you were using Tailscale\'s UI. Set in the\nconfig to override local DNS, set the nameserver to the Tailscale IP\naddress of the server, and turn on magic DNS, et voila! Now to restart\nthe Tailscale nodes, and make sure that on the server, you set it to not\naccept the DNS from Tailscale. If you don\'t do that, it\'ll get in an\nendless loop of trying to use itself as the DNS server, and it\'s just no\ngood. Okay! It\'s all set, and I check the dashboard, and it\'s already\nblocking DNS requests. Perfect!</p>\n<h2 id=\"third-step-whoopsies\">Third Step: Whoopsies!</h2>\n<p>This was fine and great, but when I went to reboot my server, which I\ndo weekly, something bad happened. The interface for the server didn\'t\ncome up. This is a problem, since it\'s the DHCP server for my network,\nso without that working, the network was dead in the water. It can\'t\ngive out IP addresses. What\'s going on? I go ahead and access my server\ndirectly. No matter how hard I try, it can\'t connect to the interface.\nWhat\'s the big deal? Well this is pretty simple, and a question popped\nin my head that go me there. \"How does this server even get its IP\naddress?\" You see when I set up pi-hole, it just kept using the IP\naddress that the router gave it, which it was more than happy to use,\nbut the moment the router didn\'t have a DHCP server, the NAS didn\'t have\na way to get an IP address anymore. So what do you do then? The answer\nis pretty simple. Give the server a static IP. Make sure in the DHCP\nserver of pi-hole, you set a reservation in it for the server, then in\nNetworkManager, which I use, set it to have a static IP, and set its DNS\nto point to localhost. Perfect! This works like a charm!</p>\n<h2 id=\"fourth-step-adlists\">Fourth Step: Adlists</h2>\n<p>Okay, phew! Crisis averted. Just some missing networking knowledge.\nSo what\'s next up on the list? Hmmm... Let\'s see... The default adlist\nis kinda small, let\'s go see if we can find some new adlists. Apparently\nthis is more difficult than you\'d think. A quick search on DDG only came\nup with an equivalent search in GitHub. Not useful! I have no idea the\ntrustworthiness and stability of these adlists. Let\'s see. Another\nsearch leads to a Reddit article that then links to a different list.\nBingo! <a href=\"https://firebog.net/\">An Adlist list</a>. Exactly what I\nneeded. I went ahead and looked into these lists, and added a few of\nthem. Perfect!</p>\n<h2 id=\"fifth-step-maintenance\">Fifth Step: Maintenance</h2>\n<p><code>docker compose pull &amp;&amp; docker compose up -d</code><br />\nOf course, this isn\'t it. I actually use an a/b update scheme, but you\nget the gist. Updates are taken care of, and just make sure you try and\nkeep the server up as long as possible, and keep downtime to a\nminimum.</p>\n<h2 id=\"sixth-step-moving-off-the-nas\">Sixth Step: Moving off the\nNAS.</h2>\n<p>After a while of running this, the necessity of having the NAS on the\nwhole time was starting to get frustrating. The answer there was to move\nit off the NAS. I did this by installing it on a Raspberry Pi 3B,\nrunning Arch Linux ARM. The setup was identical to before once I had\ngotten ALARM running.</p>\n',423,0,0,'CC-BY-SA','pi-hole,linux,networking,self-hosting',0,0,1),
