• 0 Posts
  • 279 Comments
Joined 3 years ago
cake
Cake day: July 8th, 2023

help-circle



  • Assuming you mean commericial grade hauler trucks and such, I absolutely agree with all your points.

    Oh yes, I mean commercial hauler trucks, etc. The ones that do their job well of course. Of course theres other types of trucks for maintenece, last mile deliveries, etc.

    (Side note, europe has nice delivery vans)

    Definitely not the things the average american has started calling a “truck”, which has 5mpg and is used solely for one person to go to and from an office job, etc, never hauling anything.

    And plus 1 for bikes, idk about motorbikes though, sadly they seem like death traps because of how fast you can go, one mistake by you or someone else on the road and you could see black.





  • Not to mention how apparently 2.5 and 5ghz bands suffer on the Flint 3 just to get Wifi 7.

    Hope no one’s buying them (though I imagine a lot of people see 3 > 2 and blindly trust it’s better in all cases).

    Flint 3 probably would’ve been better as a different product line. As it currently stands, It seems a bit misleading to attach it to the Flint 2 when so much is different at its core.






  • Maybe easier to setup because routers that support vpns come with nice-ish web uis.

    That said, if you have a server (pc, pi, etc), setting up wireguard with wg-easy is mostly painless (comes with a nice web ui), so there is no reason to replace your router in this case!

    Instead of replacing a router, I’d prefer buying a pi anyways.

    Unless you want to route all outbound traffic through a vpn with zero config on devices, I can’t see why you’d replace a router.

    Final note: most people prefer hosting a vpn on a server, even if their router supports it as far as I’m aware at least (edit: this might be erong judging from the rest of the comments saying they use their router).



  • Sounds weird they are mixing work and pleasure on the same machine, but anyways +1 for dual boot.

    VMs haven’t been a great experience for me if you need to get real work done.

    I’ve been dual booting on one drive for years, never experienced any issues. Heard doing it on separate drives is even better though.

    Probably extra points if your linux partitions are encrypted.





  • No problemo.

    Thanks for pointing out the reverse proxy comment. I think I was wrong to say simply putting jellyfin behind a reverse proxy will increase your security.

    The benefits may only be minute or non-existent if you don’t use the reverse proxy for handling other stuff like HTTPS (and redirects to https, etc), restricting access or adding extra authentication requirements (mainly https).

    It may also be good to note that Jellyfins docs explicitly do not recommend directly exposing jellyfin ports to the internet (a reverse proxy or using a vpn are recommended instead).

    Still I will continue to feel safer always using a reverse proxy when I expose to the internet (maybe my misconceptions).


  • Your SSH setup is good.

    ssh is a very resilient piece of software so I doubt with your setup you would encounter any issues.

    Enforcing use of a VPN to get into your network before being able to ssh into a machine is mostly just an extra layer of defense, though using a non-standard port, only allowing key logins and disabling root user login are all layers of defense you have already added.

    I thinj you’ll be fine, but if you are worried, you could setup a VPN or alternatively something like Fail2Ban if you notice any brute-force attacks (which may be unlikely with the use of a non-standard port).

    What I meant with the Jellyfin question was kind of, how is having it exposed via a reverse proxy different from exposing its port right away? Is it because the only allowed connection would be HTTPS/encrypted etc, maybe?

    It’s down to how secure the software is really.

    Jellyfins (and other software) don’t use really secure web servers for getting themselves accessible via the network.

    Caddy (a reverse proxy, for example) is made to be exposed to the internet and so it is more resilient and safe to use.

    So putting the resilient software (a good reverse proxy) infront of Jellyfin (or most other software) simply increases your security by having the more safe web server be the one interfacing with end users.

    Have fun on your journey!