Using cloudflare tunnels means that the TLS is terminated at cloudflare. This means that cloudflare has the capability to snoop on your traffic, so you have trust cloudflare not to do that, especially if your traffic contains sensitive information.
Also, the ‘no media in free tunnels’ is outdated information as far as I know, so be sure to check up to date information on that.
I recommend you make A and AAAA records for the top level domain you own, and then set the needed subdomains (or a single wildcard) as CNAME entries.
example.com points to your IP addresses, and the subdomains point then to your top level name.
This avoids you having to point a new IP at multiple places (be it manually or by dyndns) when/if your public IP changes.
Then you can set up a reverse proxy (caddy for example, it comes with automatic TLS), bind ports 80 and 443 to it, and route the traffic based on the domain name a client is trying to connect to.
So jellyfin.example.com would lead to your reverse proxy which would forward it somewhere internally, say 192.168.1.10:8096 for example.
This way you can use one top level domain for multiple services, and not have to specify ports when connecting externally
I listed the alternatives I found out about in the repo. But in short: Ihatemoney, abrechnung, nextcloud cospend and kitchenowl.
Hi and thanks for the comment.
Just to clarify, I am looking for neither contributors nor QA testers for the code. I generated this just for my benefit and threw it into the open. If someone gets any use out of it, cool. If not, also cool.
I am also not claiming the code to be professional or particularly robust. This is why I made the LLM part clear.
Jellyfin is great! Glad you got it up and running!
No problem! I think making the AI tag mandatory could be good for the community. Though I also recognize that bad actors could easily omit it and try to hide AI contributions.
Do you want to have the site to be public facing? If so, I think your current setup is good.
If it doesn’t need to be public facing, I would use wireguard to VPN into your LAN network, and secure it that way.
Filebrowser quantum is really good! Easy to setup and use.
Thanks for the recommendation, but I am not running nextcloud.
Umm, did you read the post? I specifically talk about Spliit in the post.
Thanks, I’ll look into this one!
There is some clear placeholder art in a few places.
It is very much possible to have a dynamic IP and a usable domain.
Both Cloudflare and desec.io (for example) have APIs that you can hit everytime your public IP changes.
I have a script that checks every minute whether my public IP has changed from the last check, and if it has, an API call will be sent.
With a scheme like this, your downtime will be minimal, if ever even noticed.
Probably nothing has really changed. And I am not claiming it to be a Discord killer, as it really only does the voice rooms well.
But I am recommending it if you and your friends just need a voice room or two (as me and my friends do).
I have tried XMPP, Matrix and now I’ve settled on Mumble.
Me and my fellows mostly just need a voice room or a couple to sit in, and Mumble does that best out of these three, in my opinion.
I recommend giving Mumble a try as it is super easy to set up and use. Users don’t need to even create accounts to join servers.
I might be remembering incorrectly, but didn’t the Frame support foviated streaming not rendering? As in, isn’t foviated rendering a game specific thing, not a headset specific thing?
I have tried to set up most of the options and I ended up on Filebrowser Quantum.
Simple to set up and use. I recommend giving it a try.
https://eylenburg.github.io/android_comparison.htm
This is a great table of comparisons between the different Android alternatives.
With 3 drives I would go with BTRFS RAID1. You get half the capacity, can lose any one of the drives, and it is really simple.
If you were to add drives later on to increase the array size, I might consider RAID10, but if you plan on sticking with 3 drives, I would go with RAID1 instead.
RAID0 offers no redundancy, so I would skip it.
RAID5/6 are not recommended for use in production.
A single wildcard CNAME that points to your domains A record is easier to manage I would say. This comes handy when you add a new service to your stack, as you dont have to go and make a new subdomain record.
You already seem to manage all subdomain updates with that script, so it won’t help you much with dyndns. That is, unless you hit a rate limit when trying to update a very large amount of records at once.
Keeping separate TLS certificates is a separate topic from having a single wildcard CNAME record. Separate TLS certificates offer a slight security advantage over a wildcard cert, as a single leaked certificate secret wont compromize the rest of your sites.