I use using docker networks but that’s me. They are created for every service and it’s easy to target the gateway. Just make sure DNS is correct for your hostnames.
Lately I’ve been optimizing remote services for reverse proxy passthru. Did you know that it can break streams momentarily and make your proxy work a little harder if your host names don’t match outside and in?
So in other words if you want full passthru of a tcp or udp stream to your server without the proxy breaking it then opening a new stream you would have to make sure the internal network and external network are using the same fqdn for the service you are targeting.
It actually can break passthru via sni if they don’t use the same hostname and cause a slight delay. Kinda matters for things like streaming videos. Especially if you are using a reverse proxy and the service supports quic or http2.
So a reverse proxy entry that simply passes without breaking the stream and resending it might ook like…
Obviously you would need to get the http port working on jellyfin and have ipv6 working with internal DNS in this example.
This would be correct if you are terminating ssl at the proxy and it’s just passing it to http. However, if you can enable SSL on the service it’s possible to take advantage of full passthru if you care about such things.
When I was experimenting with this it didn’t seem like you had to distribute the cert to the service itself. As long as the internal service was an https port. The certificate management was still happening on the proxy.
The trick was more getting the host names right and targeting the proxy for the hostname resolution.
Either way IP addresses are much easier but it is nice to observe a stream being completely passed through. I’m sure it takes a load off the proxy and stabilizes connections.
I have my garuda installation just where and how i want it to be. NixOS just always seemed very interesting, but i don’t want to run it on my daily machine.
Agreed, but I found getting NixOS the way I want it, to be super overwhelming, and documentation simply sucks. I’ve been thinking of forking ZaneyOS (Link: gitlab.com/Zaney/zaneyos) and basing my NixOS config on it. Otherwise, it’s just too much.
I tried it a while back, thought it would be good for my servers, but at the end of the day I found that it was a lot of learning for a very small benefit that could be achieved differently. Instead I focused on learning Ansible which also allowed me to write configs to deploy lots of services to my servers. I still want to learn Nix at some point, but I feel it’s a lot less important if you have an Ansible playbook that does the same thing and even more for any distro you might care to install.
I think the problem is that most people dive right in and go to NixOS which has its quirks as a linux OS (see FHS). The Nix language is great at building and moving source code between computers, really any big collection of binaries. If you don’t do that, try just using the nix-shell command to instantly run a piece of software without installing it. You can write a shell.nix file to hop into and out of an environment with whatever software you need. Once you can write a couple .nix files then move onto NixOS; which after all is just a big collection of binaries.
My drive to nix was so I could simply manage what packages I had installed with a text file. If I removed something from the file, I expect it to be uninstalled. I never found a tool/wrapper for apt to do this.
If you want to start with nixos, I would take whatever distro you are on and install nix and then home manager. Then, you can slowly migrate your user configuration over without starting from scratch. That worked really well for me going from ubuntu to nixos.
I would feel bad for Zayden, except that in an alternate timeline where his father was named Brad, Zayden would have been banned named Hunter. So it could be worse. I would rather be Zayden than Hunter.
Most Hunters I’ve met are pretty cool. Can’t say the same about Drew’s, Brock’s, or Clayton’s, but I feel like those are becoming more uncommon as I get older.
Not gonna lie only game I play on mobile is clash of clans. I don’t play mobile often and don’t spend money on it either. Been playing since middle school though off and on.
If this isn’t a phishing email itself, your email address was probably harvested from a compromised site you used it to sign up with. There are sites where you can check to see if it’s compromised. This is why I started using email aliases when signing up for any site or service. It shows where it was compromised or you’ll find some companies will share it with partners or sell your info sometimes.
Not sure. But Proton, Apple, passmail SimpleLogin (got names mixed up) and some other providers have a way you can create email aliases on the fly that forward to your real address. I think Microsoft does too but it was limited last time I looked at it.
Possible. Disable bitlocker if you have it enabled, create a recovery disc from Windows, pass through your recovery disc and SSD to QEMU, boot from the recovery disc, run automatic startup repair. Ensure you use the correct firmware type in QEMU: If your SSD is GPT then use UEFI. If it is MBR then use BIOS.
I would outlaw starting work before 12pm. I’m 30 and I still absolutely hate mornings just as much as I did when I was 10. I’m naturally a night person but working graveyards has more problems than dealing with early mornings IMO. Let all the morning people feel the pain of having to be productive during your least productive hours for a change.
kbin.life
Active