I’m just using Dropbox now and replicating my 1Password everywhere and for some reason it makes me nervous to self host.

I think I’m just going to back up everyone’s vault to a USB and bring it to a second location twice a year. If storage ever gets affordable, I’ll send replication snapshots instead.

Backups? In this economy?

But I need to get something working. I am about to move to VaultWarden and that makes me very nervous.

I notice something stopped working, or someone in the household notices.

Then I go fix it.

I am not a fan of geoblocking as a first line defense but when I blocked everything outside of my country, fail2ban stopped firing, entirely.

I think coral is not current and hard to get but I don’t watch too closely. Seems to still work! Reolink on camera detection is decent enough for me.

I’ve had a good experience with Reolink PoE cameras. They do RTSP and ONVIF and integrate well with Homeassistant.

I am neither stating TLS termination is wrong, nor providing instructions to cert pinning.

Firstly, wildcards are convenient but they break your functionality of authenticating the server to which you are connecting which is half of what TLS does. That may or may not be important to you.

Does it work without TLS? Start there, making sure dns and reverse proxy works, works, then add the certificate/TLS termination.

I’ve got Pfsense installed on a device with 6 RJ45 ports. 0 is wan, 1 is lan0, 2 is lan1, etc up to 4. Why I have multiple lans is somewhat tangential.

One day it rebooted due to a power outage and WAN worked but lan1 and 2 and 3+ were messed up. I’m still not entirely sure what happened, but the second physical Ethernet port was non responsive at boot and Pfsense just assigned the ports as if it never existed. I moved all the cables over one except LAN and it worked just fine. Except that of course in the troubleshooting i had moved all the assignments around and broke it thoroughly, so it took a while.

It’s still pretty much 2x. I managed to get ram bought before it went silly but I’m really short on storage.

Without googling the specs, are those two on a different channel? ie the chipset has 6 and then another chip handles 2 or vice versa

I’m going on holidays tomorrow. Should I take a gamble?

I’ve looked into the frames a few times. They’re a bit of a niche product and I guess for elderly people because they absolutely max out at 1080p. The displays are awful.

Using the TV is a bit overkill in size but at least it’s hopefully a good display.

I’ve looked into this a bit but not deeply and add to the chorus of no. The voltage isn’t right and the charge controller doesn’t charger properly and it’ll detect charge levels incorrectly - its not like a car where it’s fed a fairly constant 12-14V that can be handled by a BMS and integrated charge controller.

Vista pricing tiers were absurd. It still is, but vista was extra.

What about wget? Then next step is the application and I’m mostly out of ideas.

Pop into the console and try pinging or dig google/etc. Might just be something simple like lack of dns server.

I’m doing slaac and some reservations for devices that just randomly pop new MACs (vms or something, I don’t remember why.

I use aliases for my firewall rules. DNS I don’t really have working.

I had to get a NAS with moderate horsepower (a mobile i5 chipset). It’s not worth on power consumption or noise. Usually there’s not a lot you can do about noise. But free is free.

First ask yourself what benefit you gain from isolating services.

Untrustworthy devices like work computers, smart TVs, and IoT sure have good reasons. Possibly a DMZ. But you might do as well to simply block all egress from a few internal IPs instead.

Move things slowly, because you’ll need to see what traffic needs to flow and what doesn’t, and you may find that you need some helper services for cross vlan (for example mDNS).

ETA: guest wifi is good too; force the traffic through firewall and keep it off your internal network