SirMaple_

One of the main reasons I run my own instances (Mastodon and Lemmy). Keep the garbage blocked and out of sight.

Devices at home are named after Autobots and remote devices are named after Deceptions.

• crowdsec
• SSH - change port, disable root login, disable password login, setup SSH keys using SK(YubiKey in my case)
• nftables - I use https://github.com/etkaar/nftm to keep things quick and simple. I like the fact if will convert DNS entries to IPs. I then just use dynamic DNS update clients on all my endpoints
• WireGuard for access to services other than SSH(in some cases port 443 will be open if its a web server or proxy)
• rsyslog to forward auth logs to my central syslog server

940/940 unlimited for ~$90/month in Western Canada

IF it’s possible you might be able to take the ISP SFP and put it in a SFP to RJ45 media converter and then you can use any 1gig capable router. I did this with my Telus SFP.

OPNsense or OpenWRT. I run multiple OPNsense firewalls for family members all connected together with a WireGuard Mesh.

Cisco is command line for the most part until get into the APIC NSX stuff. There’s others but I’m only exposed to those 2 where I work.

Nah don’t use those. Get your own direct from Let’s Encrypt. Less hoops to go through when its time to renew. Acme with a crontab entry takes care of renewals automatically. Don’t forget to add to the crontab line to restart nginx right after the renewal so that the new certs are used.

Edit: spelling

deleted by creator

deleted by creator

I feel that Nvidia drivers in Linux will always be a pain and it’s straight up Nvidias fault.

I love the remarks Linus made about Nvidia.

https://www.youtube.com/watch?v=BcxKINWMD8M

Not sure if it’s hers anymore but it was when the “Streisand effect” came to be.

I’ll just leave this here…

If you have Proton Premium point your domain to SimpleLogin and use it. Its included with Proton Premium. Its helped me root out 2 places so far that have sold my email address or were compromised and failed to disclosure.

I use https://github.com/YoRyan/mailrise

Mailrise is apprise under the hood. It’s an SMTP server that converts all the emails it receives to push messages depending on the To address in the email.