you can smell it coming before you see it imo. that gives you time to get to shelter and to move to where the water/food is
Yes, if it's strong enough to instantly kill a mosquito with a pulse it is likely that looking at the spot can blind you.
grayjay, it's an app developed by Louis Rossman to combine a lot of streaming platforms into one privacy and security respecting app. it does have billionaire backing tho if that yanks your chain
I don't disagree with you that anon should've asked more questions, but platonic flirting is kinda wacky without a well established rapport beforehand. Otherwise it's just flirting, and can be confusing.
Twenty aught nine
That's fair. My camera (Nikon D300) is from 2007 but it functions wonderfully and the auto settings are usually very good, with me only having to adjust the exposure or white balance occasionally.
Anyone who tells you to manually set everything in photography is silly. I took a photography class and made sure to thoroughly read a professional photographer's breakdown of my camera and how to operate it.
The only reason I've seen suggested why you should use manual mode is if you want a very specific shot that the automatic settings won't allow you to get. You know, like everything else. Automatic modes (i.e. aperture modes mainly) are there for a reason and while it's good to know how to manually set your parameters and read the light meter, you realistically don't want to be fiddling with your camera while whatever subject you want to photograph is potentially changing (for portrait or still shots its not as bad, but if you need to do any form of quick shooting you're only hampering yourself). Do I still use manual mode sometimes? Of course! I was taught how to use it and when I need it it is extremely helpful. But I typically only need it for night photography or if I want a specific effect (which can often be achieved with shutter mode but I never really use that).
Well we're kinda on track to undo start both of those things so...
I answered a lot more in depth in the comment I'm linking below. I will say i was very frustrated and emotional when writing this post, and having had time to cool off, think about it, and discuss it with some other people my stance has softened (which you might've seen in my responses, the one linked included). But I don't disagree with what I said, just changed my focus onto what needs to happen first.
-
I understand that. I'm not advocating for an immediate revolution but organizing and building mutual aid networks to protect those that are gonna be hit hardest. I also personally don't care about the economy; i think caring about the economy more than people is how we got here.
-
I understand. It's really fucked up but that's why we need to organize first. Whether or not a revolution happens, it's never bad to organize.
-
The majority also elected a fascist; see point 2.
So, the answer to your question is that you won't find much support IRL because most people don't actually think they are supporting fascism.
Half the country doesn't think hes a fascist, but the other half does. Especially around the area that I am, I'm not worried about garnering support.
Time will tell if Trump is an actual fascist or just a blowhard.
Those who lie in bed with fascists are fascists imo.
Yeah that's fair, i know i glow like a rod of uranium
You're right, but resistance is more than just revolution and even if everyone else is ok with living in 1984, I'm not. I know plenty of people who aren't and I have a feeling the majority of the people where I live aren't either (especially based on the voting data). Resistance to tyranny and injustice itself is just, and it can take many forms. Ideally yes there would be a revolution to remove the fascists from power and build something better, but that's mostly lip service. I won't lie, i was very frustrated when I wrote the post but in cooling down I am remembering that the resistance will have to start small and will have to grow. You're welcome to see some of my other comments for what I'm talking about that isn't revolution.
Whether he supports it or not, Trump is ushering in Project 2025. The Republican party has control over the presidency, the senate, and the house. Additionally the Supreme Court has been compromised. Disagree if you want but Project 2025 is a christo-fascist plan to overtake the entire government. The implementation of Project 2025 is a literal life or death situation for a lot of the country. It will cause many women, people of color, queer people, and gender non-conforming people to die. This will also kill many services and programs that the working class people rely upon. This will only benefit the powerful and uber-wealthy. For everyone else it will be a horribly dystopic future. Anyone who thinks that they will benefit from this is misunderstanding how much will actually change. Otherwise they would have to lack empathy for their fellow humans.
I think organizing needs to start immediately. There's no downside to organizing, even if we're massively overestimating the amount of fascism we'll see
No problemo, i welcome the feedback and criticism. Thank you for engaging in a good discussion
but are you suggesting the election was rigged or fraudulent?
no.
Because if not you're the one trying to impose an authoritative regime.
also no, I'm advocating for community organizing against a very obviously fascist regime. im advocating for mutual aid and self reliance. y'know, the things people who are typically targeted by fascists need.
So what you're talking about is for a minority to raise arms against the democratically elected government.
again, not what I'm saying.
