Easy enough, sounds like a plan!
Nice, glad you're having fun with it.
Exposing things to the internet is a lot of fun, just keep in mind that there are bots out there just itching to break into your stuff. Use strong passwords. Use different passwords for every. single. website.
Tailscale is often recommended because it's very secure. You don't need to pay for your own domain name, either as far as I know.
For things that I expose to the internet (the Lemmy instance that I'm writing this from, for example) I like having a domain name. Especially when sharing it with friends since it's what people are used to.
If you're interested in going that route, each "thing" that you host gets its own sub domain. For example if the domain name you buy is called "kgrnd.com", and you're hosting a minecraft server -- you might call it "minecraft.kgrnd.com". Jellyfin might be jellyfin.kgrnd.com.
Starting from outside, sitting in a park bench looking at your phone -- the steps that internet traffic goes through to reach your server is like this:
- phone or device
- internet connection
- your domain registrar, which tells it where to send the traffic (to your house/server) using DNS records
- your router (hopefully something relatively decent and up to date for security)
- your reverse proxy, which your router is programed to send HTTPS traffic to (port forward 80 and 443 to your server)
- the minecraft server, be it in Docker or whatever.
- then back again all the way to your phone
A reverse proxy just decides "ok, here's some traffic from minecraft.kgrnd.com, and I've been told that minecraft.kgrnd.com over on 192.168.2.32, port 25565.
Do not tell your router to forward traffic on port 25565. That is not secure. The only ports that you open (forward) on your router firewall are 80 and 443, and those both point to the IP address of your reverse proxy.
Reverse proxy's come in various flavors. A lot of people like Caddy. I like Nginx Proxy Manager (NPM). Both handle SSL certificates for you which is very very nice.
The last problem to solve is the fact that your home IP address changes from time to time. This is pretty standard practice with non-business accounts. That's where a dynamic DNS service comes into play. My router has a built in service to handle it, so when I set up my domain name DNS records to point to "my house", I don't tell it my IP address because that's subject to change. Instead I give it what's called a CNAME record which points to a web address that my router has provided me. If your router doesn't have a feature like that, you'll have to explore other options for handling dynamic IP addresses.
Once you have something up and running, you have to do 2 things --
- At your domain registrar, add a CNAME record that points to your dynamic DNS address (however you're handling that). Alternately, add an A record pointing straight at your IP address. This will break eventually when your IP address changes.
- At your reverse proxy, add an entry telling it "when you see traffic coming from service.kgrnd.com, send it to the IP address of my server and port XXXXX.
Another thing that I like to do, which is a bit more advanced but in the end makes things simpler and more secure:
- If using Docker, set up your reverse proxy to run on a Docker network called "nginx" for example.
- Ever Docker container that you set up which you want to expose to the internet via Nginx Proxy Manager, manually assign it to the same network (otherwise Docker by default gives each thing its own network).
This is nice because you don't have to tell docker to forward any ports. Whatever the default port is for the service your running, nginx can access it no problem because they're on the same Docker network. For example if your Minecraft docker container is called "minecraft-minecraft-1" and has stuff on port 25565, you don't need to know the IP address of Minecraft. In the NPM entry, you just point minecraft.kgrnd.com to minecraft-minecraft-1 and port 25565. Done. No exposing external ports to the docker container. Pretty cool.
Barrister & Mann - Promises
Citrus and exhaust smoke in the Omnibus base.
Infused with notes of orange, bergamot, real honey, whiskey lactone, peat, and nutmeg, this fragrance encapsulates the spirit of Northeastern winter adventures, further heightened by the incorporation of high-grade saffron molecules, lending an industrial yet nostalgic character reminiscent of idling sleds.
- Sure. Having more drives is typically done for reliability reasons and they're set up in some sort of redundant file system like ZFS, BTRFS, or RAID. Having only one drive means when it fails (and it will) you'll have some downtime while you replace the drive and restore backups.
