
oha
@oha@lemmy.pobierz.net
- Comment on For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing? 1 week ago:
Recently removed the A record from a few semi-public services that got hammered by AI crawlers, works like a charm
- Comment on For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing? 1 week ago:
I patch as soon as possible and If I were to get pwned id restore a backup and patch again. All my public facing services are sitting in a own, isolated network so an attacker wouldnt get far.
- Comment on 'My own piece of the Internet: Part 1', a blog post discussing the process of getting an ARIN ASN and a /24 IPv4 block for their home setup 1 week ago:
ipv4 exhaustion. Devices are meant to have routable addresses. How would that make routing harder?
- Comment on 'My own piece of the Internet: Part 1', a blog post discussing the process of getting an ARIN ASN and a /24 IPv4 block for their home setup 1 week ago:
Why shouldnt they if you have enough ips? Nat still is an ugly workaround
- Comment on Can you please tell me all about your DIY router? 2 weeks ago:
Currently running OPNsense on a small Dual-Nic Shuttle PC with an Pentium G4560 and 4 gigs of ram and it’s been handling everything I throw at it perfectly fine. Ive got 16 Interfaces, around 10 Wireguard Peers and a SIT tunnel to HE and Im still getting Line Speeds through the firewall.
- Comment on What is your self hosted power draw? 2 weeks ago:
Around 5kWh/day.
Image
My Biggest Power drain is my homeserver/hypervisor/nas/whatever (5600G, 64gb ram, 9xHDD) which uses around 3.5kWh.
Wifi is provided by 2x Extreme Networks WS-AP3825i and 2x Ubiquiti UniFi 6 Plus which total to around 660W/h.
My Router is a small dual-nic shuttle pc with a Pentium G4560 drawing like 310W/h
Switching is done by an Aruba 2930F-24G-4SFP+ Switch that consumes 490W/hI could probably squeeze out a few more watts if I replace the HDD’s with higher density ones and virtualise my router but I really dont feel like doing that right now…
- Comment on How is everyone dealing with Android 17's "Nearby Devices" change? 5 weeks ago:
Haven’t noticed it yet because my services are on a different network than my clients
- Comment on Why use Proxmox over Podman or Docker? 5 weeks ago:
so want to install radarr? Paste this totally not sketchy bash script into your terminal and execute it as root!!
- Comment on How "secure" is your setup? 1 month ago:
Yea, I host a few (semi-)public services
- Comment on How "secure" is your setup? 1 month ago:
Every Service is in its own VM and everything thats publicly accessible sits in its own network sepperated from everything else. I do daily backups in case anything goes wrong
- Comment on OPNSense Reverse Proxies and Giving Internal Services Domain Names? 2 months ago:
You dont need to map ip+port, most selfhosted services let you change their port to the default http port