Hah same here, core has been on my list for a while especially for the pi but i keep getting distracted :D

Some of the acme clients do, I don’t think certbot does though. I remember using acme.sh or something and I think it calls it a delegation domain if I remember correctly!

Tools mentioned here are good suggestions but the problem you are going to run into is that CloudFlare doesn’t support second or higher level dns zones (so a record of a.b.c.com should be in a zone of b.c.com and CF only allows c.com) on most account tiers and LE/certbot is expecting a zone to create the validation record using its plugin.

Yep this right here, I have used Ubuntu LTS for servers both my own and for work for years now and it works fine. I also don’t think snaps are as big of a deal as people make them out to be, the only snap I am actually forced to use is the mass snap and that is a canonical product so whatever. I even use it on some rpi4/5 even and it works great for use with workloads suited for a pi. Now, 10 years ago this was a different story, but these days Ubuntu LTS is a great OS overall.

Debian is also great though (and if I was building some sort of appliance OS I would prob start with that since it has the fewest customizations to start with) but after you use any of the deb based distros enough they are all basically start to look the same to operate so pick one you want to learn and use that until you have a reason to change, learn the tools not the distro and you will be fine.

All of that said though, every distro has idiosyncrasies but the Linux CLI skills you learn are definitely transferable so it’s not as big of a choice as it is made out to be sometimes, especially now that containers and systemd are everywhere. That is …unless you decide to pick Solaris or one of the BSDs but those are a whole other animal 😀

Yeah this is where I am at too, it’s more about who is responsible when it breaks for me and if Plex breaks I have to fix it no matter where it runs. This community is more about learning how to do it than what specific tools to use for me as well, all tools come and go over a long enough timeframe, this is a good place to learn about the next one.

Okay so something to check that I am not sure if I saw between this and the other thread, have you made sure your Z axis is both straight and counting steps accurately? I remember my first bed slinger had a poorly assembled and bent torque coupling that I didn’t notice for a long while because it worked fine sometimes but I could never get it to print reliably until I replaced that. I think it was making it skip z steps or something because the bed leveling and first few layers were always fine. It might be worth printing a z test print or something to see.

So I am pretty sure that error is happening because certbot can’t retrieve the certificate which is coming from that API no matter what type of challenge you are using (this is what ACME is).

Now when you say you are blocking inbound traffic, have you made an exception for established outbound session return traffic? If not then you your inbound rule will block all traffic because without that exception the explicit deny will typically override any session/stateful based rules your firewall might have by default (this applies to most firewall vendors I have run into).

That said, I’m not sure what your goal is but blocking outbound traffic to those ASN might be more effective for you anyway because your firewall should already be dropping any inbound traffic that isn’t otherwise allowed so I’m not sure blocking inbound traffic really gains you anything but I’m just guessing. Hope that all makes sense!

Oh I have a very specific one for you buckle up haha. So one thing in macOS that gets progressively better and worse over time is actual multi-monitor support. It’s fine but I swear either no one at Apple uses multiple monitors or everyone actually has only cinema displays arranged in a horizontal line haha. I have used OSX/macOS for a long time and it was much worse for a long time but had gotten pretty workable then BAM around Tahoe or so arrangement is buried in some menu now and I’m not sure the function of the row of displays actually is now? Anyway, it’s mostly great, this is the one thing that apparently turns into a rant haha! Okay two things, bring back eGPUs on Apple Silicon :D

I think your bigger problem with that board is going to be that PCIe slot is a PCIe 2.0 x1 slot so it will be slow but you can just use an adapter like this:

https://www.newegg.com/startech-com-model-pex1to162-pci-express-to-pci-card/p/N82E16815158223

Flexible versions exist too! I’m also not sure you would get a lot of benefit out of a GT730 really so YMMV.

I am in the same boat, long time infrastructure automation engineer as well. Sometimes it’s faster to explain how terraform or whatever needs to act and then fix the issues rather than having to sift through the docs for every provider.

