Lovro Papež
123 commits
LP
Lovro Papež
@cannonsh
Product architect or whatever the new term is for what developers are now.
@adria-mobil- Novo mesto, Slovenia
- cannonsh.dev
- github.com/cannonsh
- Joined October 2026
Commit activity
123 commits in the last 30 days
longest streak 12 dayscurrent 12
2,331 / 2,500 XP169 XP to root
Yesterday
Mon, Oct 26
Sun, Oct 25
replying to @cannonsh
I am currently on a strictly no-CLI setup, Claude uses MCPs to orchestrate with different services, and SSH keys are in the Apple Keychain. Was thinking about running CC in the container with my apps, but just settled on Laravel Herd. Should be fine.
Fri, Oct 23
replying to @cannonshShow thread
With Cloudflare Edge I can basically have low-traffic web apps up there at about a $1/month, so 5 pages before I even hit the credit limit.
On Forge it's one line per server: open the server's PHP settings in the runtime tab edit the FPM php.ini, add session.upload_progress.enabled = 0, then restart PHP-FPM.
Wed, Oct 21
replying to @cannonsh
Yeah this is done via Laravel Forge, so other repos for php 8.4 not from Canonical.
replying to @azovskyShow thread
I mean, I had it installed so why wouldn't it be on noble and patched?
replying to @brendt
In Slovenia it's still mostly .NET, so most sites were fine today. But. It's .NET :)
Ubauntu 20.04
php8.4-fpm is already the newest version (8.4.5-1+ubuntu20.04.1+deb.sury.org+1)
Yep Ive just made the FPM config updates and called it good. This is so annoying LMAO
deb.sury.orgDEB.SURY.ORGDebian and Ubuntu packaging
replying to @paulinevos
Feels so good to be back. Still having apps down due to 8.4 not being on 24.04 but getting there.
Patched only for 8.2 to 8.5, according to this:
https://securinglaravel.com/laravel-security-notice-critical-php-security-release/
Older versions are affected but won't be patched.

Securing LaravelLaravel Security Notice: Critical PHP Security Release ⚠️[Notice #5] A Critical PHP Security Release is coming very soon - you need to be ready to patch your servers.
Tue, Oct 20
replying to @cannonsh
I mean, even my triaging agent has absolutely no idea what to do with that sort of tickets. When correct data comes in triaging will work as a charm and we will be able to do automatic pull requests on high-confidence tickets.
Mon, Oct 19
replying to @0z3
Same here - the possibilities are endless. Could just be empty threats, but I've told them repeatedly, hire a security expert that specialises in AI then, but none exist :)
replying to @0z3
Yeah, people got spoiled - us developers too, of course. Don't think they will manage expectations enough when the drop happens, though. Features that now take us a day to finish, test, etc. will take 3 weeks+.
replying to @SanderMuller
Yeah I am not part of a software dev company, we are developing software in-house for a larger company in another industry, and part of foreign ownership. So you can imagine how "stiff" everything is. Time to find another job if that happens, hah!