brownmustardminion
@brownmustardminion@lemmy.ml
- Comment on Split Tunnel by Domain on Router Level? 4 weeks ago:
Your first suggestion is a clever one.
I can imagine writing a small script on the host machine to listen for subdomains, forward them to pfsense to update the aliases, and possibly set them to expire after a few days for security reasons.
Surely something like this exists. How to find it…?
- Comment on Split Tunnel by Domain on Router Level? 4 weeks ago:
There’s a few apps I need to split out. Top priority is the signiant app which according to their documentation requires various AWS subdomains as well as their own. Specific subdomains are not specified and are implied to change regularly/on demand.
In an ideal world I would do my split tunneling on the device itself, but I don’t trust Windows and thus I run my VPN at the router level.
This isn’t a problem for most things, but I need to utilize my full bandwidth to transfer large files to clients in a timely manner, and a VPN becomes a massive bottleneck.
Pfsense lets you alias by domain name (I believe it regularly resolves down to an IP and uses that for filtering), but again, you need to supply the exact subdomain.
Just wondering if there’s an alternative solution to this issue. If it’s external to pfsense that’s not the end of the world.
Worst case scenario, I would set up a dedicated Linux box or maybe even a VM which could share access to the file transfer NAS and split tunnel the entire box around the VPN. Definitely less convenient.
- Submitted 4 weeks ago to selfhosted@lemmy.world | 7 comments
- Comment on Selhosted Spotify Alternative for Closed Social Network? 5 weeks ago:
This looks promising. I’m going to investigate further. Thanks!
- Submitted 5 weeks ago to selfhosted@lemmy.world | 13 comments
- Comment on Cloudflare Tunnel Alternatives 5 months ago:
Yes, it will count towards your bandwidth.
I typically don’t get anywhere close to this though.
The few times I did were due to initiating large backups between devices, upwards of 2TB. But I’ve since moved my backup system to a mesh network and haven’t hit bandwidth overages since.
- Comment on Cloudflare Tunnel Alternatives 5 months ago:
I recommend it every time this question pops up and I’m surprised more people aren’t privy to it:
Rent a VPS as your public gateway. Connect the VPS to your server with a simple wireguard tunnel.
The only thing on the VPS should be a reverse proxy with SSL/TLS pass through.
Send the traffic at the VPS reverse proxy to a reverse proxy on the main server. Configure this proxy to use letsencrypt certs.
The benefit and importance of the SSL pass through reverse proxy, is that it allows all data in transit to remain encrypted until it reaches your physical server. Traditionally, most would suggest the one and only reverse proxy exist on the VPS but all traffic would then be decrypted on the VPS. This could obviously compromise your traffic if the VPS provider snoops or your VPS is compromised.
Cloudflare tunnels decrypt on their hardware as well, which is why I always recommend avoiding their services.
- Comment on Backblaze responds to claims of “sham accounting,” customer backups at risk - Ars Technica 5 months ago:
Backblaze deleted my project drive for a multimillion dollar project I was archiving through their desktop sync. It’s largely my fault for not noticing the drive had failed when considering their upfront policy about them deleting your backups after a month of inactivity. Luckily it didn’t have too big of an impact because the most important files were backed up elsewhere. I do wish their desktop app had better warnings about imminent deletions though.
- Comment on HDD Data Recovery Options? 7 months ago:
This is encouraging. Thank you.
- Submitted 7 months ago to selfhosted@lemmy.world | 6 comments
- Comment on Which reverse proxy do you use/recommend? 8 months ago:
I use nginx for static websites and TLS passthrough servers.
I use traefik as a reverse proxy for sites with many services and SSO.
Nginx is definitely easier to configure for simple things. But I prefer traefik for more complex setups.