• 3 Posts
  • 68 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle
  • Yes and no? It’s not quite as black and white as that though. Yes, they can technically decrypt anything that’s been encrypted with a cert that they’ve issued. But they can’t see through any additional encryption layers applied to that traffic (eg. encrypted password vault blobs) or see any traffic on your LAN that’s not specifically passing through the tunnel to or from the outside.

    Cloudflare is a massive CDN provider, trusted to do exactly this sort of thing with the private data of equally massive companies, and they’re compliant with GDPR and other such regulations. Ultimately, the likelihood that they give the slightest jot about what passes through your tunnel as an individual user is minute, but whether you’re comfortable with them handling your data is something only you can decide.

    There’s a decent question and answer about the same thing here: https://community.cloudflare.com/t/what-data-does-cloudflare-actually-see/28660


  • Admittedly I’m paranoid, but I’d be looking to:

    1. Isolate your personal data from any web facing servers as much as possible. I break my own rule here with Immich, but I also…
    2. Use a Cloudflare tunnel instead of opening ports on your router directly. This gets your IP address out of public record.
    3. Use Cloudflare’s WAF features to limit ingress to trusted countries at a minimum.
    4. If you can get your head around it, lock things down more with features like Cloudflare device authentication.
    5. Especially if you don’t do step 4: Integrate Crowdsec into your Nginx setup to block probes, known bot IPs, and common attack vectors.

    All of the above is free, but past step 2 can be difficult to setup. The peace of mind once it is, however, is worth it to me.











  • Yeah that’s normal in Britain for council and government fines (as opposed to often unenforceable private parking charges). The shitty part is that if you try to dispute it they don’t put the timer on hold so you essentially play double or nothing on how strong you think your case is. Lose and you have to pay the full thing. Not bitter at all.


  • TIL they’re called plantation blinds! The slats swivel open and closed as opposed to the entire thing raising and lowering but I assume that’s what you meant. No external rod or handle, all of the slats are linked inside the frame somehow.

    Edit: Actually knowing what they are has helped my search massively. Looks like there’s options on Aliexpress, albeit not particularly cheap. Thanks!







  • Synology has Container Manager, which is their GUI frontend for Docker, so if it’ll run in Docker it’ll run on a Syno NAS. I’m running Pihole on mine just fine.

    As for the M.2 drives, you can use non-Synology ones as storage. Don’t quote me on it but I’ve a feeling it “just works” in the EU where they’re not allowed to force you to use specific brands, but if it doesn’t then there’s a script that removes the restriction: https://github.com/007revad/Synology_enable_M2_volume

    You should check their repo as they have other useful scripts. I’m using the one that enables dedupe on non-SSD volumes myself.