u/Techwits

Same. We have one client using voice out of convenience for a single account. They can use passkeys, they just choose voice. It's a battle I was avoiding but now it'll need to happen. We have disabled SMS from the beginning and refuse to turn it on. We're supposed to elevate security as an MSP and have standards, not let the whims of clients with no technical understanding tell us how to do things.

Oh man I discovered Ansible a few months back and I use it for all standardization now. It's so amazing. Makes setting up a new host a breeze.

Ah yes, my bad. For some reason that didn't make sense to me the first time around. I can't be sure what I was initially getting at. =P

It's not that it "does this" is that it comes from most likely their M365 domain but through Autotask sending infra. Microsoft doesn't like it, thinks it's DirectSend and rejects it even though it isn't. Very common problem if your using the same domain, which you shouldn't, always use a secondary or sub domain.

There are ways around this (properly). It's difficult and took me several tries to get it right but I can receive Autotask emails no problem now. IIRC (I'd have to look it up) a transport rule, a connector and maybe even a allow/deny rule inside defender but it's "proper" and doesn't reduce security and DirectSend is still disabled.

Same. Eventually self hosted costs kept going up and I was spending more time chasing functions and waiting for cold starts than just getting hosted CIPP. Moving was a breeze.

I discovered this via STS2 and went back to 1 to double check if this was a new feature. Boy was I shocked lol. Over 500hrs in STS1

I just setup a few gen4 using zigbee2mqtt and WiFi is disabled and I didnt disable it. I'm assuming the system disables the WiFi if you change the communication tech or mine already had the "updated" firmware on it.

I am using these ones. https://www.dmsguild.com/en/product/484918/tessa-presents-56-maps-for-vecna-eve-of-ruin-roll20?filters=0_0_0_45535_0_0_0_0 they work great and are a huge upgrade to the ones that come with the module.

STL? That looks sooo cool. I have some card based representation but this is super cool.

I made them indifferent and if my party did anything other than communicate they would attack. One of my PC's understood primordial, and with a successful check I allowed them to communicate in simple terms (enemy 'point', friend 'point', open pipes 'point') . They showed the weirds kindness so they let them be.

Oh yeah, they were over levelled for the first two chapters (due to previous campaign shenanigans) so they were curb stomping most things. This was the first time where there was some serious clenching and cheering when the final blow hit on the Hertilod

I took some heavy inspiration from this post and some other mentions about Lair actions and the stuff from u/AudioBob24. I moved the "Sentient Blood of Havock" to Lair actions and incorporated the magic surge. Each spell use caused a wild magic separate from other wild magic surges and never went down. They were at '13' on the surge die by the end of round 2. I set it so ANY interaction with magic caused a surge roll aside from using magic weapons.

I heavily narrated that magic FEELS different in the chamber, with the lights being motes of chaos magic jittering in place. This set the tone that casting magic was going to be a risk. They got lucky with their surges, with most of the surges being positive or thematic hilarity. In hindsight, I would have adjusted the surge table to be something different with an even chance of 'bad things' happening to the battlefield.

The Lair actions I gave it a 50% chance to spawn 1d6 blood oozes to protect the beast. By round three there were 7 oozes and a very hurt hertilod. The hertilod 'ran' and the oozes caused good damage across the board and tipped the battle to the beasts. As soon as the third round spawned those 5 more oozes the tension immediately shifted.

Lastly, I gave the Hertilod a legendary action to try and bite and swallow. I made it just a 'regular bite' so the damage output was much smaller but the risk of being consumed was the same. It never paid off, but it added to the chaos since the Hertilod as written, could only move or 'digest' as a legendary action.

I completely removed the 'poison air' mechanic, as soon as the first ooze dropped, the party spent an action to utter a secret to gain advantage on all D20s which probably saved them.

Thanks for all the inspiration!

While integrations are nice, these kind of things is what helpers and a few scripts are for. I had looked at chore systems for the kids, went down a few rabbit holes and always came up to "I wish it could also do X" now I have a DOCUMENTED system for configuring "new chores" for the kids and use labels and a few variables to fully automate the tracking and resetting. While more work up front, it uses HA core functionality and won't break over updates or need someone else to maintain.

I'm all for integrations if they do something that I can't do, spending some time to make it as integration independent as possible has always won out for me.

I modified what was able to be borrowed and aligned it to items that had no chance on their own to be broken (like wands that have a chance to break when all charges are spent etc). This made the list more concise and they can work into the system using Malaina or something to get items like that through other means

I agree. I moved my NFS to ansible and have them exist under a universal directory amongst all my hosts for hosts that need said directory. Portainer lacked a few features that Komodo hit but moving away from Portainer definitely had its drawbacks.

It actually forced me to learn more about Docker and I moved certain things to more "best practice setups".

I moved from portainer to komodo. Portainer is good but Komodo is an order of magnitude better IMO

Been there. Walk away and leave it broken for an hour or "overnight" and see the problem in 2min with a fresh mind haha.

Komodo is a great way to manage your docker system. I love it and sync all my configs to a private Github repo to keep it all in sync.

BIND mounts FTW. Can't be wrong if they're explicitly defined

We deal with very small businesses (less than 50 endpoints) and install Omada hardware, which works well for our needs. We moved to them back when the Ubiquiti supply chain was a mess and getting hardware was impossible.

We manage a network for consistent WiFi and Address control, not for DPI/IDS. Securing the endpoint and user services has been a better protection mechanism for years.

Sure hit me up! We have made changes since we first rolled it out because of how Microsoft classifies spam in the Exchange system. Surprise surprise those two systems (defender and exchange) don't talk to each other, classic Microsoft =P

We use defender built in (Business Premium licensing). We have a bunch of adjustments auto apply via CIPP that closely resemble Microsoft's strict setting. Works great and far less issues than Proof point.

I have a few PLA hooks outside for holding robes near my hottub. One has broken in the three years we have had them up (so through three Canadian winters). I am very surprised.

I just converted from portainer to komodo and I had portainer stacks and everything. Migrating it all to a private Github repo and having it pull down to komodo has been amazing. Worth the effort for sure.

Exactly. This isn't a "we're holding this stuff until X" it is a "We don't work for free". We are always happy to go the extra mile to make transitions away from us as smoothly as possible WHEN the account is in good standing.