Redjard

You put an account id/token into dns, which allows machines to renew the cert under that account with just the account credentials (key).
So after setting it up, the token stays the same forever and you don’t need to touch dns.

Such tokens are already used by acme clients when they renew their certs. It’s also how acme providers can detect expiring certificates for example.

I find it a bit weird, since the whole deal of shortening lifetimes was in part to protect against stolen certificates, and now by stealing the account key you are again stealing the ability to indefinitely make certificates.

At least you can “revoke” such access by switching the account and updating the dns record authorizing it.

even a very similar logo …

Oh true. And some gap between the disks? Or is it sufficient as is?

Hows the hdd cooling situation?

A second nas. Both my nas’ have raid. They also have revisions, and one is off except for when running backups.
A lot of stuff has a third copy on the server I run stuff on.
I may some day take your approach and make the backup nas smaller, then exclude media I have in torrents. Though restoring 10 TB over i2p may take a literal year in case of failure.

PS: the backup raid is btrfs raid :)

Yeah, it’s actually a great setup. I’d hope to achieve the same one day by moving all my media to torrents/making torrents, but my personal data alone is still hundreds of GB. I have no idea how you did it.
My music is 3 of GB, and that is just my core playlists often in bad (youtube) bitrate. 13GB for music videos.
My jellyfin db itself is like a GB.
I still have to make lower-res versions of my scanned documents, but I doubt that’ll ever leave the GB, or even tens of GBs (yay bureaucracy).

There’s people that have 200TB Nas’, and people talking about the 10€/month/5TB Hetzner tier. And then there’s op backing up 1GB across 5 cloud provider’s free tiers.

What you got in there? Your light novel library?

op on their recent shopping trip