Even if you were to win the revolution you would need to put a tyrant in power because calling a new election would result in the same outcome.
not necessarily?
That's one of the dangers of democracy, but starting a revolution to remove a democratically elected president in the name of democracy is just as dumb.
nowhere did i say i was fighting in the name of democracy. I do think democracy is generally good, although i do not view the US as a democratic country. but that's not what im advocating for at all in this. I'm advocating for genuine survival under an oppressive regime and solidarity amongst the people against tyranny. if shit gets real bad, do i think it's just to fight against it and resist? absolutely. but as I've said in other comments, the American people aren't close to that yet. we need to organize first.
What is the goal you're trying to achieve? A more democratic government?
That'd be great but I think at this point achieving something other than fascism would be nice.
For my fellow Americans, when is enough enough?
I will preface this by saying I understand that I am more radical, revolutionary, and extreme of a leftist than most. Despite that, I still ask that you actually engage with this as I'm asking in good faith.
When is enough enough? We have elected a fascist into the highest office and handed the keys to him and his friends. Is now not the time to actually get organized, involved, and armed? In my opinion, the time for peaceful, democratic means of avoiding fascism was before the election. But we have failed to do so, and as such there will soon be a tyrant in power. Are we going to wait until troops are rolling down the street to stage any form of resistance, because by then it's far too late. Now I want to be clear that I am not advocating for random acts of violence or an insurrection like January 6th. But is this not a point of radicalization? Is this not where we start organizing within our communities and getting involved in mutual aid and resistance? How much more do we need before people are actually ready to stand, fight, and maybe even die to avoid continuing down the path that we are on? Fascism is not on the horizon, it is here. Are we really to do nothing about it as a society except lay down and accept our fate? Because that doesn't jive with me. That makes absolutely no sense to me.
ETA: To the people responding, I will admit that I was heated and frustrated when writing this post. Having had time to cool off, reflect, and get some differing viewpoints my stance has changed to focus more on what needs to happen first and what's practical. You may have seen that in my responses. That being said, I don't disagree with what I said here, and I'm still frustrated we're at this point at all. I've linked a comment though that elaborates upon what I actually want to see done though, which is a lot more reasonable and is still inline with this post.
https://lemmy.world/comment/13305217
Can we have a discussion about the rhetoric in this community?
I often see people in the comments acting like having a fast or loud car immediately makes your dick smaller or that you have ED. And people talk about owning a car as if they've never gone above 40 MPH and are terrified to do so.
For context I live in a city with actually ok mass transit, don't own a car, and prefer to bike/take the train whenever possible. Trains, trolleys, bikes, and feet are the best forms of transportation imo.
That being said, body shaming or making fun of people with physical or mental issues (that may be no fault of their own) is just shitty. It makes this community look shitty. I hate reading comments about "loud car small dick this" or "fast car ED that". It's unnecessary. You can shit on asshole drivers without having to stoop that low. Secondly, some women enjoy cars as well; be more creative.
Finally, don't act like cars can't be fun. I'm all for phasing out the automobile and revolutionizing transport by returning to the ways of olde, but cars are fun. I understand some of you are grandparents and don't like someone revving their straight pipes mustang down your block on a Saturday morning. That's completely reasonable. But my god does this community act like you can't have fun in a car. I absolutely enjoy loud and fast and powerful cars, because that's an incredible work of engineering and it simply can be fun. Going fast can be fun. Being in a car that purrs like a lion can be fun. Going offroading or drifting or racing or anything in a car can be fun.
We won't convince people to see our side by shitting on the things they enjoy. We convince people to try and see things from our point of view by actually looking through their perspective first, and acknowledging that while cars can be fun they are not sustainable.
ETA: Some people seem to think I think public roads should still be for cars. Never did I say that. I think the appropriate place for cars is the track. I would love to convert all the roads in my city to a mixture of bike and pedestrian lanes with trolleys running down the median. But cars can be fun and a track day can absolutely be a great time.
What do you prefer to selfhost?
I've been around selfhosting most of my life and have seen a variety of different setups and reasons for selfhosting. For myself, I don't really self host as mant services for myself as I do infrastructure. I like to build out the things that are usually invisible to people. I host some stuff that's relatively visible, but most of my time is spent building an over engineered backbone for all the services I could theoretically host. For instance, full domain authentication and oversight with kerberized network storage, and both internal and public DNS.
The actual services I host? Mail and vaultwarden, with a few (i.e. < 3) more to come.
