you need to figure out what VLANs you need and how the communication (firewall rules) between them should work or not work. Which devices are connecting to your services/proxmox host from which VLANs? To actually answer your question, if you want to figure it out try it in a tested lab setting or do this when you have time. I spent quite some time troubleshooting why certain firewall rules don’t work as expected,
- 1 Post
- 23 Comments
tjoa@feddit.orgto
Privacy@lemmy.ml•Lawsuit Alleges That WhatsApp Has No End-to-End Encryption
11·4 months agoI don’t know if they still do it but they actively gaslight you into believing you have e2e even with peers you have not scanned the public key of.
tjoa@feddit.orgto
Selfhosted@lemmy.world•Self-hosting in 2026 isn't about privacy anymore - it's about building resistance infrastructureEnglish
9·4 months agoI think we should have a system to find and join self-hosted instances from other people. Most of us probably dont mind a few more users since our servers are idling most of the time. And this would not require grandma From Facebook to docker compose….
So your answer to „you can’t generalize vpn good, isp bad because not everyone is living in the UK and US“ is „but what if everyone does?!“ ok
You make it sound like it’s always the case but ISPs in some countries are less centralized/ not on the stock market and rather oldschool so I bet they don’t do anything with your data (yet). Think of utility companies.
tjoa@feddit.orgto
Selfhosted@lemmy.world•Setting up ProtonVPN on an OpenWRT router, no internet access with service up (UPDATE: found workaround)English
3·7 months agoIf you didn’t already, I would also recommend hit up the guys on the openWRT forum.
tjoa@feddit.orgto
Selfhosted@lemmy.world•A domain I like has expired, how do I go about registering it for myself?English
5·9 months agoFor me it just worked to register it a day after is expired through my provider that I am always using. I also thought no one will be this fast/that interested and that turned out to be true.
tjoa@feddit.orgto
Privacy@lemmy.ml•How to get maximum privacy from ISP without a vpn or proxy ?
2·10 months agoTrue but it seems to me that it’s an advantage to have your IP logged in this more decentralized way. most resolvers also cache the answers so it would be only logged the first time you visit a website.
tjoa@feddit.orgto
Privacy@lemmy.ml•How to get maximum privacy from ISP without a vpn or proxy ?
2·10 months agoCouldn’t you run a DNS resolver that pings the authoritative servers directly? Yes initial requests will be slower
tjoa@feddit.orgto
Selfhosted@lemmy.world•My reason for wanting HomeAssistant and a locked down VLAN...English
2·11 months agoOk maybe I don’t fully understand yet. Let’s say an access point has 3 SSIDs, lan, guest and iot each client on each SSID gets a vlan tag accordingly. So it’s only connected to a single physical port, i think that’s what confused me. But SSIDs are interfaces just like an physical port afaik so your analogy still stands. The security here is the WiFi password anything that connects to LAN gets a LAN vlan tag. but it’s not like anything that connects to any of the SSIDs can get the DHCP lease of some random device on any vlan cuz it got tagged before. Or am I missing something?
tjoa@feddit.orgto
Selfhosted@lemmy.world•My reason for wanting HomeAssistant and a locked down VLAN...English
2·11 months agoThat’s a very cool feature actually but how does it stop a hacker if he has obtained a trusted MAC address from another device and connect to vlan 20 directly while the real device is offline?
tjoa@feddit.orgto
Selfhosted@lemmy.world•My reason for wanting HomeAssistant and a locked down VLAN...English
6·11 months agoFYI I learned About VLANs that it is in no way „locked down“. I can spoof the MAC address of a known device from a specific VLAN and I’m in that VLAN. Yes your devices can’t reach the internet/other devices by default but it won’t stop a bad actor.
I use the Wipr ad block extension and then just safari. I can’t bare YouTube ads.
tjoa@feddit.orgto
Selfhosted@lemmy.world•Opinions about replacing npm with npmplus?English
51·1 year agoConfused web dev noises
tjoa@feddit.orgto
Privacy@lemmy.ml•What would be a more privacy respecting service instead of Amazon?
51·1 year agoAlso most have their own logistics that is just as fast as amazons (cuz they need to since they sell on Amazon)
tjoa@feddit.orgto
Privacy@lemmy.ml•German Prosecutors Think It’s Funny People’s Homes Are Being Raided And Their Devices Seized Because They Said Stuff On The Internet
1·1 year agoYea the tech was worthless after that time and they also lost the lid of my grinder!!!
Yea tbf they released the web version as they crippled the third party stuff, so it’s a compromise I guess. And they could’ve also stayed app only and we would’ve been fucked completely
All I can say is that there were multiple good ones but Instagram crippled them, devs have repeatedly expressed their frustration and gave up practically. So no there is no frontend for Instagram that’s works anymore. Thanks meta!
I had to literally recreate my Spotify account when I deleted Facebook, since there is just no way to login without it if you delete Facebook.

But why does NPM enable post install scripts by default? Why is there no way to define a minimum release age for dependency versions? It’s just poor design choices.