AnApexBread

joined 1 year ago
[–] AnApexBread@alien.top 1 points 11 months ago (1 children)

So your vote is an external library

[–] AnApexBread@alien.top 1 points 11 months ago (1 children)

I do. I monitor it in a lot of ways.

  1. IDS at the router
  2. Anomoli Detection at the router
  3. Host based agents on everything I can
  4. L7 Firewalls on everything I can
  5. DNS based monitoring for everything

Wireguard and Cloudflare Tunnels make network traffic monitoring difficult because it's all encrypted traffic.

[–] AnApexBread@alien.top 1 points 11 months ago

I don't even let my friends have unrestricted access to my server because I don't want the liability that could come with one of them searching for/downloading illegal content.

Sure I would technically fall under safe harbor laws but I don't want to spend the money on court/lawyer fees to prove that I'm not that one downloading shit.

[–] AnApexBread@alien.top 1 points 1 year ago

Cloudflare will host videos at $5 per 1000 minutes and an extra $1 per 1000 minutes watched per month.

https://www.cloudflare.com/products/cloudflare-stream/

That's the only Cloudflare approved way to do videos and images through the proxy

[–] AnApexBread@alien.top 1 points 1 year ago (4 children)

Google Photos.

I pay $15 a month for unlimited storage.

Photos of my family are of the most important things to me so I'm paying out for guaranteed redundancy.

I still host a local photo storage version but I also backup everything to Google Photos.

[–] AnApexBread@alien.top 1 points 1 year ago

Have you tried using a USB drive bay station with proxmox before?

I'm debating getting a 5 bay station, plugging it into my proxmox and passing the USB through to an OMV VM but I'm not sure if that will work.

[–] AnApexBread@alien.top 1 points 1 year ago

In short cloudflare is both a DNS server and a reverse proxy. When you add a DNS record in there and mark it as proxy cloudflare will publish the DNS record but will instead give its own IP as the destination.

When a visitor enters your URL instead of getting your IP they will be given Cloudflare's IP. The visitor will then send their web request to Cloudflare. Cloudflare will then send that request to your actual IP.

That's the basic version. However, Cloudflare's position as a proxy gives it the ability to inspect and act on traffic as a WAF, blocking traffic that meetings the IDS/IPS rules.

[–] AnApexBread@alien.top 1 points 1 year ago

It all comes down to "what are you trying to do."

Not everyone runs applications, so docker is not the answer to everything.

But if you only have 8Gb of RAM and are trying to run VMs then I'd advise you to go buy more RAM.

[–] AnApexBread@alien.top 1 points 1 year ago

My wife and I each take a lot of random photos and screenshots and things we don't want to share with each other (and we probably don't want to be bothered with each other's random stuff), so we don't want to just do something like turn on Partner Sharing on Google Photos.

You can specify what gets shared with partner sharing. My wife and I have partner sharing set up so that it automatically shares photos of our kids with each other but not anything else.

[–] AnApexBread@alien.top 1 points 1 year ago

AdGuardHome

[–] AnApexBread@alien.top 1 points 1 year ago (1 children)

Cloudflare tunnels being unsafe for exposing your locally hosted services to the web

That's the pout of Cloudflare Tunnels. It's a reverse proxy.

Cloudflare Auth (zero trust) can lock down the tunnel so only certain people can access it.

I want to clarify something though. Cloudflare Tunnels IS SAFE. But if you choose to use it in a not safe way that's not the fault of the tunnel.

It's like putting on a bicycle helmet and then running on the freeway and wondering why your leg gets broken after getting hit by a car.

"but I was wearing my helmet" great, but that wasn't the point of the helmet.

[–] AnApexBread@alien.top 1 points 1 year ago (1 children)

RAM doesn't need to be divisible by 4. You can mix and match sizes of RAM it's just not advisable.

view more: ‹ prev next ›