I also do a similar thing to you with code, I also have to read a lot of other people’s code in languages I don’t know to help troubleshoot things and while I can usually follow the logic it is such a time saver to have AI to read the docs for the libraries and languages for me to at least find the part of the docs I need to read faster than searching myself.

Overall, I also agree with the sentiment on AI most of the time and all of its criticisms are definitely valid but I think too many people try to use AI to do their work for them instead of using it more like a rubber duck you can program with normal language.

Something to consider, there is also a third category of “Combination” which is some of both. Also, hyperactive is not necessarily the classic “running around” and can be things like “interrupts people because the idea comes flying out” or “silent rooms sometimes make my brain fuzzy” (both of which describe me sometimes). It’s less about which one you “qualify for” as I thought for a long time and more about how many of them impact your life to the point that it is a problem for you and it has always changed over time for me at least!

Lots of good suggestions here already but what is your upstream DNS provider and is it your ISP DNS from DHCP?

Yeah I’m curious too because I have played Cyberpunk without any issue on both the steam deck and bazzite for a long time, cyberpunk even has a graphics preset for the deck so I’m not sure what’s happening either.

EDIT: Even using both AMD and NVIDIA graphics cards (before the latest nvidia driver version debacle though)

Lots of good alternatives advice already here but I have a couple comets and they work pretty well! They don’t require cloud access except for updates if you want them, I think it has Tailscale built in as well. Their newest one has an HDMI pass through as well which is handy in some situations. I have the PoE version of the other one and it works the same way, the power control kits work too! I also have a jet KVM and it’s fine, I like the comet better I think! They have also open sourced their cloud thing so you can centrally manage them all, it’s pretty neat!

If you find one you really like and want heavier you could have it printed in metal with like shapeways or PCBway or something I bet! Or even metal-fill filament depending on your printer!

I am not sure I could pick a favorite but here is my desk’s current fidget toy box hah! If I had to it’s probably the fidget cube or whatever is in my pocket. Also, I’m going to need to know more about this floppy chain most importantly where do I get one 😄

Oh this absolutely happens to me to the point that I just tell people when I meet them that it might happen but I do try because I have a lot of names rattling around in my head hah! I also use how someone answer ls as a sort of read on who they are as a person haha. That said, I have never had someone call me selfish but if they did I would probably respond by telling them that it’s selfish to think everyone should remember their name and to remember they are not the main character in anyone’s life but their own. I try not to be mean about it but I am definitely snarky about it.

Yeah I thought so too! I am not sure why it’s not appreciated more either, it was a great read!

This was a great episode, this is one of my favorite podcasts so I was able sign up for a forkiverse account in time hah! It actually went pretty well and it was cool to watch it get more active!

Here is the episode page: https://www.searchengine.show/the-fediverse-experiment/

Their episodes are always interesting! Definitely worth a listen! If you like that type of podcast definitely check out Hyperfixed and Heavyweight.

Okay lots of good info here but just to make sure it was clear that you are kinda solving two different but related problems. Connectivity with WireGuard or other VPN and split-horizon or multi-horizon DNS (Wikipedia) which also called a view sometimes (like BIND) and can also be done with two different DNS servers. You can sorta do it with AdGuard but it is tedious to maintain. If you are using a wildcard rewrite it works alright but that isn’t necessarily the same as a CNAME or subzone delegation.

The next pice I’m not sure I saw mentioned is that WireGuard is not like other VPNs in that if two nodes are on the same network they will generally communicate directly peer to peer even over WireGuard addresses so you don’t really need to worry about traffic hairpin like you described unless you configure it to do so (which is more like traditional VPN would act). Tailscale is similar in concept but it uses different terms and technologies.

Anyway not sure if that helped or made it more confusing but there are may ways to solve it so good luck! FWIW, my home network is currently set up with a public zone on a commercial provider. It has a wildcard CNAME to something like proxy.domain and that is an A record containing the WireGuard addresses. Then my local DNS overrides the one A record for the proxy internally which I only get when WG is off. I would rate this solution adequately functional but medium level of janky, 8/10 would use again :D