🇨🇦

  • 19 Posts
  • 1.02K Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle











  • A lot of the hate comes from Microsoft forcing it down everyones throats.

    If it had been left to user choice, they may actually have a decent userbase; but instead it’s been forcefully installed on pretty much every windows computer regardless of the owners preferences, it repeatedly re-asserts itself as the default browser, some windows features are hard-coded to use it and break if its removed, there is no simple uninstall process, and windows update will re-install it if you manually remove it.

    It’s my damn computer; if I don’t want a piece of software, I should be able to remove it.

    Ditched Windows entirely 2 years ago partly because of that, partly because of the same upcoming behaviour with AI. Fuck Microshaft, I’ll take my money and attention elsewhere. (I was previously paying for/using pro licenses, for features like RDP hosting)






  • An $11/yr domain pointed at my IP. Port 443 is open to nginx, which proxies to the desired service depending on subdomain. (and explicitly drops any connection that uses my raw ip or an unrecognized name to connect, without responding at all)

    ACME.sh automatically refreshes my free ssl certificate every ~2months via DNS-01 verification and letsencrypt.

    And finally, I’ve got a dynamic IP, so DDClient keeps my domain pointed at the correct IP when/if it changes.


    There’s also pihole on the local network, replacing the WAN IP from external DNS, with the servers local IP, for LAN devices to use. But that’s very much optional, especially if your router performs NAT Hairpinning.

    This setup covers all ~24 of the services/web applications I host, though most other services have some additional configuration to make them only accessible from LAN/VPN despite using the same ports and nginx service. I can go into that if there’s interest.

    Only Emby/Jellyfin, Ombi, and Filebrowser are made accessible from WAN; so I can easily share those with friends/family without having to guide them through/restrict them to a vpn connection.