I absolutely do not need the level of infrastructure I need, but I honestly prefer that to the majority of possible things I could host. That's the fun stuff to me; the meat and potatoes. But I know some people do focus more on the actual useful services they can host, or on achieving specific things with their self hosting. What types of things do you host and why?
Recommended containerized CardDAV/CalDAV solution?
Hello! I am migrating some services from an old cloud instance to my homelab. The cloud instance was running NextCloud and as I don't really need the entirety of NextCloud, I'm moving to individual services. It's now time for me to move the most important thing from this NextCloud instance: my calendars and contacts.
I'm looking for a good containerized service to run this. I've taken a look at both Baikal and Davis, but both seem to have issues running rootless. As I have Kerberos throughout my network and am storing the persistent volumes on an NFS share, I prefer to run all my containers under dedicated service accounts. This also means that I would like the DAV server to have LDAP or IMAP authentication. I am also using podman quadlets rather than docker compose, but I can figure out the translation on my own. Worst case scenario here is I just run Davis and talk to the dev about the issues I have (which will probably be done anyways), but I'd like to get something up and running sooner rather than later. Any solutions would be greatly helpful. If there isn't a good containerized solution, I'm also willing to make an LXC or VM but I'd prefer to stick to containers. Thank you!
FreeIPA & Proxmox - DNS selectively doesn't work
So this is an interesting one I can't figure out myself. I have Proxmox on a PowerEdge R730 with 5 NICs (4 + management). The management interface is doing its own thing so don't worry about that. Currently I have all 4 other interfaces bonded and bridged to a single IP. This IP is for my internal network (192.168.1.0/24, VLAN 1). This has been working great. I have no issues with any containers on this network. One of those containers happens to be one of two FreeIPA replicas, the other living in the cloud. I have had no issues using DNS or anything else for FreeIPA from this internal network nor from my cloud network or VPN networks.
Now, I finally have some stuff I want to toss in my DMZ network (192.168.5.0/24, VLAN 5) and so I'll just use my nice R730 to do so, right? Nope! I can get internet, I can even use the DNS server normally, but the second I go near my FreeIPA domains it all falls apart. For instance, I can get the records for example.local just fine, but the second i request ipa.example.local or ds.ipa.example.local, i get EDE 22: No Reachable Authority. This is despite the server that's being requested from being the authority for this zone. I can query the same internal DNS server from either the same internal network or a different network and it works handy dandy, but not from the R730 on another network. I can't even see the NS glue records on my public DNS root server.
I'm honestly not sure why everything except these FreeIPA domains works. Yes, I have the firewall open for it and I have added a trusted_networks ACL to Bind and allowed queries, recursion, and query_cache for this ACL. The fact it only breaks on these FreeIPA subdomains makes me think it's a forwarding issue, but shouldn't it see the NS records and keep going? It can ping all the addresses that might come up from DNS, it's showing the same SOA when I query the root domain, it just refuses to work from my IPA domains. Can someone provide any insight on this please, I'm sick and tired of trying to debug it.
Would a vacuum extraction affect a QWISO solution?
Basically title. If I make a quick wash isopropyl alcohol (QWISO) solution, would a vacuum extraction have a meaningful effect on the resulting concentrate? I'm doubt it would have a meaningful impact in terms of flavor and terpene content, but I can see it producing an interesting consistency. The only way I could see it affecting flavor would be if the low pressure caused some volatiles to change, but I kinda doubt that. For the vacuum extraction I would probably just put it in a vacuum chamber.
26 episodes away from finishing my first watch through of the original series
I watched Bleach years ago on Amazon Prime when i was a kid. Prime only had up to the beginning of the Bounts arc at that time, so I never finished it. I recently found it on Hulu and am watching it all the way through, filler and all. I'm about to begin the final arc and I wanted to share my thoughts.
First, I disagree that things went downhill after the SS arc. For me, the show temporarily jumped the shark after the Grimmjow fight. Everything before that was honestly kinda great. I didn't even realize the Bount arc was filler. It was slow at the start but I really enjoyed it by the end.
The Captain Amagai arc was interesting but it killed the pacing. The Zanpakuto Rebellion arc was really good at first but I kinda hated it by the end because of how cheap the show felt. The second half of the arrancar saga started mid-decent in my opinion, and was great by the end. And the Invading Army arc was so good I wish it was canon.
