Madalin Ignisca madalinignisca

Running Mistral Large 4 on stock Mistral Vibe — no fork required

Tested on Mistral Vibe v2.26.0 using vibe --yolo --experimental-harness. Everything below uses the documented configuration surface (the same one the CLI's built-in /config browser and skill docs describe), so it should keep working on later releases — no patching, no rebase pain.

The itch

Mistral Large 4 (mistral-large-4-0, public preview, released 6 October 2026) is served on the Mistral API — but if you fire up Mistral Vibe and hit /model, it's not in the picker. The CLI ships a small, curated default model catalog, and Large 4 simply isn't in it yet.

The tempting move is to fork the repo and append the model to the hardcoded DEFAULT_MODELS list. Don't. You don't need any custom code: Vibe's configuration is layered, the models list union-merges with the built-ins by alias, and the stock mistral provider already points at https://api.mistral.ai/v1 using MISTRAL_API_KEY — which is exactly where Large 4 is s

How to setup next.js app on nginx with letsencrypt

next.js, nginx, reverse-proxy, ssl

1. Install nginx and letsencrypt

$ sudo apt-get update
$ sudo apt-get install nginx letsencrypt

Also enable nginx in ufw

Migrating your pritunl install between servers

This is a small write up about how to migrate your pritunl install between servers. It's not especially detailed because I'm lazy and your migration story will most likely be different. All this can be avoided by using a remote/hosted mongo instance(compose.io, mongolab, etc.) and simply pointing your pritunl instance at that. If you want more details ask, and I'll do my best to answer and update this write-up accordingly. Also, feel free to criticize my grammar and spelling.

Some examples of SNAT, DNAT with iptables with comments

mainly used in start-up script

How to test 'safely'

When we play with iptables aka firewall we might end up in situation, where we execute rule, which has unforseen impact - lock yourself out. Recovering from this situation is necessity.

How to:

Enable reboot via SMS.

Test all commands in shell first before putting them into Start-up script. This way the command will be wiped out, when unit is rebooted.

masquarade all outgoing packets to be WLAN0 IP

#FOR MULTIPLE REDIS INSTANCE INSTALLATION ON RHEL7+ USE THE FOLLOWING PATHS AND SETUP PROCESS:

create a new redis .conf file

$ cp /etc/redis.conf /etc/redis-xxx.conf

edit /etc/redis-xxx.conf, illustrated as below

	#!/usr/bin/env bash
	#
	# Certbot Nginx Reload
	#
	# Let's Encrypt Certbot post hook command for Nginx which checks the updated
	# configuration files and reloads the server if everything validates.
	#
	# Author : Justin Hartman <code@justinhartman.co>
	# Version : 1.0.1
	# License : MIT <https://opensource.org/licenses/MIT>

	deb http://ports.ubuntu.com/ubuntu-ports focal main restricted universe multiverse
	deb-src http://ports.ubuntu.com/ubuntu-ports focal main restricted universe multiverse

	deb http://ports.ubuntu.com/ubuntu-ports focal-updates main restricted universe multiverse
	deb-src http://ports.ubuntu.com/ubuntu-ports focal-updates main restricted universe multiverse

	deb http://ports.ubuntu.com/ubuntu-ports focal-backports main restricted universe multiverse
	deb-src http://ports.ubuntu.com/ubuntu-ports focal-backports main restricted universe multiverse

	deb http://ports.ubuntu.com/ubuntu-ports focal-security main restricted universe multiverse

	-- Made by Jairo Tylera
	-- (github.com/Tylerian)
	-- (c) 2019 - present
	-- Released under MIT X11 License

	CREATE
	DEFINER=`root`@`localhost`
	FUNCTION
	`ST_Epgs3857_DWithin`(p1 POINT, p2 POINT, distance_mts FLOAT)
	RETURNS

	<?php // Don't use this line.

	/*
	* Add the script below to wherever you store custom code snippets
	* in your site, whether that's your child theme's functions.php,
	* a custom plugin file, or through a code snippet plugin.
	*/

	/**
	* This function will connect wp_mail to your authenticated

	# config to don't allow the browser to render the page inside an frame or iframe
	# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
	# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
	# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
	add_header X-Frame-Options SAMEORIGIN;

	# when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
	# to disable content-type sniffing on some browsers.
	# https://www.owasp.org/index.php/List_of_useful_HTTP_headers
	# currently suppoorted in IE > 8 http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx