The switches did get L3. Eventually.

TPlink Kasa smart gear didn’t used to need a TPlink account until they made an app update. I would be very wary of anything from them.

https://github.com/potatoqualitee/eol-dr

Seems pretty thorough.

What’s your end goal?

Simplex is easy to host for direct messaging and I had decent luck with Mattermost as a slack replacement.

You should look up what the R in raid stands for.

I mean, the CA is also self hosted so I’m not sure what you think the extra attack vector is here.

Like the other commenter said, they’re expiring regularly. Host keys expire ~monthly and there’s a cronjob to reach out to the certificate authority server to renew them. User certs expire ~daily and the first time I ssh on any given day I have to authenticate with the CA. Recently tied it to PocketID for SSO.

I moved over to certificates a while ago.

https://smallstep.com/blog/use-ssh-certificates/

Iirc vaultwarden itself won’t load if you don’t run https.

Minecraft?

https://github.com/Lodestone-Team/lodestone?tab=readme-ov-file

I was half done when I picked this back up, now I’m a quarter of the way done. Progress!

ignoring for the Winter season

You’re vastly underestimating my ability to not finish a project.

https://mattermost.com/

Is essentially a self hosted slack.

fail to receive SMS or calls, suddenly getting them delivered in a rush when I disconnect from tailscale.

I think that’s a known issue, but the last time I looked there didn’t seem to be a known cause or a fix.

I suspect there are a number of people who self host at least in part because they’ve been burned by proprietary software and enshittification, so it’s not a surprise that there’s strong opposition to those solutions.

Like docker directly on proxmox? Docker on proxmox isn’t going to be any better than docker on anything else.

VMs and LXC are where proxmox has its best integration.

Docker in a VM on proxmox, while maybe not the recommended way of doing things, works quite well though.

You what?

Ha, I completely ignored the picture because it’s a self post. So there is an instance of caddy running on port 80.

When you say you’re trying to reverse proxy, are you starting up another instance of it instead of restarting the already running service with a new config?

I’m no expert on caddy, so we’re rapidly reaching the limits of my ability to offer anything useful.

If you visit http://<caddy address> what do you see?

There are a few implementations of wormhole that might work.

If you’re ok with exposing a server to the internet, I’ve had good luck with sharry. https://eikek.github.io/sharry/

I’ve also had good luck running a Nextcloud instance to share with friends and family. But that is probably overkill here.