I patch as soon as possible and If I were to get pwned id restore a backup and patch again. All my public facing services are sitting in a own, isolated network so an attacker wouldnt get far. If my Hypervisor got compromised id do the same. Id be very fucked if something got into my Proxmox Backup Server tho.
ipv4 exhaustion. Devices are meant to have routable addresses. How would that make routing harder?
Why shouldnt they if you have enough ips? Nat still is an ugly workaround
the entire website looks like it was extruded by claude
Currently running OPNsense on a small Dual-Nic Shuttle PC with an Pentium G4560 and 4 gigs of ram and it’s been handling everything I throw at it perfectly fine. Ive got 16 Interfaces, around 10 Wireguard Peers and a SIT tunnel to HE and Im still getting Line Speeds through the firewall.
That should be all of Facebook/Meta
Around 5kWh/day.
My Biggest Power drain is my homeserver/hypervisor/nas/whatever (5600G, 64gb ram, 9xHDD) which uses around 3.5kWh.
Wifi is provided by 2x Extreme Networks WS-AP3825i and 2x Ubiquiti UniFi 6 Plus which total to around 660W/h.
My Router is a small dual-nic shuttle pc with a Pentium G4560 drawing like 310W/h
Switching is done by an Aruba 2930F-24G-4SFP+ Switch that consumes 490W/h
I could probably squeeze out a few more watts if I replace the HDD’s with higher density ones and virtualise my router but I really dont feel like doing that right now…
Yes, but I should probably also put one up on my other domains
Thank you for creating season appropriate Content!
Haven’t noticed it yet because my services are on a different network than my clients
so want to install radarr? Paste this totally not sketchy bash script into your terminal and execute it as root!!
that gum you like is going to come back in style!
Yea, I host a few (semi-)public services
Every Service is in its own VM and everything thats publicly accessible sits in its own network sepperated from everything else. I do daily backups in case anything goes wrong
Wheres the fighter jet you’ve promised me??
Maybe its just me but I wouldnt want to rely on an OS that has been EOL since 2024
Recently removed the A record from a few semi-public services that got hammered by AI crawlers, works like a charm