gibs0ns

I have really enjoyed the experience of OpenZiti for this purpose. Being able to host dark services and impose granular access controls and routing for different clients is a game changer.

For the few services I host that require SSL (eg; WebUSB), I serve the dark service via a standard domain (example.com) so I can still get a LetsEncrypt cert, but public access to that domain resolves to a static page; "Plz connect to OpenZiti & try again". This allows me to have SSL on required dark services without requiring to install a private CA for each client.

I typically get stuck on the marketing stage.

Far too often I build a project, only to get ready to deploy it, then struggle to think of a name/domain for it.

Then coupled with the thought of struggling to market the project, I end up fizzling out at that stage.

If I already have users of the project, then I'll deploy it as a subdomain and forget about it until a user complains.

That was my exact thought. I've seen this a lot on IoT devices, to detect IP collisions/changes.

I've used Rongta thermal printers a fair bit, I've found them to be cost effective and easy to use. I mostly use them via WebUSB and some random JS ESC/POS lib. Though I have never bought directly from Rongta.

Stop being weird.

What would you want them to do if the tables were reversed? Support him, don't take advantage.

I used "tl" and/or "tldr" for the first few prompts, then variations like "tldr with each letter on new line"

I self host a lot, including some business related infrastructure for my home office (some employees also work from here). However services designed to be accessed by a wider public audience (eg; websites, emails, Nextcloud) are hosted on a rented dedi.

As other comments have pointed out, kids suck up every minute of your life, and when the internet or Plex don't work I'll know about it real quick (DAAAAD!). The important question for me is; how fast can I rebuild all of this if all the drives were wiped?

Here is my home setup;

Hardware:

* OPNSense - old i5 desktop, 70GB hdd, 20GB RAM

* TrueNAS - AMD A10-5800K, 16TB hdd, 1TB ssd, 8GB RAM

* OpenNebula Frontend - Random Intel NUC, 128GB ssd, 4GB RAM

* OpenNebula KVM Node - Xeon ?, 4TB hdd, 64GB RAM

* OpenNebula KVM Node - Xeon Silver ?, 2TB ssd, 128GB RAM + GTX 1070Ti

* Unifi EdgeSwitch ES-48

* Unifi WAP's

Software:

* OPNSense for routing

* OpenNebula for VM's

* Nomad for docker containers

* NetMaker for Wireguard based VPN

Main Apps:

* Home Assistant VM

* Plex (+rtorrent+sonarr+radarr+jackett+ombi) containers

* FusionPBX container for VoIP

* Kasm for remote desktops

* Rundeck container for various infrastructure based automation jobs

* Zabbix + Grafana containers for monitoring

* PacketFence VM for NAC

* Shinobi container for NVR

* Snapcast container for multi-room audio

I also have plenty of containers and VM's for various testing apps, or dev projects.

All of my non-critical containers (eg; Plex) self update daily at early morning hours.

For the critical stuff, I have tried to automate updates as much as possible.

The majority of things can be recreated from ansible, docker compose, or Nomad scripts, all of which are backed up to an offsite Nextcloud instance.

I use a lot of services on Opnsense, but I think one of the most important for me is the Traffic Shaper, allowing for bandwidth control.

I have about 14 VLAN's, and am in the process of setting up VXLAN's for further isolation.

I use restic for encrypted backups, stored in Wasabisys.com (no cost to download, unlike Backblaze).

I will admit there is still one design flaw that I'm yet to spend time overcoming; if everything is powered on at the same time, there is a chance some devices won't get an IP because OpnSense is not yet ready. My current flawless work-around is to boot Opnsense 30 seconds before everything else.

I am having this issue too. It seems it's making a POST request to localhost:8000, looks like their prod is broken.

How long until we start seeing HN headlines like; How I turned my home into a faraday cage to stop all those pesky IoT devices phoning home.

Surely there are people of all different nationalities that share that thought? Seems weird to make it only about Americans.

I can cope with it during the day by keeping my mind active along with background noises, it has really turned me into a workaholic.

I too used to listen to loud music when I was younger, I never noticed it cause issues for me at the time. The original cause was a hit on the head by a falling metal beam - nothing noise related - this caused the occasional distortion of sound but was a minor inconvenience really, it didn't affect my sleep or day-to-day life. After a few years of it like that, I found myself at a music festival which did make it worse. It turned into a high pitched alternating tone which is now there 100% of the time.

Imagine this, you're laying in bed at night, it's quiet outside just as it should be when sleeping, except for the constant ringing of your tinnitus.

You roll over, maybe you cover your ears or put a pillow over them, but the ringing sound doesn't change. In fact you realise nothing you do has any effect on the ringing sound - it's coming from within your head/ears, how do you block out a sound which is emanating from within?

You're tired, you just want to sleep, you have an early business meeting tomorrow, but throughout the perfect silence of the night, this ringing sound is relentless. You know you just need to ignore it and focus on something else, which might be easier if you weren't also trying to clear your mind so you could sleep. So you decide to get back up out of bed and take something, anything, that will knock you out.

Now that you're drugged up you get back into bed, laying there waiting for the drugs to put you to sleep, waiting while listening to that torturous sound, waiting while thinking about how easy it used to be to sleep, thinking about how you'll never know true peace and silence ever again. At some point you fall asleep, only to wake up in the morning feeling like shit from the drugs and lack of sleep.

I would give anything to be able to sleep in peace again.

I've generally considered an SSH tunnel as a poor man's VPN. If you're going to the effort to spinup a machine, and use SSH anyway, i find it much easier to use `ssh [email protected] -D 4444` then I can set my browser's proxy settings to use localhost:4444 as a SOCKS5 proxy. For those apps that don't have native proxy support, I use proxychains to force them over a proxy connection.

Ofcourse this is only useful for a single user, and for devices that can use ssh and proxies.