t҉̠̙ǵ̣̞̄ͪ͜x̸̱͚̳ͫ͐̑̈ͯͣ̚n̒͌҉͉̦̜̝ͅ

LMAO they really are inept 🤦‍♂️

I’ve moved a couple of domains to dnssec and it’s great, simple DNS.

Yeah the whole app is really responsive, works great on minimal resources. Excellent for sharing hikes and trails!

Have you seen owntracks? They have client apps too.

Same! Two zpools on one Debian VM, shares NFS etc for everything else. I pass through PCIe sata cards to the VM, too.

Still does nothing when scanning the entire ipv4 address space achievable so quickly. You can also use services like shodan to find vulnerable services on any ports.

Use SSH keys, stay upgraded. Make management services (SSH, RDP, admin services) accessible only via VPN (WireGuard). Only expose 80 and 443 to the internet, if necessary.

Never heard of DeSEC before, but it looks damn cool! Been looking to get away from CloudFlare.

That’s just how they work. They terminate SSL, and then connect to your source server as a client, this gives them access to read anything submitted to your or any other sites they manage in the clear.

The frontend should inform the user (that the “price lock” time has expired) and refresh the price automatically. Then when they click submit there should always be a non-expired token. You should also be storing details of these tokens server-side so you can validate that it’s not been tampered with (if someone gets the private key. They can submit orders for any price?)

Yep, Immich is tha bomb! Able to completely clear out google photos!

Yeah I think we’re on the good lemmies 😁

Interesting setup, mines very similar. Except with ZFS and no DMZ 😅 I’m thinking of setting up vlans for automation too, how do you handle updates and software downloads on that lan?

I believe they don’t fit in the built in tip holder.

But it’s paid 😭 I spose I could try it for a month.

I made a poc https://modder.lemmyverse.net tool that I’m hoping to expand on for Lemmy tooling 😄

Update: https://data.lemmyverse.net/

I added lemmy.mods4ever.com to the list ;)

Odddddd, I’ll have to check it out.

Use woreguard and do a point to point VPN, I have one with my mate and so I can stream shit from his server over local LAN, wireguard is fucking sick.

Ahh this sounds awesome! Would be nice to put a bunch of MP3s in a folder and be able stream them!