plateee

Would you make someone you love a home server?

No. Especially no for a non-technical, remote person.

Troubleshooting my lab in the basement is hard enough without having to try some weird screen share app, or telling the person, “press the blinky light button. NO NOT THAT ONE”.

If you want to share the joys of a home lab, do what I did for my technologically impaired in laws - get a wireguard VPN client on a laptop and walk them through (several times) the process of connecting to the VPN, browsing to your services, logging into the services, doing the thing, then disconnecting from the VPN.

• Show them the process while they take notes on the process.
• Let them follow their own notes with minimal help (except to correct the notes) while they do the process end to end.
• Repeat that last step a few times with zero feedback so they build confidence in the process.
• The next day, have them do it again based exclusively on their notes and memory.
• If you’re still in town, wait a full day and repeat the last step a few days later.

My in-laws are now experts at VPN’ing in and interacting with my services.

I’m one of those! I’ve nearly 100% completion, and it’s been great.

These games always add so much world building through notes and audio logs, I find myself seeking our every collectable I can find.

At work, I used ssh-signed certificates for Linux server access - those certs are only valid for about 15 minutes.

The whole idea of shorter lifetime certificates is to address if a certificate is compromised. (Especially for client certificates which, iirc, Let’s Encrypt no longer offers).

For a home lab? With no externally accessible services? Short-lived certs aren’t really a big deal. Nobody is going to be hacking your homelab, stealing your private keys, poisoning your internal DNS, and pointing you to a different, malicious service.

I dunno. Straight up hybrids are superior to ice vehicles, but plug in hybrids seem super niche.

I rented a jeep 4xe and the battery only mode would only go about 10-20 miles - I’m not super far from work, but it’s still double that range. And the default software mode was to consume all the battery then only recharge like a normal hybrid (e.g. keeping the battery at basically empty).

Plus the mileage wasn’t much better because it was lugging around the battery pack.

The only reason why I hesitate to recommend Ubiquiti cameras is even their cheapest offerings are kind of expensive.

And although you can run isolated from the Internet, managing updates is a bit painful. (Ask me how I know)

Money doesn’t corrupt, it just exposes.

Listen, how do I know your parents didn’t have the foresight to sign you up for PayPal a full year before you were conceived? /s

You could either set up DNS overrides on your inwards facing DNS server, leaving external resolution to something like cloudflare (with DDNS), or you have a second internal domain for internal resolution.

I chose the latter for my homelab - it’s service.lan.fqdn inside and service.fqdn on the outside. Since I use a wildcard cert, it’s still protected with TLS if I access it internally or externally.

Edit: this also solves hair pinning as your internal resolution will go to your LAN network, not your public IP

For me, I have multiple OIDC compatible systems (Proxmox, Netbox, Synology, Zabbix, Vault, etc).

So keycloak offers a SSO option to make my life easier with a single account to worry about instead of individual ones.

Plus MFA because it’s cool?

This one is bad - unauthenticated user account take over.

If you’re like me and only using it internally on a homelab, the risks are lessened, but if you expose keycloak to by the Internet - boy howdy

And don’t forget GOG fucking still doesn’t have a native Linux client.

Here’s the thing. There are other places. Epic, Amazon Gaming, Origin/Battlenet/Ubi, itch, Microsoft store, gog…

Most suck at discoverability or they don’t have the variety of Steam. Some are shitty by design (Origin, Ubi, Battlenet) - intended to only get you to play their games. Others like itch aren’t built for scaling out to deliver thousands of big games.

This isn’t a thing like Apple’s walled garden, I feel like this is Steam out performing the competition.