• 28 Posts
  • 442 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle
  • So to be perfectly clear, setting up Wireguard is about bridging two LANs (or devices) to make them virtually appear as if they belong on the same network. For every client that connects they would need to be issued a key and every device would have to be set up. But all the traffic between the two “LANs” would be encrypted and secure.

    But I don’t think WireGuard is what you’re looking for, because this would require setting up all these other people with WireGuard as well. Or doing a more complex setup where you use a VPS and WireGuard and have that serve an exit point instead of your home connection. Or any other number of more complex setups that would work but require a lot more effort… and it sounds like you were just looking for basic port forwarding.

    Mullvad took that feature away a couple of years ago (presumably to combat CSAM dissemination). So if you were hoping to just have a secure path for someone to connect to your media server routed through Mullvad, I don’t believe that’s possible anymore.



  • Depending on how you’re accessing this, and how many people you’re trying to set this up for, it would probably be easiest to learn how to deploy your own Wireguard network. In my case, my phone automatically connects to my own Wireguard on my server (an 11 year old laptop) and whenever I’m on the go I have full access to my LAN + PiHole DNS filtering.

    So, what’s the point? The point is that you will be able to securely connect to your media server without exposing it directly to the internet, all without paying for a service to do what you can already do yourself, provided your ISP allows you port forward.


  • It also wants to end the right of California and eight other states to demand tougher emissions regulations than the federal standards that would ban the sale of gasoline-powered vehicles by 2035. Without tough emissions rules at the federal and state level, there would be no regulatory credit sales.

    The sale of those federal and state credits has been quite lucrative for Tesla, bringing in $8.4 billion in revenue since the start of 2021 alone, money that basically went straight to its bottom line.

    Is this the greenwashing scam companies use to pretend that they are working toward a carbon-neutral production line? They’re just speculating on future production and selling today’s emissions to today’s buyers on tomorrow’s promise?

    How fucked.





  • If in the future you think you might bring family/relations onboard to the password manager, it may be worthwhile to pay for a BitWarden family plan. BitWarden is really low-cost and they publish their stuff as FOSS (and therefore are worth supporting), but crucially you don’t want to be the point of technical support for when something doesn’t work for someone else. Self-hosting a password manager is an easier thing to do if you’re only doing it for yourself.

    That said, I use a self-hosted Vaultwarden server as backup (i.e. I manually bring the server online and sync to my phone now and again), and my primary password manager is through Keepassxc, which is a completely separate and offline password manager program.

    Edit: Forgot to mention, you can always start with free BitWarden and then export your data and delete your account if you decide to self-host.




  • GnuLinuxDude@lemmy.mltoSelfhosted@lemmy.worldWhat is Docker?
    link
    fedilink
    English
    arrow-up
    11
    ·
    15 days ago

    You might notice that your Windows installation is like 30 gigabytes and there is a huge folder somewhere in the system path called WinSXS. Microsoft bends over backwards to provide you with basically all the versions of all the shared libs ever, resulting in a system that can run programs compiled from decades ago just fine.

    In Linux-land usually we just recompile all of the software from source. Sometimes it breaks because Glibc changed something. Or sometimes it breaks because (extremely rare) the kernel broke something. Linus considers breaking the userspace API one of the biggest no-nos in kernel development.

    Even so, depending on what you’re doing you can have a really old binary run on your Linux computer if the conditions are right. Windows just makes that surface area of “conditions being right” much larger.

    As for your phone, all the apps that get built and run for it must target some kind of specific API version (the amount of stuff you’re allowed to do is much more constrained). Android and iOS both basically provide compatibility for that stuff in a similar way that Windows does, but the story is much less chaotic than on Linux and Windows (and even macOS) where your phone app is not allowed to do that much, by comparison.