• 4 Posts
  • 321 Comments
Joined 2 years ago
cake
Cake day: July 26th, 2023

help-circle











  • Could you run Tailscale? That way you can still use your internal IPs and just whitelist the tail scale subnet.

    You can put multiple shares on the same SMB for Plex. So you can use SMB and also Plex at the same time.

    Mini PC and high storage density do not mix too well unfortunately.

    Running off a USB bus is fine, but with that, I would still run it through the NAS. That way you can still access the files while aboard.





  • I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don’t want her to keep asking me how do I turn on the VPN? If it’s just me, then no issue, I’ll use a VPN.


  • It’s hard to explain from scratch.

    Caddy is a reverse proxy software that essentially redirects traffic from a certain port to another port. For example external:port => internal:port. It also enables SSL encryption meaning everything will be encrypted en route between the external and the user.

    VPS is a virtual private server. Just someone else’s computer you can expose to the Internet.

    Tailscale is a mesh VPN that uses wire guard as its transport. I use this to tunnel between my VPS and my Immich server to hide my home IP and to allow encrypted traffic between my Immich server and my VPS.

    A zero-day (also known as a 0-day) is a vulnerability in software or hardware that is typically unknown to the vendor and for which no patch or other fix is available. The vendor thus has zero days to prepare a patch, as the vulnerability has already been described or exploited.

    There’s no fix other than security through layers.


  • Pretty much I have caddy on a VPS that’s pointing to my internal IP using a tailscale tunnel. You are still exposing the web gui to the Internet so I just changed authentication to OAuth to mitigate since risk. There is still a possibility of attacks via zero days, but my immich is on a VM and I’m creating firewall rules to just allow certain ports out.