either create a cert group and give that group permission to the certs, or add a handler to distribute the cert+key on renew to your service’s folder, and change owner/group to whats relevant to the service
Note: the “live” folder only contains links to the archive folder
Are the links correct? @anoyongbot
Run iperf internally to see if your bottleneck is switch/ap or fw. I set up a j1900 pfsense for my sisters family a while back to do qos (gamer bois in the house) amd it had no problem staying at 500mbps. No ids or other stuff.
Not built any opn/pf-sense in a while, but i always use intel server-nic’s. Used to have way better support than other stuff on bsd
Yeah, but if your house burns down copies on different hdd wont matter much. Offsite like cloud will
Basically why i feel more comfortable with LXC than docker for my home lab services. It feels more like a VM in management.
We run a good mix of docker, vm’s and bare metal at work; no containers are auto-updated
Removed by mod
Good - i wish your culture good luck
Its very hard to add more of something else and not have dilution.
Take 1 litre of vodka and add 1 decilitre of water - there will be more fluid but the vodka will be?
I know of at lest Nordic languages, german languages, slavic languages, Urdu, Yiddish
Some are not literal translations, but have the same meening. Like silly as a goose - not stupid. Or just beeing refered to as a goose implying simplicity, stupidity or sillyness.
The word goose by itself has extensive use un english https://www.reginacoeli.com/blog/goose-idioms.html https://www.merriam-webster.com/thesaurus/goose
They do look kinda akward
It’s a common insult in many languages - with a lot of theories about origins. You can track medival usage of this all over Europe, but I have no knowledge about other continents.
Insults in general hold more power in honor-cultures. Your grandparents might have reacted the same way she did, while you might not feel the same.
Stick to strong keys and keep it on 22 for ease of use
No - ssh is very easy to secure, while an exposed web-service is very hard to secure. Theres no difference in the security of ssh without password and for example WireGuard.
While the hype is less these days, theres more and more thats connected with ipv6. While I do t use it in my home-lab, theres advantages besides nat.
You dont need ipv4 for intent based networking/firewalls, and I guess as a network engineer you know this is the new buzzword for selling equipment.
Source: I pay nerwork engineers and architects
Lolwut? Someone downvotes you for that?
Yeah - industrial computers is the way. I would want something that can run at 60 c, and is water/dust proof. How to keep 20tb on a floating humidifier? Im not sure about this one, but swap drives often is probably a good idea.
Do you ride salt or sweet water?
A reverse proxy is used to expose services that don’t run on exposed hosts. It does not add security but it keeps you from adding attack vectors.
They usually provide load balancing too, also not a security feature.
Edit: in other words what he’s saying is true and equal to “raid isn’t baclup”
All reverse proxies i have used do rudimentary DDoS protection: rate limiting. Enough to keep your local script kiddy at bay - but not advanced stuff.
You can protect your ssh instance with rate limiting too but you’ll likely do this in the firewall and not the proxy.
But posting a reply to myself didn’t work great - or maybe it was me that screwed up
some plants like raspberry can propagate through roots. Others like strawberries have stolons. And theres plants like blackcurrant where branches can root when they hit the ground.
But mostly its done by humans through cuttings.