🇨🇦

  • 12 Posts
  • 691 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle
  • https://en.wikipedia.org/wiki/Network_address_translation#NAT_hairpinning

    TL;DR Your router sees you trying to reach your external address and routes the connection back to your LAN without leaving the network.

    This does still depend on a functional internet connection however, as your client gets your public IP from a public DNS server over the Internet.

    If you were to run a DNS server locally (I use pihole for this), you could have that DNS respond with your local IP, allowing clients within your LAN to resolve the name without needing to reach out to public DNS. This means your local connections will still work when your internet is down; it also provides more privacy by keeping those requests local and can let you make local-only names that aren’t publicly listed.

    Of the ~28 FQDNs in my setup, only 4 are public. The rest is local/vpn only and not publicly listed due the above. The reverse proxy then drops all connections that don’t use one of those recognised names, before even completing the TLS handshake. (So direct connections from someone port scanning my IP or using a domain name someone else has pointed at my IP are completely ignored/dropped without response. The server doesn’t even send the TLS cert so as to not expose the names defined in it.)


  • proof of the kid and parents thing

    Spend some time around todays parents and their young kids. It’s so incredibly common to see small kids (I’m talking 2-8y/o) just completely enticed by a screen, ignoring everything else around them, and screaming their heads off whenever it’s taken away. It’s become a bit of an epidemic, with many many article’s and videos discussing the topic.

    Here’s the first result I got on YouTube: (having just now listened to it while typing this comment, it actually does a descent job explaining the problem) https://youtu.be/QE_E9Q9jVzU Feel free to do further searching yourself…

    It’s not limited to just children either, they’re just the most susceptible.







  • I try to be in the habit of making a full image onto a demonstrably working spare card every couple weeks.

    That’s a whole lot of writing to an sd card, wearing it out. It may fail by the time you want to read it. You also destroy each previous backup by creating a new one.

    Each of my rpis backup to my main server nightly using dd via ssh. The server then keeps historical backups of those .img files via Borg so I can pull any version from any day of the last year or so.





  • I use Emby instead of Plex or Jellyfin; mostly because it has an Xbox client, and I’ve already got a lifetime licence. One of my most active users only watches via Xbox.

    Really don’t like Plexs centralised user system or the overall direction they’ve been headed for years, so I moved away from that long ago (8+ years ago at least). Jellyfin wasn’t up to par at the time (though they’ve made leaps and bounds of progress in that time), and Emby has always supported more types of devices\clients. Their device limit (the client count limit with premeir) has never come into play for me, but I know there are larger user bases out there where that is a problem.

    Embys development is extremely slow though, taking YEARS to implement simple features or even address major concerns. Plus their support sucks without the community stepping in and providing it on behalf of the staff. Luke (the main dev) is better at copy+pasting candid responses than he is at actually interacting with human beings.







  • Darkassassin07@lemmy.caOPtoSelfhosted@lemmy.worldOpenVPN ipv4 troubles.
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 months ago

    To avoid this, you will need an IPv4 address on your client, or an IPv6 address on your server.

    This confuses me because I have an IPv4 address on the client, and that IPv4 is what the server is seeing make the connection…

    /edit

    I think I get it.

    The client actually only has IPv6. The IPv4 address I’m seeing in the log and whatismyipaddress.com is the address of my mobile providers NAT.

    Thanks. I still haven’t totally wrapped my head around IPv6. Stubbornly happy with IPv4 tbh, but it seems the rest of the world is moving on, understandably.