CorrectAlias

Yes, because an attacker already in your network will be able to decrypt non SSL traffic.

I even have my unRAID endpoints using https. You can do self signed, or you can use something like let’s encrypt to do it for you. I use wildcard certs as any signed certs with the full subdomain can expose what services I host internally (since signed certificate provisioning is, by design, a public process).

I have a rather large array of refurbished 14TB WD HC530 drives and most are still going strong. Ive lost a couple over the last 3-4 years, but the fast majority are still going strong.

Since these are goHardDrive, I’m guessing they’re most likely Seagate or the white label Seagates (I think they’re called MD drives)? I have had terrible experience with Seagate, even when new. I pretty much exclusively buy WD or Toshiba because of that.

🥲 I should have thought about dusting the game off to participate.

I already use Plezy for the player anyway, but private equity will continue to ruin more than just the player.

I user caddy-cloudflare with *.caddy files which allows me to get a signed wildcard cert for my internal subdomains. I did it for this exact reason, I didn’t want to leak my internal subdomains.

If you’re going this route, you may want to pay attention to the switchover time. For most consumer hardware, it can handle 10-20ms of switchover time. However, enterprise grade stuff is more sensitive to power fluctuations and sometimes needs near instantaneous switchover. It can get very expensive if you want LiFePo4 (like many of these portable stations) while also being “on line” (meaning instant switchover).

There are middle ground options which have switchover timing of 5-8ms that are also LiFePo4. LiFePo4 is great because the chemistry doesn’t have a huge fire risk and it can do more cycles than a lead acid battery.

Anyway, my bad for rambling.

Nice, going to be great to get away from Slackware. I’m glad they’re finally implementing native docker compose as well. I do wish they’d offer rootless containers, maybe that’s coming down the pipe since Fedora supports them?