Amazing reference friend! Definitely bookmarking it and maybe mirroring it locally (I hate when repos go private or disappear).

USB’s are another really big no-no where I work, and running a different OS on my work network would 100% throw a lot of flags in our SOC as it’s essentially plugging a rogue device into the network. In my understanding, a reverse proxy allows access to specific resources, if configured properly it only allows access to your DMZ.

VPNs allow you to become part of a virtual network (like one you aren’t physically connected to), frequently providing access as though you are directly connected to the whole network. I could set up a VPN to my DMZ I suppose, but that just feels weird as hell as the whole point of a DMZ is to be an area you allow the public internet to reach (sometimes requiring authenticating to the reverse proxy).

Oh yeah, I 100% agree with that, honestly two VPNs are better given you wouldn’t want your normal VPN to terminate into your management vlan (nor should you want your management vlan to have access to the internet). I thought we were just discussing normal homelab stuff, all administrative stuff should really be oob.

Just by making it so I can’t access from a system I don’t control. Like say I need to retrieve a document from my house, but I’m in a SCIF, or a waiting room, or anywhere else I wouldn’t have my personal device, it’s super useful to just connect to something like Nextcloud and pull it down.

Hmm… Where I work setting up a VPN on my work machine would not only break my workflow, it would probably cost me my job. Plus I’m not a big fan of giving computers I don’t control access to the internals of my network. Reverse proxies were invented for a reason, no reason not to use one.

My homelab stuff I like to be able to access from places that take all my free time (like work), making things accessible is a bit of a requirement for me.

I’ve been using Authentik for a while now and absolutely love it. Is it perfect, no, but it’s an IdP completely under my control and that definitely makes up for some shortcomings here and there.

I just assumed it was because it lined up with them destroying the GUI, the new layout is the hot garbage that finally got my wife to opt for jellyfin.

Could you specify any of those issues? I ask because the only one I’m tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.

Not going to lie, I hate doing my annual review and letting copilot write it for me was too bad this time. I fed it my standards/objectives and said “did I do this stuff? Write my review for me” and it did something better than I would have come up with. I was able to see the references it used so I feel okay submitting it. Didn’t have time to work on it this year with as many people as we’ve lost over the past couple years.

Debian has worked fine on my old laptop, probably only a few days for me but the battery is a decade old or so.

I’ve had a few hatchbacks and live them, though for now I just have a trunk and two doors on my daily. Thank you for being one of the few people that don’t tower over the rest of us on the road!

As messed up as it sounds, after our last move the company bringing our stuff didn’t bring a small truck and their big one couldn’t make it up our steep driveway. In steps my wife with her Scion xD, the baby sister of your xB, and managed to drive everything up hanging out the back (many many trips, no fridge though).

My brother had a 90s Toyota with a 5 speed and the full 8’ I believe. We did small town construction and it was perfect for general lumber/ladders/groceries/etc.

It also had suffered a bad repair job in a backyard shop at some point and would kind of shibby down the road a little sideways. Insanely reliable though.

Thanks for the encouragement! I bought a couple mini pc’s and one server seems fine going from a lot of memory to just 16GB. Now I guess I need to start parting that one out to pay for a more efficient storage server.

Two crumbs…

That song has lived rent free in my head for a long time.

I think it is intended more for the relatively hidden cameras on some glasses. A body cam (at least currently) looks pretty obviously like a recording device, whereas some of the perv goggles can hide the lense pretty well.

Not with that lock they don’t lol.

Well Debian has been a fun ride for the last 20 years or so… Wonder what’s next…