Yeah what you’re talking about is a DMZ, it still won’t help a ton if you don’t have strict firewall controls inside your network too.

I just use wireguard with firewall rules to restrict to just my server with my docker containers on it and my DNS

I still use a reverse proxy, but to get into my network you need to be on VPN. It’s more secure for me I guess.

I use traefik forward auth, even inside my network on VPN, for an extra layer of security for some apps.

My opinion is that port 443 getting accidentally misconfigured by me is just too likely a scenario. With wireguard on my router I also am able to restrict traffic to ONLY my webserver and DNS servers for my devices.

So I guess that’s another positive of wireguard, you can use your own DNS servers for all your phones all the time and always have ad blocking with pihole or something similar, even on mobile.

By using VPN I don’t have to worry about accidentally exposing a website with a copy paste error or something over my reverse proxy. I can also easily restrict who has access to my VPN and do routing rules from my router per device or subnet (for people who aren’t in my family I have a separate subnet I assign with more strict firewall rules)

If this server is publicly accessible and gets pwned, they can use it as a jump box for your internal devices.

Just close 443 and use VPN with ACME DNS challenges for your certs. That’ll help make it even more secure, nothing is full proof though and a VPN is a good first step

Only if you hook up a torrent client. There’s no requirement to do so

For jellyfin/Plex you can try downloading everything with lidarr

Runs on docker so it should run fine on your system

To me at least it seems like Israel was holding back pretty hard. Seems like they could’ve glassed Gaza a long time ago

Yup, homebuilders are getting record profits. They have 0 incentive to build smaller homes.

Starter homes are like minimum 300k now anyways as well so yeah… Idk what to do but wait for this house of cards to come crashing down

Wasteful shitty practice. It’s somewhat the fault of the home builders too. I tried building and they wouldn’t do much OTHER than mcmansions unless I pushed real HARD. They love all those upsells

Only use it as a backup pihole now. Used to have an *arr stack on it, but needed a beefier pc

Donkey kobg country

They are still fucking up America to build mcmansions

Yeah which makes sense. If you don’t use custom dns then it’ll use the dns from the VPN provider. It’s more secure by default. 👍

Glad you figured that out.

Double it up with a pihole dns

https://pi-hole.net/

Idk tbh. We are all by ourselves over here. I do wish we could at least reconsider military spending in the US. But now they seem damned and determined to fight a war with russia and china.

Personally I like how we are involved in this war. We send equipment which we can then 100% determine the efficacy of. It doesn’t cost any American lives. I do also recognize that our country seems to be crumbling

Yeah I am a software dev and was even confused for a bit. Reddit has /r/all and things that make it easier to find subreddits, I still struggle with lemmy sometimes. Sync made it a bit easier, but I wish I could seamlessly browse all instances and their comments under 1 profile

I host my own lemmy instance. Is there a way to get comments from other instances to show up?

I was able to subscribe to lemmy.world communities, but when articles show up it only shows comments from my instance (none)

I really like what we do in the shadows