- Proxmox is great, and I recommend it. Proxmox gives you two important things: 1) A nice way to manage storage (this may not be applicable to you with just one drive, but if you decide to add more later you can explore the options 2) BACKUPS! You're going to have lots of docker containers and stuff. Restoring docker containers on bare metal is tedious, because you're dealing with all of the folders that you've set up as volumes, all of the compose files, etc. With proxmox, you run Debian in a virtual machine and have all of the Docker stuff in the VM. Your backup will be the entire VM, so restoring it is very simple.
- I don't have a good answer for this.
- The best choice is whatever works best for you. Sort of a cop out answer, sorry. A lot of people like Tailscale (Headscale is another option), but the downside is you have to set it up on ever device you want to access stuff from. A reverse proxy like Nginx Proxy Manager or Caddy lets you use your own domain. They handle renewing certificates and everything in the background. It requires opening (forwarding) ports 80 and 443 on your router/firewall. Some see this as a security downside, but if everything is done using HTTPS then in theory it's very safe.
- I don't have a good answer for this.
Vanilla nginx is still too far over my head, but Nginx Proxy Manager makes easy work of it.
A lot of people like Caddy but I've never tried it. The config files are much simpler and it auto-renews certificates (but so does Nginx Proxy Manager).
Just need your address...
Lots of allergens are popping where I live. Grass and ragweed are ramping up to max output.
Top to bottom.
I enjoyed my quick visit to that place.
Nice, yeah I've tested with my acount and it's definitely a language thing. I actually found out how to enable it on everyone's accounts using a database command, so problem solved for everybody.
~~Everyone check your language settings and make sure "English" is selected. I think "Undetermined" should also be selected, and the only way to select both is by holding "ctrl" and selecting them. ~~
Edit: I've been helped by some pros and enabled English for all users via a database command (and somehow didn't nuke everything while doing it!)
I tried inserting a blade backwards into my Flying Wing, and it fits great! The tabs just need to be lined up manually.
This way I can just put it in my bag and not have to think about the blade -- especially useful for the trip home after the blade has been unwrapped.
This can only be accomplished with the cardboard wrapper removed, so it's yet to be seen if there's any metal-on-metal contact with the edge enough to alter the shave. I'll find out tomorrow!
14
[Official Announcement] This instance will be closing, and all user data will be sold to the highest bidder.
(sub.wetshaving.social)
This instance has been in business for over 2 years, and the administration has decided to cash in and sell all user data to the highest bidder.
Myself (@walden@sub.wetshaving.social), @djundjila@sub.wetshaving.social , and @merikus@sub.wetshaving.social (our founding father and visionary) all thank you for providing us with your data over the years. By the time we split the proceeds 3 ways, we envision starting a rocket company, and electric car company, and running for President of the Fediverse.
There are other active wetshaving communities in the fediverse, so we urge you to take your pick.
https://lemmyverse.net/communities?query=wetshaving&order=active_month
So long!
I got a new razor in the mail today, the RazoRock GOAT. GOAT is meant to stand for "Greatest Of All Time", and it's a copy of the Merkur 34 series. The ad copy says it's a copy of the "German 34" which is an old design with an expired patent. I was wondering how closely it would match the 34C, and it's almost exact!
There are differences, of course. It's a 3-piece razor, so you can use whichever handle you like (as long as it has standard M5 threads). The razor is wider in order to cover the blade tabs (which it does completely). The 34C has a small amount of blade tab exposed.
I did a 1 pass shave with the GOAT just to see how it felt, and my initial impression is that it's very very close to the 34C. I love mild yet efficient razors like the 34C, so I'm excited to have a durable, stainless steel version.
I know I didn't get it from all angles, but it's pretty much an exact copy where it counts.
The picture below might make it look like they're slightly different size, but since the 34C is a 2 piece I had to leave the handle on, so any difference is due to the slight height difference. The width of the baseplates is the same.
The GOAT is a 3 piece razor, so the baseplate is not attached to the handle. The included (optional) handle is longer, but not too long. I like both handles just fine.
view more: next ›
Great!