• 0 Posts
  • 28 Comments
Joined 3 years ago
cake
Cake day: November 26th, 2023

help-circle



  • you can reverse proxy other ports than 443 and ex. upstream ssh, the advantage of having reverse proxy over everything is to have traffic in one place so you can manage it, that’s why for example kubernetes have ingress server, example nginx / openresty upstream ssh, you can restrict traffic to limited amount of IP etc.

    stream {
        upstream ssh {
            server          127.0.0.1:22;
        }
    
        server {
            listen          2222;
            ssl_preread     on;
            proxy_pass      ssh;
        }
    }
    

  • Buy refurbished / used Mini PC with at least 16GB RAM and 1Gbit network card. Don’t bother with M.2, SSD is enough.
    I have right now refurbished hp g4 ryzen 5 mini pc. There is 12 docker containers running there and couple applications in screen, I just add things. Don’t do ARM, as far as I remember running on ARM is compilation hell. Stick with x86. You want it to ease your life and not to make it harder.











  • I remember to have it working with default software I got but it was 10 years ago.

    Then they added this bloatware like media streaming addon or notification center. I have now entware with minidlna and set minidlna scanning disk once per day because media streaming was scanning all the time.

    I haven’t figure out how to permanently kill their /usr/local/sbin/ncd, ncdb, qNoticeEngined, qulogdb, NotificationCenter, mariadb processes. If I figure out it it probably start working again.