Oha

I patch as soon as possible and If I were to get pwned id restore a backup and patch again. All my public facing services are sitting in a own, isolated network so an attacker wouldnt get far. If my Hypervisor got compromised id do the same. Id be very fucked if something got into my Proxmox Backup Server tho.

ipv4 exhaustion. Devices are meant to have routable addresses. How would that make routing harder?

Why shouldnt they if you have enough ips? Nat still is an ugly workaround

the entire website looks like it was extruded by claude

Holy fucking slop

Currently running OPNsense on a small Dual-Nic Shuttle PC with an Pentium G4560 and 4 gigs of ram and it’s been handling everything I throw at it perfectly fine. Ive got 16 Interfaces, around 10 Wireguard Peers and a SIT tunnel to HE and Im still getting Line Speeds through the firewall.

Around 5kWh/day.

My Biggest Power drain is my homeserver/hypervisor/nas/whatever (5600G, 64gb ram, 9xHDD) which uses around 3.5kWh.
Wifi is provided by 2x Extreme Networks WS-AP3825i and 2x Ubiquiti UniFi 6 Plus which total to around 660W/h.
My Router is a small dual-nic shuttle pc with a Pentium G4560 drawing like 310W/h
Switching is done by an Aruba 2930F-24G-4SFP+ Switch that consumes 490W/h

I could probably squeeze out a few more watts if I replace the HDD’s with higher density ones and virtualise my router but I really dont feel like doing that right now…

thanks!

Yes, but I should probably also put one up on my other domains

Haven’t noticed it yet because my services are on a different network than my clients

so want to install radarr? Paste this totally not sketchy bash script into your terminal and execute it as root!!

Yea, I host a few (semi-)public services

Every Service is in its own VM and everything thats publicly accessible sits in its own network sepperated from everything else. I do daily backups in case anything goes wrong

You dont need to map ip+port, most selfhosted services let you change their port to the default http port