I recommend it every time this question pops up and I’m surprised more people aren’t privy to it:
Rent a VPS as your public gateway. Connect the VPS to your server with a simple wireguard tunnel.
The only thing on the VPS should be a reverse proxy with SSL/TLS pass through.
Send the traffic at the VPS reverse proxy to a reverse proxy on the main server. Configure this proxy to use letsencrypt certs.
The benefit and importance of the SSL pass through reverse proxy, is that it allows all data in transit to remain encrypted until it reaches your physical server. Traditionally, most would suggest the one and only reverse proxy exist on the VPS but all traffic would then be decrypted on the VPS. This could obviously compromise your traffic if the VPS provider snoops or your VPS is compromised.
Cloudflare tunnels decrypt on their hardware as well, which is why I always recommend avoiding their services.
Backblaze deleted my project drive for a multimillion dollar project I was archiving through their desktop sync. It’s largely my fault for not noticing the drive had failed when considering their upfront policy about them deleting your backups after a month of inactivity. Luckily it didn’t have too big of an impact because the most important files were backed up elsewhere. I do wish their desktop app had better warnings about imminent deletions though.
This is encouraging. Thank you.
SDR is Standard Dynamic Range. This is how most media is viewed and has been viewed for decades, typically in the Rec709 color space. 99% of consumer devices display in SDR.
HDR is a newer technology that expands the dynamic range passed Rec709 color space. It requires an HDR capable screen to display HDR content and most content is not distributed in this format, although this has been changing in the last few years.
I personally find HDR kind of a gimmick, but my point is that HDR != HD. SDR/HDR describe contrast ratios and how many colors are rendered. SD/HD describe resolution.
The chart does show them downgrading the plans from 4K/UHD to HD though.
The wiki entry has a chart which shows all plans have access to HD content. Is the chart wrong or did the contributor confuse SD with SDR?
Either way fuck HBO.
Settle down, partner.
First thing I tried but I think you need to provide it with your YouTube login cookie to download age restricted content.
I use nginx for static websites and TLS passthrough servers.
I use traefik as a reverse proxy for sites with many services and SSO.
Nginx is definitely easier to configure for simple things. But I prefer traefik for more complex setups.
To my frustration, I’ve tried both your method with ISC and a run_script hook with Kea, and pfsense just overwrites the custom configs. There’s a PR on their github but it’s been sitting there for months.
That’s a really good point. Thank you.
ISC DHCP is still used though it may be phased out in a future update. I’m going to take your approach and see how it goes.
FBI, open up!
Jk. Thank you for your service
Compressed air can spin the fans fast enough to cause damage unfortunately.
Did you use compressed air to clean out the fans?
It’s possible to fry circuitry if you artificially rotate the fans too fast, as this generates an electric field more powerful than the fans and their attached components are rated for.
Probably rare to cause damage with modern computers but an old PC might be more susceptible to this type of damage.
Am I understanding correctly that if users had 2FA, the vulnerability would be prevented from gaining access?
I was in your position recently and decided to install PVE from scratch and restore VMs from backup.
I had a fairly complex PVE config so it took some additional work to get everything up and running. But it was absolutely worth it.
Same. It works great.
I don’t want to be too specific for opsec reasons. But windows 10 is the OS. OFX aka OpenFX.
I’m familiar with Proxmox, virtualbox, and KVM/KVM manager.
If I want to set up a PC to virtualize multiple operating systems, but with the feel of a multiboot system, what virtualization software would you suggest?
My goal is for the closest I can get to a multiboot system (windows, Debian, fedora) but virtualized so I can make snapshots. It should feel like I’m on baremetal when inside the VM.
Virtualbox is clunky with lots of pesky UI cluttering the screen and Proxmox doesn’t seem great for this use case.
Yes, it will count towards your bandwidth.
I typically don’t get anywhere close to this though.
The few times I did were due to initiating large backups between devices, upwards of 2TB. But I’ve since moved my backup system to a mesh network and haven’t hit bandwidth overages since.