

If you end up going with Intel anyway, avoid I219-LM (e.g. IBM I340-T2), it has issues where you need to run some commands on startup to disable some of the NIC’s features so that it doesn’t lose connection for a few m every few days. It’s pretty old so you probably won’t end up using it, but just putting it out here.


Same. I have a router with OPNsense. In the “Dynamic DNS” section I create a “Custom” service with the DynDNS2 protocol. I type in
update.dedyn.ioas the server address. You need to also get an api key from the desec.io web panel that you input into the username and password fields.Now everytime the router’s WAN ip changes it automatically edits the DNS zone. So instead of going “your server -> DDNS provider -> DNS CNAME record” it’s just “your server -> DNS A record”
I also have a separate token for my web proxy (traefik) so that it can edit the DNS records to get let’s encrypt certificates through dns challenge as you describe.
As for the desec signups in my case one DNS zone was no problem, but for a second one I needed to e-mail them:
They asked me to (voluntarily) donate, which I did too.