t҉̠̙ǵ̣̞̄ͪ͜x̸̱͚̳ͫ͐̑̈ͯͣ̚n̒͌҉͉̦̜̝ͅ

LMAO they really are inept 🤦‍♂️

I’ve moved a couple of domains to dnssec and it’s great, simple DNS.

Yeah the whole app is really responsive, works great on minimal resources. Excellent for sharing hikes and trails!

Have you seen owntracks? They have client apps too.

Same! Two zpools on one Debian VM, shares NFS etc for everything else. I pass through PCIe sata cards to the VM, too.

Still does nothing when scanning the entire ipv4 address space achievable so quickly. You can also use services like shodan to find vulnerable services on any ports.

Use SSH keys, stay upgraded. Make management services (SSH, RDP, admin services) accessible only via VPN (WireGuard). Only expose 80 and 443 to the internet, if necessary.

Never heard of DeSEC before, but it looks damn cool! Been looking to get away from CloudFlare.

That’s just how they work. They terminate SSL, and then connect to your source server as a client, this gives them access to read anything submitted to your or any other sites they manage in the clear.

Yep, Immich is tha bomb! Able to completely clear out google photos!

Interesting setup, mines very similar. Except with ZFS and no DMZ 😅 I’m thinking of setting up vlans for automation too, how do you handle updates and software downloads on that lan?

Ahh this sounds awesome! Would be nice to put a bunch of MP3s in a folder and be able stream them!

I run my own instance because the content on it will always be very snappy, since it mirrors the text content that I’m subscribed to. It’s distributed like email or RSS are, in that you choose to subscribe to something, and then it is federated onto your instance when new activity occurs.

Yeah it takes maybe a day and then it’s solid!

Yeah it takes maybe a day and then it’s solid!

Haha, mines gone up just a bit too since running Lemmy :D