either create a cert group and give that group permission to the certs, or add a handler to distribute the cert+key on renew to your service’s folder, and change owner/group to whats relevant to the service

Note: the “live” folder only contains links to the archive folder

Are the links correct? @anoyongbot

Run iperf internally to see if your bottleneck is switch/ap or fw. I set up a j1900 pfsense for my sisters family a while back to do qos (gamer bois in the house) amd it had no problem staying at 500mbps. No ids or other stuff.

Not built any opn/pf-sense in a while, but i always use intel server-nic’s. Used to have way better support than other stuff on bsd

Yeah, but if your house burns down copies on different hdd wont matter much. Offsite like cloud will

Basically why i feel more comfortable with LXC than docker for my home lab services. It feels more like a VM in management.

We run a good mix of docker, vm’s and bare metal at work; no containers are auto-updated

Stick to strong keys and keep it on 22 for ease of use

No - ssh is very easy to secure, while an exposed web-service is very hard to secure. Theres no difference in the security of ssh without password and for example WireGuard.

Lolwut? Someone downvotes you for that?

Yeah - industrial computers is the way. I would want something that can run at 60 c, and is water/dust proof. How to keep 20tb on a floating humidifier? Im not sure about this one, but swap drives often is probably a good idea.

Do you ride salt or sweet water?

A reverse proxy is used to expose services that don’t run on exposed hosts. It does not add security but it keeps you from adding attack vectors.

They usually provide load balancing too, also not a security feature.

Edit: in other words what he’s saying is true and equal to “raid isn’t baclup”

All reverse proxies i have used do rudimentary DDoS protection: rate limiting. Enough to keep your local script kiddy at bay - but not advanced stuff.

You can protect your ssh instance with rate limiting too but you’ll likely do this in the firewall and not the proxy.

Lol

what does your trace give? You are setting up a recursive resolver, make sure settings allow for this

IMO venturing out in the unknown using fringe case hardware/software is a hobby by itself. It’s my 2nd hobby besides self hosting. Being more about experimenting than stability and ease of use, it’s not compatible with self hosting so I keep them separate

Google fu is broken.

Now might actually be a good time to launch a new search engine, as both bing and google refuse to give good results. Bing might have some - idk - can’t look at the pages for very long because layout was made by hitler

Yeh - but it does not include efta

I still dont understand broadcom’s move except for short term profits. All the kids used to use it, and now they’re on proxmox.

I work in public sector and we’re transitioning away from VMware now, as the people we recruit know proxmox and not VMware.

Just like adobe lets the kids get away with pirating - as that builds following - VMware was giving away single-seat.

I’m still not sure your car thing would match here - unless they refuse to sell you a car that you only use in the USA. I’m guessing these stores are brand owned? Why else would you refuse a sale - even if it’s useless to the buyer

I could see rights come into play - but they usually regulate within the nation.

I would think this is connected to name/address/payment not matching the country you claim to live in. If it’s VPN detection then a WiFi router doing the VPN would work fine.

It sounds kinda illegal. Can Coca-cola stop me from going to Denmark to buy for danish prices and claim I have to pay Norwegian prices?

It’s directly comparable to buying danish subscription and using the service from a danish exit. If my data originates in china and are vpn-ed to Denmark they have the same cost on providing me service as anyone else in Denmark

Edit: I’ve never been to China, but it’s like really far away from Denmark.

It’s also a great place for AI training as you have total access to data you federate to your instance. Or for Cambridge-Analytica to track tankies