I really don’t like the idea of every device automatically having a publicly reachable IP.

It’s kind of like AI or ‘the cloud’. Everything now has access to at least your wifi. Hell, even my rumba has wireless access. I didn’t activate that feature. I live in a very small house. If I want to restart it, I can walk over to it and push the restart button. Refrigerators with flat screen embedded in the door? Who is that for? I just want my fridge to keep everything cold. I absolutely love technology. I think it’s wonderful. However, imho, not everything needs internet access, or AI, or ‘the cloud’. I did build a little ‘magic mirror’ a while back that alerts me about weather, schedules, keeps track of a couple of my 25 different security cams, but that’s about it. I haven’t purchased a vehicle in quite a long while now, but I would guess the gadgetry saturation is pretty high.

What is it about Wordpress? I’ve never used it, but it seems that every other day there is a new Wordpress exploit, and that’s been going on for years.

I would find it odd. I am always shocked when I look up an ip at AbuseIPDB and find it has no history. Bots scan everything, even the most innocuous ioT devices.

If you want a backup cert checker, https://iam.redsift.cloud/ does it for free. They basically took over the LetsEncrypt email notifications.

That’s cool OP. I have a business internet package with a static IP. I do a lot of large file transfers between clients and it does come in handy. I’ve yet to serve any public facing services tho. I’ve tried on numerous occasions to get invidious running consistently. It just seemed like I was having to tinker with it weekly just to keep the wheel spinning. I’m not sure what the issues were except maybe YT blocking IPs.

Have fun OP, and be safe and secure with your new found powers.

Ok so This is a bit outside my Caddy knowledge base, but I remember reading about the Caddy RealIP module: https://github.com/captncraig/caddy-realip. Sounds like maybe that would be something to investigate.

ETA: Oops looks like Darkassassin07 has you covered.

Can confirm. A lot of the old wifi drivers are missing from Debian 32 bit and OP will have to dig those up. I have an ancient Dell, 32 bit laptop I use when I am reading before bedtime. It didn’t have to be anything super nice, as I just read on that laptop. I installed Debian 32 bit, but the drivers were not available, and being as it was just barely a viable laptop that I’m trying to squeeze the last drops of usefulness out of it, I didn’t bother trying to find drivers. I dropped back and installed MX Linux. So, yeah, OP might need to do a little leg work.

This is a good point. I know there are a handful that my ISP blocks right off the bat. For me it’s 25,135,137, 138, 139, 445, 6666, 6667.

the simplest option is probably to just have Postfix deliver into a local mailbox and access that over IMAP

I already have sendmail on the server. Is there something special about Postfix? Just asking,I’ve never run Postfix and I’ve never had this experience before with a host. I guess they think that if they charge an extra 6 Euros to flip the switch, people wouldn’t use it for spam purposes. I’m bound and determined to figure out a workaround just because.

Would something like Mailu work. It runs in a docker container.

ETA: The client would be on my desktop in the form of Thunderbird. It lives on part of my tailnet. In theory, it would be ‘connected’, no?

She sure has a lot of domains tho. That’s not that unusual, just notable. I hope she finds inner peace.

opnSense and use that immediately after your new ISP device

This. It’s how I set up my local network, tho I went with pFsense and then hung Pi-Hole+unbound off the managed switch. I did have to set up a vlan just for my lady friend because, apparently, screens full of ads is exactly what she likes, and I don’t want to have to reinvent the wheel every time she comes over. So, I guess you could say it’s pain avoidance. LOL

nobody needs an 8Gb internet connection

The fuck you say…LOL.

As I mentioned, one man’s trash is another man’s treasure. One thing I don’t like about Contabo is that you can only maintain one snapshot at a time and there is no automatic way to create multiple snapshots. I did find an n8n flow that does just that.

One man’s dream VPS is another man’s nightmare VPS.

I do business with Contabo. They did raise my monthly by $1. I’m still with them, I have had no real issues with their service. I also do business with Ethernet Services. They are bare bones, no frills, hosters. I pay $25 per year with them so I don’t really expect that much in return except for keeping everything online and they do a fairly good job of it. Their service tickets are slow, but they’ll get around to you.

LuxVPS is my latest host. I get more bang for buck from them:

• Black Luxury Deal #1

• 4 vCores (Xeon Gold 6150)
  

• 26 GB DDR4 RAM
• 150 GB Raid 1 NVMe
• 1 Gbit internet speed | 40 TB Traffic
• 1x IPv4
• 1x /64 IPv6
• 3.2Tbit Premium DDoS Protection
• 24/7 Ticket Support
• 4 Backups
• For ONLY 10€/Mo (recurring)

Their only caveat is that you have to pay extra for mail ports.

If it was free, I’d say go for it. If it’s $100, you’re halfway to a much more capable machine

This very line of reasoning is why I cannot build cheap desktops. I’m always thinking ‘well you know, if you add another $100 you could have all of this’

Tailscale Healthcheck looks interesting.

If I understand you want iptables to be persistent across reboots? Would the following be useful?:

apt-get update -y && apt-get install iptables-persistent -y
service netfilter-persistent save

I have no clue about ansible as I have not explored that region of selfhosting yet. It’s on the list tho.

For the average consumer of AI, it’s a novelty at this point, even tho we have been using pieces parts of AI for a long while now. But it’s getting it’s stride in stuff like face swaps, neat tiktok videos, making weird pictures. I liken it to when ‘the cloud’ came to town. Hell, we’ve been uploading to servers and running apps on servers for a long while before ‘the cloud’ happened. Everyone and their brother trampled each other to move their entire operations to the cloud. Then, as the dust all settled, we started realizing that not everything that could be in the cloud, should be in the cloud, and so things got back to normal. But just the words ‘the cloud’ made CEOs jizz their pants at one time.

Sameie, sameie with AI. It’s a selling point. There was a thread here I believe, talking about an AI rice cooker. The ‘AI’ part sells it, even tho we’ve been making excellent rice for millennia. I use AI. I find it a faster way to cut through all the searches and give bulleted points to deviate from. I realize that it’s not best practice to rely on AI’s word, but use it as a springboard into further investigation.

Naw man, it’s cool. I get references, but they kind of have to be old school stuff Richard Pryor, Blazing Saddles, Young Frankenstein, that kind of stuff. I’m just a weird old man. LOL