Document Summary

Four uploaded files summarized and organized for quick reference

Py

batch_process.py

Python script | File organizer for markdown clippings
Script

Purpose

A Python utility that automatically organizes markdown files containing web clippings by extracting their source URL and sorting them into domain-based folders.

How It Works

  • Scans X:\Documents\Reading\Clippings for *.md files
  • Extracts URLs from YAML frontmatter (checks link: first, then source:)
  • Parses the domain from each URL (strips www. prefix)
  • Moves files to X:/DocumentReading\Websites\<domain>/

Key Functions

extract_url_from_md()Parses frontmatter to find a valid HTTP(S) URL
get_domain_from_url()Uses urllib to extract netloc and clean it
main()Orchestrates the directory scan and file moves

Dependencies

os, shutil, re, pathlib.Path, urllib.parse.urlparse

Note: Paths use mixed separators (\ and /) which works on Windows but may need adjustment for cross-platform use.
Md

Securing Ollama with an Nginx Reverse Proxy

Technical guide | Docker Compose setup
Guide

Overview

A step-by-step guide for adding authentication to a local Ollama LLM deployment using Nginx as a reverse proxy, deployed via Docker Compose. Covers two authentication methods.

Approach 1: HTTP Basic Authentication

  • Uses .htpasswd file with bcrypt-hashed credentials
  • Nginx config: auth_basic + auth_basic_user_file
  • Compose file: docker-compose.basic.yml
  • Port mapping: 8880:80
  • Test with: curl -u myuser:mypassword
docker run --rm -it httpd:alpine htpasswd -nb myuser mypassword > ./nginx/.htpasswd

Approach 2: Bearer Token (API Key)

  • Uses api_keys.txt file with one key per line
  • Nginx config uses Lua script (access_by_lua_block) for dynamic key validation
  • Requires openresty/openresty image (includes Lua module)
  • Compose file: docker-compose.bearer.yml
  • Keys are read from file on every request — changes take effect immediately
curl -H "Authorization: Bearer my-secret-api-key-1" http://localhost:8880/api/generate

Key Configuration Details

  • Proxy timeouts set to 300s to prevent 504 errors on slow model responses
  • Ollama data persisted via Docker volume ollama_data
  • Both services use restart: unless-stopped
  • Config files mounted read-only (:ro)
Security Warning: The guide strongly recommends adding HTTPS before production use, as Basic Auth and Bearer tokens are sent in plaintext over HTTP.

Tags

Ollama Nginx Docker Compose Authentication Reverse Proxy LLM Lua
Md

Hetzner vs Vast.ai

Cloud provider comparison | Pricing & features
Comparison

Overview

A feature and pricing comparison between Hetzner (German VPS/hosting provider) and Vast.ai (GPU marketplace), published by getdeploying.com.

Hetzner Highlights

  • High-performance VPS at affordable prices (shared, high-memory, dedicated CPU)
  • Developer tooling: Terraform SDKs, official CLI
  • EU-based — may simplify GDPR compliance
  • Founded 1997, headquartered in Germany, 6 data center locations
  • GPU starting price: $0.34/hr
  • Offers 2 GPU models: RTX 6000 Ada, RTX 4000 Ada

Vast.ai Highlights

  • Marketplace with 10,000+ GPUs available
  • SOC2 certified (enterprise security)
  • Pre-built templates: PyTorch, CUDA, TensorFlow
  • Founded 2018, headquartered in USA
  • GPU starting price: $0.02/hr
  • Offers 51 GPU models
  • Billing: per second; components: active rental, storage, bandwidth

Price Comparison (Hetzner)

ServicePriceSpecs
VM Small$5.23/mo2 vCPU, 4 GB RAM (CPX11)
VM Medium$12.22/mo4 vCPU, 8 GB RAM (CPX32)
VM Large$22.70/mo8 vCPU, 16 GB RAM (CPX42)
Block Storage$5.13/mo100 GB
Object Storage$5.82/mo1 TB
Load Balancer$6.28/moLB11
Egress Overage$1.16/TBBeyond 1-60 TB allowance

Vast.ai does not offer traditional VPS/block storage/load balancer services — it is GPU-focused only.

Services Offered

ServiceHetznerVast.ai
Block Storage
GPU-powered Servers
Load Balancer
Object Storage
VPS

Key Takeaway

Hetzner is a full-service cloud provider with strong European presence and competitive VPS pricing. Vast.ai is a specialized GPU marketplace with dramatically lower GPU prices but no general compute/storage services.

PDF

Complaint — Aaron v. Bondi et al.

Federal lawsuit | First Amendment / App Store censorship
Legal

Case Information

CourtU.S. District Court, D.D.C.
Case No.25-CV-4250
FiledDecember 8, 2025
JuryDemanded

Parties

What Is ICEBlock?

A free iPhone app (launched April 2025) that allows users to report publicly observable ICE agent locations via a simple map interface. Key features:

  • No accounts, no personal data collection, completely anonymous
  • 5-mile radius for reports and notifications
  • Reports expire after 4 hours; no historical tracking
  • Real address verification via reverse geocoding
  • 5-minute cooldown between reports to prevent spam
  • Disclaimer: "for information and notification purposes only" — not for inciting violence
  • No photos, videos, chat, or direct user communication

Timeline of Events

April 2025
ICEBlock approved by Apple after ~5-month review including legal team vetting
Late June 2025
App reaches ~20,000 users amid increasing ICE raids
June 30, 2025
CNN features ICEBlock; app surges to #1 Social Networking and 500K+ downloads
June 30, 2025
Administration officials (Lyons, Homan, Noem, Bondi) publicly threaten prosecution and demand DOJ investigate
October 2, 2025
Apple removes ICEBlock from App Store citing "information from law enforcement"; Bondi claims credit on Fox News
October 7, 2025
Bondi testifies before Senate Judiciary Committee: "We spoke with Apple and Google to get the ICEBlock app taken down"
December 8, 2025
Complaint filed in D.D.C.

Claims for Relief

FIRST CLAIM — Coercion of Private Censorship

Defendants violated the First Amendment by coercing Apple to remove ICEBlock from the App Store, constituting a "scheme of state censorship" and unconstitutional prior restraint.

SECOND CLAIM — Threatened Prosecution for Protected Speech

Defendants violated the First Amendment by threatening criminal prosecution against Aaron for developing, distributing, and promoting ICEBlock, chilling protected expressive activity.

Requested Relief

  • Declaratory judgment that coercing Apple to remove ICEBlock violates the First Amendment
  • Declaratory judgment that threats to prosecute Aaron violate the First Amendment
  • Permanent injunction against coercing app distributors to stop distributing ICEBlock
  • Permanent injunction against threatening, investigating, or prosecuting Aaron for protected speech
  • Costs, attorney's fees, and other relief
Context: The complaint alleges this is the first known instance of Apple removing a U.S.-based app in response to U.S. government demands, contrasting with 1,700+ removals for foreign governments in 2024.