pabloko

Hestia on dynamic/undisclosed IP: mail stack via VPS

If you run a mail server under a dynamic ip, or an ip that should not be disclosed and you're proxiying with cloudflare, let's configure a 1€/month IONOS vps as mail relay server.

You will need a vanity MX subdomain mail.yourdomain.com with SSL certificate. Each domain should use it as MX server, fix the SPF record and be advertised on SRV records if used.

The vps's IP should resolve to this subdomain. Ensure with the vps provider that the IP rDNS record points to your vanity subdomain, and in case of IONOS ask support to enable port 25, and allow on the external firewall.

Server internal connection (optional)

CloudFlare DNS UI/api

A very simple, one-file, cloudflare dns manager.

It uses an api token and can enumerate the zones (domains) list and edit its DNS records, create new records, and clear the cache.

The token must have access to edit Zone.DNS and optionally purge cache.

The nodejs server is needed to reverse-proxy cloudflare api and allow CORS requests.

PoWCaptcha - Proof of Work CAPTCHA

PoWCaptcha is a simple, transparent CAPTCHA system based on Proof of Work (PoW) that aims to stop bots with minimal user interaction. It leverages the same principles as cryptocurrencies and blockchain to validate human users without requiring image recognition or complex puzzles.

Why PoWCaptcha?

Captchas are getting less effective. OCR tools, AI, and captcha solving services are quicker than humans and cheap. At the same time, exposing a contact form without protection invites spam and bot traffic. PoWCaptcha offers a minimal wall to deter lazy bots—making the verification process computationally expensive for bots but invisible to humans.

Instead of bothering the user with complex tasks, PoWCaptcha shifts the burden to the computer, performing backend calculations involving:

User data

Using Edge WebView2 is really straightforward, but using the Composition controller is poorly documented and only discussed on few issues in the WebView2 repo.

The browser itself is rendered on a separate process using DirectComposition API wich does not directly interoperate with DirectX, but can be readed using GraphicsCaptureItem WinRT apis. This means that a capture session must be setup into the host visual root, and it will provide accelerated GPU texture capture of the browser (with transparency)

There are few extra steps to setup this pipeline under win32 apps, apart of usual WebView2 setup:

A DispatcherQueueController need to be created in the hosting thread in order to be able to use the Visual interfaces
Use CreateCoreWebView2CompositionController instead CreateCoreWebView2Controller or its WithConfig equivalent.
Create a WinRT DirectComposition IContainerVisual and IVisual as in the example
Create a WinRT Direct3D11CaptureFramePool and start the session using `GraphicsC

There is an ANGLE driver in every windows 8-11 included in the system32 named edgeangle.dll that seems to be part of the former edge 11 (spartan) that briefly existed in windows (and still exists as in edgehtml.dll and will take a future post)

This distribution reports ANGLE version OpenGL ES 3.0 (ANGLE 2.1.0.d0cdd066eca2) and it seems only D3D11 backend is available. It reports the next extensions:

GL_ANGLE_client_arrays GL_ANGLE_depth_texture GL_ANGLE_framebuffer_blit GL_ANGLE_framebuffer_multisample GL_ANGLE_instanced_arrays GL_ANGLE_lossy_etc_decode GL_ANGLE_multiview GL_ANGLE_pack_reverse_row_order GL_ANGLE_program_cache_control GL_ANGLE_request_extension GL_ANGLE_robust_client_memory GL_ANGLE_texture_compression_dxt3 GL_ANGLE_texture_compression_dxt5 GL_ANGLE_texture_usage GL_ANGLE_translated_shader_source GL_CHROMIUM_bind_generates_resource GL_CHROMIUM_bind_uniform_location GL_CHROMIUM_color_buffer_float_rgb GL_CHROMIUM_color_buffer_float_rgba GL_CHROMIUM_copy_compressed_texture GL_CHROMIUM_c

Query information from NT Handles of shared D3D11 Textures

tl;dr: you can't. Only D3D12 and Vulkan resources expose API to query it's physical size

Looking into using the gl extension EXT_external_objects_win32 stumbled upon this <size> parameter in glImportMemoryWin32HandleEXT when using a D3D11 resources

tl;dr: Use 0 as size when using `HANDLE_TYPE_D3D11_IMAGE_EXT / HANDLE_TYPE_D3D11_IMAGE_KMT_EXT`

the driver implmentation will figure out the internal size of the resource. This size would be alignedWidth * alignedHeight * Bpp where alignment varies depending of the graphics card vendor, model and driver version.

To give some context, here are some values from my NV card with updated drivers

update: https://framagit.org/tytan652/ffmpeg-ndi-patch use this patch. this gist is outdated

ffmpeg 4.4 with NDI

This patch adds libndi_newtek to last ffmpeg version, and fix timecode related issues that produces wrong PTS/DTS timestamps that seems to happen with newer NDI SDKs.

changes

Updated libndi methods by newer versions (v2/v3)

	/**
	* Windows Keyed Mutex Library
	* @pabloko - [email protected] - 23/01/2024
	* This file is a C / C++ wrapper for windows keyed mutex / events / condition variables.
	**/

	#include <D3dkmthk.h>
	#include <windows.h>

	#ifdef __cplusplus

	/*
	* Image decoder based on WIC
	* ------------------------------------------------
	* Provides synchronous loading of images and copy
	* frames in ARGB format.
	*
	* Example of loading images:
	* ImageDecoder::Init();
	* ImageDecoder* img = ImageDecoder::FromFile("C:\\path\\to\\image.png");
	* ImageDecoder* img = ImageDecoder::FromURL("http://example.com/img.jpg");

	using System;
	using System.Net;
	using System.Net.Sockets;
	using System.Text;

	namespace ArtNetDmx
	{
	class ArtNet
	{
	//Udp socket object to make requests