Personally, the show got really really bad in-between the Grimmjow fight and the actual Ulquiorra fight. Everything else has been incredible. I'm sure if I didn't watch the filler, or watched it afterwards that I would enjoy it a lot more. Although I don't see how I can fully watch the middle filler without breaking continuity, as Uryu has his more advanced Quincy weapon but Ichigo will lose his powers by the end of the Arrancar arc. Either way, I'm excited to finish the series and start the new one. Eventually I may watch the movies.
Could I get an autopsy done on myself while I'm alive?
Completely random stoned hypothetical. Lets day im old as fuck and I decide I'm ready and done. Could I have the same postmortem autopsy done on me while I'm still alive? Like give me a ton of drugs and let me watch myself get dissected as my final moments. I understand there is a legal and possibly moral concern, but is it really ethically that bad if I also want it? Like I'm not taking myself out at my prime, I'm nearly dead anyways. Lemme see myself cut apart that'd be cool as shit, only if I couldn't feel any pain though.
Good file servers for Proxmox?
Hello! I have Proxmox VE running on a Dell R730 with an H730. Proxmox manages the disks in a ZFS RAID which is exactly how I want it. Because I intend for this server to have a NAS/file server, I want to set up a container or VM in proxmox that will provide network storage shares to domain-joined systems. Pretty much everything in my lab is joined to FreeIPA, so I'd like to use the IdM features with my file server. I have given TKL FileServer a shot but it really didn't seem up to snuff with what I wanted. I am not looking for a NAS solution that will require me to pass through the RAID controller and disks to Proxmox, as I want Proxmox managing the ZFS pool. I can set up an NFS/Samba server in a container, however in trying to do so I was running into issues (due to it being an unprivileged container) that I can probably figure out but I want to see if anyone has any recommendations first.
What's a common occurrence in your hobby that you think shouldn't be?
For me it's driving while under the influence. If you couldn't tell, I like me some ganja. However I have long since held the belief that it is utterly insane to drive while under the influence of most substances, with maybe nicotine and caffeine being the exception. All too often I see other stoners smoking and driving, which I simply can't fathom. I've only operated a vehicle once under the influence and it was just to move a U-Haul around the block to a different parking spot, which was such a scary experience while high that I refuse to even consider getting behind the wheel again while high.
Well I guess it's my turn now
See previous post and the comments in this link for context.
https://aur.archlinux.org/packages/util-linux-selinux
Genuinely the only time Arch has broken something I can't fix myself
Context: A few days ago Arch pushed out a legitimately broken update. This was because they shipped out a testing version of util-linux. They very quickly fixed this... except I use SE Linux (say what you will I wanted to dive into it) and now I'm stuck waiting for the maintainer to update the AUR package so I can fix my system. This is not a general arch problem but a me problem because of my less standard, more niche build. Although the wait is genuinely making me reconsider using SE Linux as it's been a hassle to maintain (just to keep things up to date, I gave up on keeping it in enforcing mode).
What is a good multirole server setup for a racked server?
I recently purchased a Dell PowerEdge R730 at a killer price, and intend it to be the cornerstone of my home lab. I plan to use it as both a NAS and a container server so I can set up whatever I want with it. I'm a bit unsure of what a good setup here looks like, so I'm hoping for a bit of guidance.
As my R730 has 16 drive bays, I intend for 10 of those to be high capacity HDDs for the NAS with the remaining spots for SSDs for the containers. The R730 will also have a PERC H730 RAID controller. I want a full featured NAS solution (although I am open to more lightweight solutions) so my go to thought is TrueNAS. My plan was to install Proxmox and run TrueNAS on top of it, but I am unsure if this is the best method. Does anyone have any insight on how well this works or if there's a cleaner solution?
Addendum: Anyone have any recommendations for RAID setups? I currently have 4x900 GB 10k SAS Dell Enterprise drives but I intend to bump that up to 10x900 GB over time. I'd like to be able to add these without much hassle, but I'm unsure what to go with. It seems that ZFS can handle it well alone, but I don't want to have gotten the good raid controller for nothing so I'm wondering if using ZFS with the RAID controller in HBA mode will be more worth it than a dedicated RAID setup. And if I'm using a RAID setup, should I go RAID or unRAID? If I go RAID, is RAID 01, 10, or 60 a better option here? Based on my research, it sounds like I'll need a lot more drives for a proper RAID setup and it'll be less flexible, but I would like some second opinions.
Does this particular mating pattern have a name?
It was one of the first I learned and has remained one of my favorites.
