Is this at a webserver level?

Huh, TIL that’s still possible. Wasn’t in my case at the time.

I run my email server, but not at home. Running it at home is not all all more difficult, but it will only work for internal traffic and inbound from the internet. Residential IPs are simply blacklisted by ISP and as such - nothing will reach external recipients. Still useful, but is limited.

To have your smtp reach everyone globally you need to run it on a business IP. I use Linode, has worked very well since the setup in 2019, although they did get acquired by Akamai, which might become an issue at some point.

This is such an incredible write up of something I’ve never even considered to exist. Thank you!

I’d love to have things like that in a form of a post at !graybeard@lemmy.cafe

Network? That’s a small bit. DB is struggling with IO at times, but network usage is fairly low, at least on my end.

Gentoo/Arch guy checking in. It’s more about having fewer codepaths to go wrong after some update. At least in my case.

Huh TIL. Thought it was cock.

Filled in the survey. A few notes:

• Some of my answers make no sense on the surface - like the “experiment with new technology” block (4 questions). I’ve answered “Agree” to all of them, because I have taken time into account, which is not represented on the questions. Long story short - I do love experimenting with new tech, I’m almost always the first one to try something among my peers, but at the same I never blindly jump in (I’m hesitant) as most of the “new technology” is just
  • Someone repackaging foss and relabeling it
  • Some LLM bullshit
  • An inferior product to what already exists

There are also scenarios where I have already found something that’s the best solution for my case, so I won’t even bother looking at something new, even if it might be the best thing since sliced bread for someone else.

• TIme and effort setting up/maintaining (4 questions). It doesn’t take much time nor effort to set anything up now, but it did when I was starting out initially. I knew very little and a bunch of concepts hadn’t clicked, yet, so it took me days to set up Nextcloud and about half a year (on and off. Probably a week or so if it were all squeezed together) for email.

• The performance and intent to use in the future questions are weird - they feel like the same question, just leveling off in intensity. I’ve selected the same answer for all of them. They probably should’ve been a single question with agree/disagree options swapped for intensity levels.

Good luck with your PhD!

Mostly agree. Audiobooks are not my thing, but of it were - I’d look for a way to resume where I left off, maybe some recommendation on what to listen to next.

In general - once you’re into hosting stuff and past the initial barrier of setting everything up - adding another service is dead simple.

Can I be unreasonable? I’m gonna be unreasonable.

Gentoo.

Glad to hear! Not that you’d want to send email from a residential IP anyway - if not for your ISP, every email service wouls bounce it anyway.

Normally firewall is on the router. Sensitive environments usually run one on the client as well.

It’s not v6 itself, it’s rather lack of layers of nat that prevent forwarding a v4 for most folks.

Fair enough, I guess. Still, I was dumbstruck by lack of ability to open up a port.

It doesn’t fix it, per se, rather removes the need for layers of hacks such as nat and cg-nat. Every device gets a globally routable IP - no need to forward anything, just open the port you want.

IPv6. My stupid ISP actually shipped their router with all inbound ipv6 blocked with no way to unblock it, so I set up opnsense. Works like a charm!

.dev domains are required to only be reachable via https. You’ve not mentioned that in the post, so I’m guessing port 443 is not serving or even listening.

I’d delete the screenshot with your IP visible. You never know…

Majority of openrc/hardened/selinux binhost setup is done, need to figure out the small things.

Lemmy was also giving a bit of a headache, fiddled with limits some more.

I’m fairly certain there’s been an attempt to play with some opnsense config, but there was only time to install the updates. Or maybe this was last week 🤔

Whole path has to be accessible, not just the file itself. All dirs above the file need to have the executable bit set that affects the user accessing the file.

Lemmy.cafe checking in