• 0 Posts
  • 270 Comments
Joined 3 years ago
cake
Cake day: February 1st, 2024

help-circle

  • Cool, I recommend it!

    I have my public facing reverse proxy point to my public services, and I also have it set up as a “roadwarrior” VPN to my home. So, I can connect my phone via WireGuard to my VPS, and a local DNS resolves my private services to the private IP addresses in my home network (so, I also run a reverse proxy on my server, for internal services).

    I also have an off-site backup using this — just a raspberry pi and an HDD at family’s, that rsyncs+snapshots over the WireGuard network.

    I’m sure I’m not following all the best practices here, but so far so good.




  • I switched to Technitium and I’ve been pretty happy. Seems very robust, and as a bonus was easy to use it to stop DNS leaks (each upstream has a static route through a different Mullvad VPN, and since they’re queried in parallel, a VPN connection can go down without losing any DNS…maybe this is how pihole would have handled it too though).

    And of course, wildcards supported no problem.












  • VNC? You have your choice of servers, and clients are ubiquitous.

    A big gotcha is that you need to be careful with encryption/security, as in classic UNIX style VNC does one thing (remote desktops). It’s easy to forward over ssh though.

    You can also use VNC to share, which is not what you want; this depends on the type of server/settings. But you can definitely create a new virtual X11 session and access it remotely.




  • nc is useful. For example: if you have a disk image downloaded on computer A but want to write it to an SD card on computer B, you can run something like

    user@B: nc -l 1234 | pv > /dev/$sdcard

    And

    user@A: nc B.local 1234 < /path/to/image.img

    (I may have syntax messed up–also don’t transfer sensitive information this way!)

    Similarly, no need to store a compressed file if you’re going to uncompress it as soon as you download it—just pipe wget or curl to tar or xz or whatever.

    I once burnt a CD of a Linux ISO by wgeting directly to cdrecord. It was actually kinda useful because it was on a laptop that was running out of HD space. Luckily the University Internet was fast and the CD was successfully burnt :)