TheHolm

TheHolm , 3 months ago to selfhosted in Running a OPNsense firewall in a VM?

Open source projects need to make money somehow. I found VyOS method quite acceptable. They giving good instruction and tools to build your own stable ISO. So do not be lazy or contribute somehow. Unfortunately their paid support costs too much. I was considering trying to push VyOS to be used as virtual router at my work, but it costs more than Cisco C8000v

TheHolm , 3 months ago to selfhosted in Running a OPNsense firewall in a VM?

Try VyOS. I run it on APU2 myself. No GUI no convolution.

TheHolm , 3 months ago to selfhosted in Self-hosted VoIP?

Very strange line from specs.
USB Driver Windows XP/7/8/10/11, Linux (driver free on Raspberry Pi Raspbian system)
Does it mean binary blob driver only? and you need to pay for it to use it on PC?

TheHolm , 3 months ago to selfhosted in Selfhost wiki (personal)

If you still use HTTP for cert verification on ACME, you are doing it wrong. Use DNS-01 only, there is no need to allow any inbound traffic to your servers. and HTTP will not give you wildcard anyway.

TheHolm , 4 months ago to selfhosted in Selfhost wiki (personal)

using wildcards is really bad security practice. and at age of ACME absolutely unnecessary.

TheHolm , 4 months ago to selfhosted in Let's talk about free/FOSS routing platforms for the homelab

No HA. Classic HA is evil, shared control plane is good way to loose both FWs. Need redundancy use 2 independent FW + routing protocols. Losing session states during fail-over is not a big problem these days. I did in-place upgrades, but I’m running LTS and not yet done any major version upgrades. So far no problems.

TheHolm , 4 months ago to selfhosted in Let's talk about free/FOSS routing platforms for the homelab

Sorry, what do yo want to know? IT just a linux based router pretended to be a juniper FW. NAT/IPv6/PPPoE/VRFs are working as expected.

TheHolm , 4 months ago to selfhosted in External email server vs port forwarding/vpn

Can you promise a near 100% uptime? Otherwise, some email might not reach you. Just lol. Mail get queued just fine by everyone. If you really concern , setup second MX.

TheHolm , 4 months ago to selfhosted in Let's talk about free/FOSS routing platforms for the homelab

VyOS: Debian based router + firewall. Linux makes it easier for people to pick up the CLI but I’ve heard complaints about it being difficult to follow. Currently CLI only, at least without third-party solutions, but is powerful and competes directly with OPNsense for features for the most part. Seems to be just as stable. my mistake, FOSS version is not LTS but a rolling release and needs to be compiled.

Very misleading statement. Both rolling and LTS are FOSS, they just do not provide LTS binaries for free. Want LTS? build it yourself , all tools and guides(bit outdated) is out there. It will took 30 min you your time to setup.

TheHolm , 4 months ago to selfhosted in Let's talk about free/FOSS routing platforms for the homelab

Stable is not “pay only” . Just build it yourself, all tools are available. it will take 30 minutes of your time if you have docker environment ready.

TheHolm , 4 months ago to selfhosted in Jellyfin on FreeBSD

Are you running it natively as “jail” ?

TheHolm , 4 months ago to selfhosted in Broadcom yanks ESXi Free version, effective immediately

All of them not equate in same league. Do you know any type 1 free supervises out there? Xen probably.

TheHolm , 4 months ago to selfhosted in virtualizing PFSense. What else works besides ESXi for virtual networking?

Nothing can beat bhyve for PFSence.

TheHolm , 5 months ago to selfhosted in External email server vs port forwarding/vpn

I do not understand why everyone calling hosting email difficult? IT is like 5 RFC you need to read and implement. Sofware wise you will need mail agent, something for DKIM ( if it not build in in agent), “local delivery agent” ( probably presenting it as IMAP) + mail reader of your choice. Nothing too complex

TheHolm , 5 months ago to selfhosted in External email server vs port forwarding/vpn

Do not try to host outbound mail on residential IP blocks, delivery will be really bad. Cheap VPS is same story. You best bet is VPS from some not well know provider, they may be avoid to be in blacklist in M$ and Google. Inbound mail is fine anywhere as so long as you can have port 25 open. DDNS works too.