This is the ICE one

https://tngsitebuilding.com/index.php

Edit: Ah it’s not foss though.

I’ve been considering setting up matrix or xmpp, can I ask what is motivating you to switch?

Caddy config (“Caddyfile”) is super easy to configure. In some cases it can be just one line to reverse proxy something. Search for a caddyfile example and you’ll see.

I actually did this instead of tailscale first; installing tailscale on a pfsense router was a challenge, iirc i had to find and install the freebsd tailscale pkg from the command line because the plugin doesn’t give the option to connect to a non-tailscale control plane.

After I did that and connected to my headscale server (on my vps) I could ping pfsense’s local ip over the tailnet, but couldn’t get any traffic out from pfsense. Turns out I had forgotten the pfsense tailscale plugin automatically sets up outbound rules for you.

That was a rabbit hole I didn’t feeling like falling down, so I turned off headscale and just used tailscale account and the normal pfsense tailscale plugin. But it’s there and it does work fine if I ever wanted to go figure out the outbound traffic rules.

Headscale is the tailscale backend server

We’re renaming mexican standoffs 😂

I have caddy on a vps that serves as a tailscale exit node and also reverse proxies over the tailnet. My pfsense router is also in the tailnet and exposes some subnet ip addresses to the tailnet. So for example I have public domain watch.example.com hits my caddy and gets proxied to internal IP 192.168.31.48 which is my jellyfin docker.

Idk how complicated the internal wiring is but maybe a solution here is a pair of shelly relays. One for the ac and one for the compressor fan. Then you could turn them on/off separately over wifi based on whatever logic you come up with.

Unfortunately we’re not in the same position as 100 years ago. This time the evil guys can just fuck off to another country in their private jet.

Are they taking donations 👀

Indeed. I have done so.

Seems like a cool idea but I feel like if you’re buying rack hardware you should be able/willing to buy a metal frame to house your stuff in.

Ill be ok. Been 100% in a vtsax equivalent for 10 years… not retiring any time soon

Yeah. We’ll see i suppose. The markets holding back a lot of suppressed upward mobility that we saw when the fake “tariffs are off” tweet happened. One whiff of good news will have us going up again.

In any case, at least I mitigated some of the damage. Can’t win 100% every time.

I switched my retirement accounts to cash apprx feb 28, before the tariffs announcement and the market starting crashing. I just moved back into stocks this week. I’m convinced we’ve seen the worst of the tariffs… too many people are in trumps ear telling him he’s a retard. It’s only up from here.

I don’t know too much about snap (I literally haven’t had to touch my immich setup) but as far as I remember when I set it up that was snap’s whole thing - it maintains and updates itself with minimal administrative oversight.

I was in the same spot about 3 years ago and I started with Unraid. Got me into docker and dipping my toes into command line stuff.

Honestly though you’re going to quickly outgrow your old laptops…

I’ve had immich running in a VM as a snap distribution for almost a year now and the experience has been leaps and bounds easier than maintaining my own immich docker container. There have been so many breaking changes over the few years I’ve used it that it was just a headache. This snap version has been 100% hands off “it just works”.

https://snapcraft.io/immich-distribution

I’m actually behind 3 routers and still hosting stuff to the internet. My house is behind cgnat, I have two isp routers, which both connect to a pfsense router (ip of which is in the dmz of each isp router).

My pfsense router and a free vps hosted at oracle are both connected via tailscale. Pfsense router advertises specific subnet addresses to the tailnet. VPS uses caddy to reverse proxy to those subnet addresses to expose them to the internet.