I see a lot of guides on setting up DoH (DNS over HTTPS) using things like cloudflared, but not many concrete ones on DoT (DNS over TLS).

Does anyone have any guides they'd recommend?

I am getting used to Ubiquiti, and recently added a VPN Client to cover one of my VLANs. Am I correct in my understanding that having no Fallback option is essentiall a Kill switch that will not allow traffic to pass outside of the VPN in the event it goes down?

Pic

I recently started playing with UDM after having been in PFSense for the last few years. In PFSense, I had a pretty organized rule set for each VLAN, and it was pretty easy to read and follow compared to the single list for rules in UDM (though it makes up for it in other areas).

I'm trying to recreate some of my original rules and flows, but wanted to get another pair of eyes on them to be sure I am using "LAN In" and "LAN Out" correctly (especially on the rules where I try to only allow necessary devices/ ports out to WAN).

Rules

Just joined the club and got my first piece of ubiquiti gear! I spent some time doing the initial configuration and adding my VLANs, static IPs, however I ran into a bit of an issue that I'm sure is a quick fix.

By default the UDM Pro is on 192.168.1.1, and that's fine. I actually use the 192.168.1.0/24 as a management VLAN for networking devices that other VLANs don't need access to.

The problem I'm running into is that this default space that the UDM Pro is on does not have an option for a VLAN tag. I can change the IP of the default network to be something else like 192.168.100.0/24, and make a management VLAN on 192.168.1.0/24, but then the UDM Pro will grab a 192.168.100.0/24 address (since it is on the default network).

How, after doing this, can I set the UDM Pro to be on this new management VLAN and not the default?

I've been using PFSense for years, and it's been pretty great, but I also have some friends who are homelabbers that like their Unifi setups.

What do you guys prefer, and why?

I've been running Valetudo on my Roborock S5 for some time with no issues. Recently I decided to change the voice pack, so I used the option in the Valetudo GUI, however noticed that most of the packs advertised for the S5 just do not upload. The ones that do don't seem to have full coverage, and leave a lot of the default voice lines (Chinese) in tact.

These packs from dontvacuum.me and this GlaDOS voice pack do not upload at all, and when I check the logs in Valetudo there's just a generic error that provides no real detail.

These packs will upload, but do not provide full coverage, and most are not English.

Does anyone know how to get these logs to work via the GUI? I don't have SSH access to my vacuum anymore and I don't feel like going through the initial steps again if I don't have to.

Some friends of mine have a Google map going where they pin locations of interest (restaurants, etc).

I was wondering if anyone knew of a non-Google project that might allow for something similar? The goal would be to have a shareable map that a group of invited/ allowed users could add locations and possibly notes to.

My employer recently switched to Fidelity and for now I've chosen the LIFEPATH IDX 2050 A option. It looks like this one provides quarterly dividends, but the yield is 0.0%(?)

I'm looking for some fairly risk adverse options or blends that provide dividends that will be reinvested. Anyone have any recommendations?

I am hosting a couple of services (Matrix chat server and a game server). I know NAT's job is to translate external requests into internal addresses, so that the traffic can hit the WAN and ultimately make it to the internal service which is expected to handle the traffic, however I'm wondering if my setup is correct.

Everything is working as expected, but I'm just wondering how the traffic knows which service to go to. If an outside requests comes in, is it just the destination port that is used to route to the correct internal IP? Do I need to do something else here for best practices?

I've been wanting to get a privacy screen protector so that you can't see it from the sides, but all the ones I've tried have this 'oily' type of look to it. Maybe this is inherent to the technology, but does anyone know of any that do not have this oily appearance, especially on white screens?

My office/ lab at home uses around 600W when fully running, and I see that there are quite a few power stations that will comfortably handle that, and foldable 4 panel setups that can generate 300-400W.

Would there be any issues plugging a UPS (my lab has a few of them) into a solar power station such as this?

Is there some sort of feature I want to look for such as sin wave, etc to have this work reliably, or does a UPS not really care since the controller in the power station should be normalizing voltage, etc?

What are your thoughts on filen? I don't seem to be able to find a community for them here, but it seems like a pretty solid up and coming company for secure cloud storage options.