• 0 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle

  • I run freeipa internally, which handles all internal https certs (as well as nice things like handling non sudo auth so I can just ssh to machines from an already authed machine without a PW prompt, and doing ldaps for internal things that support it)

    For external web, I have a single box running nginx as a reverse proxy thats web exposed. That nginx box has letsencrypt certs for the public web stuff. The nginx rp has the internal CA on it and will validate the internal https certs (no mullet SSL here!)

    I also do different domains for internal vs external, but thats not a requirement for a setup like this



  • Significantly better code gen, but not to the point where it can make an application on its own. I tried using it for an embedded esp32 based project for fun, and while it could create mqtt support, the code for setting up WiFi / a small web backend / some HTML for a front end… It struggled with the application logic. Either way, it got about 70% of the way there


  • Highly recommend a soda stream, or soda stream alternative. My go to is 4 or 5 drops of lime juice in a glass, then the carbonated water. Tastes identical to the canned stuff, but way cheaper (and maybe less preservatives? Idk if the canned water has anything besides fruit juice and water)

    I also occasionally like root beer if I’m eating something junky like a pizza slice or burger. I bought a bag in a box of syrup from the small root beer brand I enjoy, and can make my own for a few cents instead of a few bucks per bottle. Plus, I can control the concentration depending on how sweet my sweet tooth is feeling that day




  • I like to create things. For me, its a nice feedback loop of positive feeling throughout the process.

    I get to learn new skills in order to complete the thing I’m trying to make. At the end of the day, I get to feel good that I learned something new.

    I get to work with my hands and throughout the process, I get to see the progress I have made. At the end of the week, I get to hold the thing as its coming along and feel good about the progress I’m making.

    At the end of the month / few months when I’m done with the build, I get to feel accomplished as I have overcome the challenges along the way, and I have a finished “thing”

    For the foreseeable time after, each time I use the thing I made, I get a little boost of positivity, because I get to think to myself “yeah! I made this!”

    It also allows me to be social by sharing the thing I have made with other makers online, or I can help them with their projects by sharing knowledge I have accumulated.



  • Old PC that can be on all the time.

    If you dont have one and want dedicated hardware, I would recommend a used server, or something you can whitebox (like using as asrock rack mobo that takes a desktop ryzen but supports ecc memory)

    Put proxmox on as the host OS, two ssd’s in raid 1 is good for a boot drive / VM storage drive. Raid 10 if you want real high performance, but probably unneeded.

    Look for a case that has a SAS backplane, and then connect the backplane to a HBA card. Pass this card through to freenas for storage shares and stuff.

    I recommend not virtualizing your router. So, if you want togoet away from Soho gear, either flash a Soho router with openWRT, or build a separate box for pfsense or opnsense. If you go that route, you will need a separate switch / access point. Unifi gear has a good balance of features and affordability, and can all be managed from a single ui (let’s say you have 3 switches and 2 access points… You dont need to go to 5 web UI’s, its all in one spot - and you can self host the web ui in proxmox)