I have the glowrhino prybar on my keychain for 4 years now.

It’s actually one of the more useful thing I’ve kept on my body.

RouterOS has WG built in as well as ZeroTier. RouterOS has become quite powerful lately, but make sure you have at least an ARM/ARM64 CPU for it.

All of my remote routers are running RouterOS without anything on top of it. RouterOS is powerful enough for anything I throw on it. But I am using much beefier routers, I have 2 x 5009 and a HAP AX3 which have plenty of flash and ram ro run the additional packages I need.

As for normal computers, I have it on a UPS and I backup core files to off-site areas. Additionally, I buy SSDs that have a little bit of powerloss protection.

I’ve never had issues with mini PCs but I’ve had issues with PIs. I’ve since switched to high endurance SD cards for my Pis and they’ve been rock solid. One’s actually semi exposed to the elements for about a year now without a hiccup.

With RouterOS you can still use DoH with either a self hosted list or a selected ad list. If you want to selfhost a DNS server I’d just host a Adguard Home instance on a VPS for all of your devices.

I also have 2 VPN system for my remote management on 2 separate systems. I learned that the hard way when one of my clients is 8 timezones away.

IMHO if it supports VIA or QMK they earn a win for me.

We’re all burning just one of us is burning a little faster.

I hope that European consumer boycotts work. It won’t be easy but I hope it creates the waves needed for our corporate overlords to start paying off politicians to allow better relationships between the EU and USA. But one can only hope.

My ISP blocks all outgoing ports. Maybe I’m not trying hard enough but anything I try port forwarding ends up getting blocked.

Minecraft and port 80 are the 2 I’ve tried and they’ve been unresponsive

A lot are moving through software defined networking which runs at RAM speeds.

But typically responsiveness is quite important in a virtualized environment.

InfiniBand could run theoretically at 2400gbps which is 300GB/s.

I’m using the rb5009 but im using RouterOS not openwrt. Any reason why you’d want to do that?

I personally think if you’re buying a purpose built hardware and then putting your own software on it, you should move to a mini computer with OpnSense.

I’m switching my immich instance to an SSD one and switching my VPN from zerotier to tailscale.

Hopefully that means my Immich will be a little more reactive.

No with the latest ISO from windows 24H2 I believe

You can still skip it with MicroWin and also Rufus. I’ve tested it just recently.

They’re made in China unfortunately.

Strangely enough I’ve had the opposite.

My pcie 4.0x4 drive was giving me about 200MB/s on windows and when I plugged it into a Linux machine, full drive speed.

Not flashdrive cheap, but I just use cheap 256gb sata M.2 drives and a tool less enclosure.

Runs at sata speeds and are cheap. Plus the enclosure supports NVMe so I could run around with a 8TB stick.

Don’t password managers verify the domain name before offering credentials?

Does that mean he doesn’t use a password manager?

Edit: RIP, now that’s a proper phishing. I understand where he’s coming from

I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don’t want her to keep asking me how do I turn on the VPN? If it’s just me, then no issue, I’ll use a VPN.

It’s hard to explain from scratch.

Caddy is a reverse proxy software that essentially redirects traffic from a certain port to another port. For example external:port => internal:port. It also enables SSL encryption meaning everything will be encrypted en route between the external and the user.

VPS is a virtual private server. Just someone else’s computer you can expose to the Internet.

Tailscale is a mesh VPN that uses wire guard as its transport. I use this to tunnel between my VPS and my Immich server to hide my home IP and to allow encrypted traffic between my Immich server and my VPS.

A zero-day (also known as a 0-day) is a vulnerability in software or hardware that is typically unknown to the vendor and for which no patch or other fix is available. The vendor thus has zero days to prepare a patch, as the vulnerability has already been described or exploited.

There’s no fix other than security through layers.

Pretty much I have caddy on a VPS that’s pointing to my internal IP using a tailscale tunnel. You are still exposing the web gui to the Internet so I just changed authentication to OAuth to mitigate since risk. There is still a possibility of attacks via zero days, but my immich is on a VM and I’m creating firewall rules to just allow certain ports out.