AIBI For throwing away my human coworker's lunch?
Hello, I work with numerous humans. Navigating their emotionality is quite haphazardous at times, and today I have seemingly transgressed on my colleague "Mike".
I have observed for numerous months that Mike appeared to be attempting a science experiment of sorts. It was a lacto-bacilli fermentation but I was unsure to what end. Mike had repurposed many parts of his meals and placed them into a sealed container to make something called "Kombucha". I am familiar with many fermented human foods, however I was unsure that Mike would achieve a favorable result. When asked why he didn't use the replicator for his "kombucha", he said it's not the same. I am still attempting to understand his logic as it quite literally would be the same.
Nevertheless, I have kept a careful eye on the fermentation, and as it's entered it's third month I noticed signs of bacterial and fungal contamination. Believing the dish to be clearly compromised, I safely discarded of it with the proper biohazard precautions. However, Mike is now irate, saying I ruined his lunch and that he likes it, "chunky but soft". I do not follow his logic. AIBI?
Edit: I see now I was being illogical. I should have thrown away both the "kombucha" and Mike.
How do I get over my ex?
Posting this here because I'm unsure of where else to post something like this.
Over two years ago at this point I mutually ended a nearly year long relationship with someone I was still in love with. We were graduating high school and while still going to colleges in the same city, realized we were in over our heads and were in an unhealthy situation so we split it off. It destroyed me. It took me a year to get my shit together (I went on a minor drug-binge for about 3 months after and spent probably $6k from eating out and making sure I always had enough bud) but I eventually met my current partner. Things aren't perfect in our relationship but I genuinely love her and we work to further strengthen our relationship. I don't know that I see the rest of my life with her, but we've been together over a year now and I don't have any intention of ending things anytime soon. We also live together so making it work is more of a necessity lol.
But I can't get my ex out of my head. I've spent nearly every day for the last two years trying to let go of her but I don't know why she keeps popping into my thoughts. I don't love her, I don't want to be with her, I don't want her in my life. And ahe isn't, but I'm still dealing with this. I do have a therapist who I've talked at length with about this but I don't know, something about her just is stuck in my head. Maybe I preferred sex with her? I doubt it but she did kinda define what I consider my "type", so maybe it's just she's more unromantically attractive to me? But it feels so much deeper than that. If it were those shallows reasons I feel like it would've been easier to debug and diagnose. She was my best friend. One day she was in my life, the next day not. It feels like a very specifically sized puzzle piece is missing and now there's a small hole in the puzzle.
I don't know, it's kinda maddening. I don't have most social media, so it's easier to avoid her online and not think about her. But occasionally I find myself borderline stalking her, except it's just me gathering random information I already know from OSINT tools with no intention or idea on how to utilize it (I'm well aware of how to use OSINT data, I mean in this specific situation). Part of it just feels like someone really important to me was rapidly removed from my life and I yearn to reconnect with them, but I guess I fear what such an endeavor might reawaken in me. I don't love her, at least I don't think I do. If I do it would be monumentally fucked up and I would feel like I'm emotionally cheating on my partner, who is somewhat aware of this issue but thinks I have it figured out (I thought I did too; I'm not knowingly lying to my partner). I don't know, I sent them a proper goodbye email a few months ago and thought that was that but it's clearly not. And I've put so much time and effort into trying to wrap it up for myself but now it feels like I'm just lost and stuck. Part of me just wants to reach out and ask if we can get a cup of coffee, but the other part of me recognizes the red flags in that immediately.
I just want to be done with this. I want my brain to get it through itself thar it's over. It's been over. There's no changing the past, and if I could, I don't think I would've reached the point where I am in life with my current opportunities if we had stayed together. Part of why we broke up was because as I was learning how to sell pot (which I was never very good at), I became a massive stoner (which I am very good at). She wasn't anti-weed but didn't appreciate it. When eventually saw that us growing apart was hurting each other and decided to leave things behind. Being young and dumb, I didn't handle the breakup well. I didn't do anything bad or harmful to her or anyone else, but it was obvious to both of us that I wasn't okay afterwards. When I feel like I needed her the most, she was gone from my life. In doing so she broke our promise of prioritizing our friendship over the relationship. I don't really know. I understand a lot of the reasons why I'm hurt and some are justified some are not. I understand the role I played and the responsibility I had in hoe things ended. I was not a great partner in a lot of instances, and neither was she. But part of me wonders if we had met now what it would be like. But I wouldn't have been who I am now without her and without being without her. I'm just so fucking unsure man.
