u/Mystikal91

So, a couple of days ago I casually stumbled on a private *arr stack listed on Google with no auth enabled (it's actually enabled but auth is disabled on local address and I guess the user REALLY messed up this setting)

I actually found prowlarr first, on a subdomain like prowlarr.actualdomain.com. I just tried to change the subdomain to sonarr, lidarr and radarr and they are all there, open to the entire world. Qbittorrent is also online, but luckly is protected by a password

So, I've tried everything to let the user know the problem without being destructive:

- I've disabled every indexer on Prowlarr, left only one custom rss torrent indexer called "Do you know your stack is open to the internet?" with url "Http://checkyourauth.com"

- Disabled every download client on radarr, sonarr, lidarr and I've added various tag with phrases like "Checkyourauth", "Fixthis", "Youarelistedongoogle", "Somuchfreespaceforporn" and so on

- Moved every media on a subfolder called "I can delete all this"

- Run a whois on the domain, actually found a mail and sent a notice about it. Discovered it's actually kinda hard to write a mail that doesn't look like spam/phishing in this case

A couple day passed and nothing have changed. I'm actually worried that this random guy/girl on the internet could lose everything and that there is a huge sign with "I'M PIRATING MOVIEEEESSSSSS" on his head. I can see some film/tv series being added some days before my discovery, so it's not abandoned

So, any suggestion on how I can be noticed? I will only do NON DESTRUCTIVE action and I will obviously not share the url

Hi DMs, I need a bit of advice

We're running PotA and my group of players just got to W8 area in the Weeping colossus. Vanifer the last prophets (they actually still have to close the air portal, but one of the player attuned to windvane and will probably turn against the other player they reach that portal, but that it's another story).

A little context:

In the fire temple, they found Lyzzie in area E26, found out that Vanifer was already in the Weeping colossus and all they time they spent in the Temple of the Eternal Flame was all a trap from the fire cultist to buy some time to let Vanifer complete the ritual to call Imix. This to say that I've made very clear that they are tight on time and need to act quickly

Now, they quickly go down, battle their way inside the Weeping colossus (they actually moved the elevator platform using chains and other way to prevent to go up, so it's kinda difficult for other fire cultist to go down, that was a really good idea) and now they are in the W8 area

Problem is, they are tired, out of spell slot, one player got downed in the last fight. They have some various health potion, but extremely low on other resources.

Now, I know that this is exactly what is supposed to happen. This kind of dungeons exist to burn through resources before the final boss. The fight with Vanifer, however, looks extremely tough, with Halinaxus, Incinerath and Imix itself and a TPK is not out of the question

They talked about a long rest before the battle, but we all agree it's not realistic to do it (they still could be attacked and, most importantly, Vanifer is almost done). We finished the session here, with no answer to that question

Now, I need some advice on what to do. Here what I've thought:

If they choose to go fight Vanifer directly I may remove Incinerath from the fight, let them fight Halinaxus first and then Vanifer with Imix and hope for the best, risking a TPK

If they try to long rest, they will get attacked (maybe from some random salamander or fire elemental from the magma), stopping the long rest unless they find a really good way to hide themself (and the Weeping colossus doesn't have a really good place to hide). However, every hour the heat will increase, to the point it will be too hot to rest around the 4th hour (they will roll the constitution check for the heat every hour). For every hour passed, they will get 1/8 of the benefits of a long rest (1/8 of the spell slot, 1/8 of the Max Hp, and so on... So they will get at most half their resource and a mix of exhaustion). Rumble and earthquake will make clear that Vanifer is really close to call Imix.

A short rest is kinda out of the question due to the fact that the real problem are spell slot (they probably have enough potions to fill their Hp anyway)

I know that the approach should be: If there is no time to long rest, there is no long rest, but I kinda also want to avoid a boss fight made of simple attack and cantrips. Furthermore, I don't want to simply say "no" to a long rest: they should be able to try, but without success due to context

So, the question is: how would you deal with a situation like this? Is my approach good or would you apply some harder limit to this rest?