I fuck numbers.
The best way would be to use a VPS to proxy your traffic to you. You can achieve this for pretty cheap, just set up an wireguard tunnel to a cheap VPS. That’s exactly how I access all my services from outside my home. As long as the VPS has a publicly accessible IP (most of them do), you being behind CGNAT should not be an issue.
Better start looking for a new job. That company might not be in business for too long, judging from the choices that they’re making. Especially, if they work in the IT space.
I personally use https://desec.io
For me, the most essentials are definitely:
The script you provided works as expected for me. I’m on Arch, so the binary is called perl-rename, but no other modification is needed.
I took a look at it. From what I understand, some of the lines in your setup are redundant. The final product seems to do basically the same job as mine. In any case, if it works, it works.
Hey, great post. I have one request. Can you maybe add some description for what the iptables entries do? I have a similar setup with a lot less iptables rules that works well for me. But I’m not an expert in networking, and am now worried that I might be missing something that can leak my home IP.
I think the gap stems from need. Most people only learn what they absolutely need to. My sister and I are just 3 years apart in age. Yet I am pretty familiar with tech, while she knows next to nothing. I was always there to fix whatever broke. Even now she knows that if she needs to watch something, she can just ask me to add it to my Jellyfin server. I often have to remote into her system to fix stuff.
The Gen Z we’re talking about here mostly grew up using phones, and phone OSes do their best to hide any complexity away from the user. So they never learnt anything. I’m also technically Gen Z (very early), but growing up in rural India, I had to teach myself how to pirate since streaming wasn’t a thing yet (our internet was too slow for that anyway), and the local theater didn’t play anything except local mainstream cinema.
Navidrome does that. I think you just used a bad frontend. Try Tempo if you’re using Android. Or Feishin on desktop.
I’ve been very happy with Navidrome. I have it accessible on a subdomain, so I can just use it from wherever I want. Feishin is a great frontend for Linux desktop, and Tempo is a great frontend for Android.
My friend uses Jellyfin instead of Navidrome, and he’s also happy with it. Both the frontends that I mentioned work with Jellyfin as well.
That’s what I do. But then I mostly use Arch or Arch based distros (e.g. EndeavourOS). So I have access to AUR. If something isn’t on AUR (very rare, but can happen), I just create the package for it and publish to AUR. I do use some AlmaLinux machines as server. I don’t really need many programs outside of the standard repos there since I use them mostly for hosting Docker images. But if I do need to install something like that, I’ve some self-written LURE install scripts.