

Don’t forget datacenters being bombed as military targets.


Don’t forget datacenters being bombed as military targets.


Someone suggested seeing if I could install openWRT on my current router, I might start there instead of buying anything right away, I can always grow more later as I find I’m ready to start doing x, y. or z if I find I need to.
I like the spirit! That’s an excellent place to start. If you find you need more later, there’s plenty of options to grow.


This is protectli: https://protectli.com/
If you’re especially looking for good power consumption, I’d look into some embedded system with OpenWRT. I was especially looking for something that could handle high bandwidth and manage some higher level features that OPNSense has.


Not sure how “DIY” you want to go. I’ve been liking OPNSense though. Running it on an air cooled Protectli box.
Handles a symmetric 2Gbps connection just fine.


I kind of like this one. But every time I see I Rivian I have to avert my eyes.


I really don’t know shit about the GUI tools, but presumably they overlay on the same configuration.
The config I posted would be part of the nginx configuration. You’re instructing it to append the client IP to the X-Forwarded-For header.
There is a “Custom Nginx Configuration” screen for my Proxy Host; does it go there? In a nested location block?
I doubt it, but I’m not sure. The location block would normally be where your reverse proxy configuration would already be, and you’d need to just add that one line. But again, I don’t know how that translates to these GUI tools. Maybe if you search for proxy_add_x_forwarded_for and “Nginx Proxy Manager” you might find what you need.


You’re gonna want to configure nginx to send along an X-Forwarded-For HTTP header (there’s also Forwarded, but it’s not as well supported yet). An example in a location block:
location / {
proxy_pass http://backend/;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}


So many managers
Equal access for all is still better than one company controlling access to my content for the purposes of monetization.
Sorry to say, that was more like the initial wave of enshitification.
You know, work can be pretty good as memory and attention exercises.