Put your external facing services behind the VPN, or at least put them in a separate VLAN that's firewalled in such a way that they can't reach the rest of the network if they become compromised.
bookworm
0 Post – 21 Comments
Joined 1 years ago
I would say there are better methods to solve this problem these days than a script. Check out Ansible or NixOS.
As a start I would recommend washing your chest once a day (in the shower works well) with CeraVe SA Smoothing Cleanser and then applying CeraVe SA Smoothing Cream on dry skin. It worked well for my similar problems on my back and is cheap and should be easy to find in stores in most countries!
I'd say Vaseline sort of covers Aquaphor here. Someone correct me if I'm wrong but Aquaphor is basically Vaseline but with some added inactive ingredients.
DuckDNS is great but their service went offline often enough for me to actually buy a domain.
I would advise that you instead also connect the Windows machine to the VPS with WireGuard as 10.1.0.3, basically mirroring what you've done on the Ubuntu server. The routing will be a mess otherwise. Another option is running the WireGuard tunnel on your gateway with something like OPNsense.
For the last question I welcome you to !skincareaddiction@sh.itjust.works where's there's a lot of helpful people that can help you with that! 😊
Good read! ☺️ Vaseline and similar products are my go to when I have to heal skin!
Don't worry about it! :)
I would assume the downvotes are from people who saw the post from "all". I'm sure everyone in this community appreciates it!
You probably need to enable some power saving features that Windows does by default but Linux may not. Run something like https://wiki.archlinux.org/title/TLP just to see if it helps, and then do some tuning because it might be too aggressive.
Did they reformulate it recently or what do you mean new? I've seen it in stores at least a couple of years. Never tried it due to it having perfume in it. Only had bad experiences with that unfortunately. 😣
Does the machine running the WireGuard tunnel to the VPS acts as a "router" aka gateway for the network? Otherwise the windows machine doesn't have a return path for the connection.
Same! Which version do you use? Small or big?
It's a good way to see if someone has cracked your WiFi password for example so why not. Doesn't add much security but better than nothing.
ClamAV is an anti-virus software that you would run on end-devices to scan files, an intrusion detection scans network traffic to detect anything potentially malicious. I don't know your exact router model but I suspect it's way too weak to run intrusion detection. If you have a switch that's capable of mirroring you could use that to utilize a more powerful machine to scan network traffic.
myaccounttag
Why did you add this part? And you're supposed to add a @ before the channel name. Also, is your channel really called channel-1?
Great post! Very interesting read ☺️
S920
I'm running this as my router. It handles a 500/500mbit connection over WireGuard for me without a problem. CPU usage can spike up to 80% when I push it as much as I can, so depending on how it scales I'm not 100% sure how it would handle 1gbit routing+vpn for example.
.
Backup your data regularly and the risk should be very small.