peter

joined 1 year ago
[–] [email protected] 3 points 1 year ago (2 children)

Tailscale is more akin to a VPN than being open on the Internet so you would generally be able to treat it like a private network assuming nobody compromises your Tailscale account. That being said, there are a few good practices that you should follow:

  • proxmox has good firewalling built into the UI, you can use that to ensure that VMs are unable to reach other VMs that they would never need to to prevent someone from hopping around your network if they comprised a single service.
  • SSH keys on all your VMs
  • don't use simple passwords just because they're private, treat it like any other account
  • don't give services more privilege than they require, e.g if you share a db server between services give each an individual account with it's own restrictive permissions
[–] [email protected] 15 points 1 year ago (4 children)

Interested in the built in VPN. Is that going to a monthly cost? If not, how are they funding it?

[–] [email protected] -2 points 1 year ago

Just take the damn compliment

[–] [email protected] 1 points 1 year ago

Even if you are currently able to send mail without it being marked as spam, it doesn't mean it will be the case forever. If your IP gets marked as a spam sender you'll have trouble getting off that list

[–] [email protected] 7 points 1 year ago

Homer is the simplest

[–] [email protected] 6 points 1 year ago

Yeah I was really confused by that. One example of a single HA contributor doing something a bit selfish. Am I missing something?

[–] [email protected] 2 points 1 year ago (1 children)

I bought an incredibly overkill tape system a few years ago and then the power supply exploded in it and I never bothered to replace it. Still, definitely worth it

[–] [email protected] 27 points 1 year ago (1 children)

I make all my sucky code public because I've never seen a codebase that doesn't suck in some way

[–] [email protected] 5 points 1 year ago

Because humans are generally unable to remember passwords varied enough to be secure.

[–] [email protected] 13 points 1 year ago

At some point you end up surpassing databases and end up with a giant pile of spreadsheets called a data warehouse

[–] [email protected] 7 points 1 year ago (1 children)

Cool premise but personally if I were going to show this off I'd use an example where it worked correctly

[–] [email protected] 22 points 1 year ago

Welcome to the reason why a competitor to YouTube is almost impossible. Network routing is extremely complicated and short of laying your own cables or having multiple points of presence there's not much you can do about it.

view more: ‹ prev next ›