I'm sorry if this is really rambly. I expect that the majority of answers will probably be to just get over it already, which I'm trying to do. I just don't feel like it's the right thing to ask to see her again, because that feels like an eventual mistake rather than closure. Idk, tell me I'm an idiot or an asshole to my current partner or something. I just want to be done with dealing with the legacy of a long-dead relationship.
TL;DR: Mutually ended a significant relationship when I wasn't ready. Been kinda fucked since. Want to not be fucked so I can be a better partner. I suck for this.
Edit: Thank you to everyone who has commented thus far. A lot of the discussion has been really helpful and I've got some new leads on how to debug this issue. I'm trying to respond to everyone and I can't express how appreciative I am.
Wireguard on Unifi Dream Machine Pro can't ping Server <-> Client
So I have two sites: my home network and my cloud VPSs. I have setup a FreeIPA domain that I would like to use for all my machines, local and remote. While I wait for Linode/Akamai to add their new VPC feature, I want to create Wireguard tunnels from each VPS to my home network with my UDMP as the r...
Cross Posted from one of the Ubiquiti communities
Wireguard on Unifi Dream Machine Pro cannot ping Server <-> Client
So I have two sites: my home network and my cloud VPSs. I have setup a FreeIPA domain that I would like to use for all my machines, local and remote. While I wait for Linode/Akamai to add their new VPC feature, I want to create Wireguard tunnels from each VPS to my home network with my UDMP as the r...
Wireguard doesn't allow Server <-> Client pings
So I have two sites: my home network and my cloud VPSs. I have setup a FreeIPA domain that I would like to use for all my machines, local and remote. While I wait for Linode/Akamai to add their new VPC feature, I want to create Wireguard tunnels from each VPS to my home network with my UDMP as the router. I tried to set it up through the UI, however I can't ping to/from the server wireguard interface when connected. So I tried to set it up with wg-quick but alas that isn't working either. I have the firewall port for wireguard open with both Internet In and Internet Local. I'm not even trying to get LAN access yet because I can't even ping over the tunnel. This has seriously frustrated me and I need to see if I'm just majorly fucking up or if I'm sane afterall and the UDMP just isn't good for Wireguard.
Server conf: ``` [Interface] Address = 192.168.84.1/24 ListenPort = 51820 PrivateKey = [server private key]
[Peer] PublicKey = [client public key] AllowedIps = 192.168.84.20/32 ```
Client conf: ``` [Interface] Address = 192.168.84.20/24 PrivateKey = [client private key]
[Peer] PublicKey = [server public key] Endpoint = [server hostname]:51820 AllowedIPs = 192.168.84.1/32 ```
I had PostUp and PostDown rules set, but they didn't seem to make a difference. It seems they're mostly for configuring routing with iptables. Can I please get a sanity check here?
Edit: It was dns. It's always dns. Apparently the UDM Pro doesn't like IPv6 for Wireguard (and supposedly a lot) and the domain name I was using for my home network was double stack. I tested against it's current IP address and when that worked I made a subdomain that was IPv4 only and it's working great now.
How do I use existing SSL certs with a FreeIPA installation?
I have an existing website that I use for all sorts of things. I was a bit more of a sucker when I bought the domain so I also bought a wildcard SSL cert for my domain instead of using LetsEncrypt. I use the home subdomain to link back to my home network where I'm in the process of setting up a FreeIPA domain. In order to make sure the SSSD works properly, I read that I need to LDAPS, and for that I'll need some certs. I know FreeIPA generates its own certs, but these are self signed. I'd like to have my certs actually be trusted as theres a reason this is on an actual domain. However when i try to add my certs with
sudo ipa-cacert-manage -t 'C,,' CERT_BUNDLE
I get an issue with one of the certs (I know which one) for using an insecure algorithm. And (expectedly) I can't add the other certs as this is part of the CA chain. So I read to try renewing with the external-ca option, and now I have a CSR from FreeIPA but I'm unsure if I can sign it with my SSL cert. Any guidance or help is vert much appreciated. I may have buggered my install in trying to figure this out, but I suppose we'll find out.
Update: It looks like I wasn't doing anything wrong; the root CA cert is SHA1 signed which seems to be my issue. I'm setting up everything with lets encrypt going forward and won't be buying a cert again unless i genuinely have a reason to.