+(3939,'2023-09-07','How I got into tech and hacking',1238,'Getting interested in tech can start in both odd and familiar places. This is Trixter\'s story.','<p>In the show, I mention that leaving Mark Williams Company was \"a\nstory for another time\", but the short answer is that Linux crushed\nthem. Coherent Unix had to make a choice to compete with either Windows,\nSCO Unix, or Linux, and had enough budget to add either X Windows or\nTCP/IP networking. They chose X11, and IMO that killed any chance of\nCoherent Unix being useful in a world of Linux and FreeBSD.</p>\n',149,29,0,'CC-BY-SA','demoscene, hacking, programming, assembly, gaming',0,0,1),
+(3943,'2023-09-13','Why my Dell does it better on Linux.',745,'Knightwise talks about how he uses his Dell XPS 15 with Linux.','<p>The Config of my Dell XPS 15</p>\n<pre><code>          .-:/++oooo++/:-.               knightwise@Hawking\n        `:/oooooooooooooooooo/-`           ------------------\n      -/oooooooooooooooooooo+ooo/-         OS: Ubuntu Cinnamon 22.04.3 LTS x86_\n    .+oooooooooooooooooo+/-`.ooooo+.       Host: XPS 15 7590\n   :oooooooooooo+//:://++:. .ooooooo:      Kernel: 6.2.0-26-generic\n  /oooooooooo+o:`.----.``./+/oooooooo/     Uptime: 4 mins\n /ooooooooo+. +ooooooooo+:``/ooooooooo/    Packages: 2457 (dpkg), 19 (snap)\n.ooooooooo: .+ooooooooooooo- -ooooooooo.   Shell: bash 5.1.16\n/oooooo/o+ .ooooooo:`+oo+ooo- :oooooooo/   Resolution: 1920x1080\nooo+:. .o: :ooooo:` .+/. ./o+:/ooooooooo   DE: Cinnamon 5.2.7\noooo/-`.o: :ooo/` `/+.     ./.:ooooooooo   WM: Mutter (Muffin)\n/oooooo+o+``++. `:+-          /oooooooo/   WM Theme: Yaru-Cinnamon-Dark (Yaru-C\n.ooooooooo/``  -+:`          :ooooooooo.   Theme: Yaru-Cinnamon-Dark [GTK2/3]\n /ooooooooo+--+/`          .+ooooooooo/    Icons: Yaru-Cinnamon [GTK2/3]\n  /ooooooooooo+.`      `.:++:oooooooo/     Terminal: gnome-terminal\n   :oooooooooooooo++++oo+-` .ooooooo:      CPU: Intel i7-9750H (12) @ 4.500GHz\n    .+ooooooooooooooooooo+:..ooooo+.       GPU: Intel CoffeeLake-H GT2 [UHD Gra\n      -/oooooooooooooooooooooooo/-         GPU: NVIDIA GeForce GTX 1650 Mobile\n        `-/oooooooooooooooooo/:`           Memory: 2736MiB / 31723MiB\n</code></pre>\n',111,0,0,'CC-BY-SA','linux, ',0,0,0),
+(3949,'2023-09-21','How I use virtualisation to tame my Social Media addiction.',937,'Knightwise talks about the command line applications he uses to fight his Social Media addiction.','<p>Apps I talk about</p>\n<ul>\n<li><p>Irssi: <a href=\"https://irssi.org/\"\nclass=\"uri\">https://irssi.org/</a></p></li>\n<li><p>Tuir: <a href=\"https://gitlab.com/ajak/tuir\"\nclass=\"uri\">https://gitlab.com/ajak/tuir</a></p></li>\n<li><p>Discordo: <a href=\"https://github.com/ayn2op/discordo\"\nclass=\"uri\">https://github.com/ayn2op/discordo</a></p></li>\n<li><p>Tailscale: <a href=\"https://tailscale.com/\"\nclass=\"uri\">https://tailscale.com/</a></p></li>\n<li><p>HyperV : <a\nhref=\"https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/about/\"\nclass=\"uri\">https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/about/</a></p></li>\n</ul>\n',111,0,0,'CC-BY-SA','linux, tailscale, vpn, social media, reddit, irc, discord,',0,0,0);
 /*!40000 ALTER TABLE `eps` ENABLE KEYS */;
 UNLOCK TABLES;
 
@@ -21140,4 +21154,4 @@ UNLOCK TABLES;
 /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
 /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
 
--- Dump completed on 2023-08-24 14:16:09
+-- Dump completed on 2023-08-25  6:11:33