Wireguard. Wireguard is fairly easy to configure and keeping your setup behind the firewall is much less headache in the long run.
First rule of hosting publicly available services is “Don’t. Unless you absolutely have to.” Second rule is: “If you have to, do it very carefully.”
The benefit of splitting services between VM’s is the same as it always has been: I can break one service without breaking ALL of them. Containers are an improvement over native installs but they do not solve this problem completely.
You have my sympathy on the basement flooding issues. Been there. Thankfully not sewage backup in my case.
it’s definitely not an issue you want to let go for long. If there’s an obstruction, it will get worse quickly as more solids go down the drain. Easiest way is to just hire a plumber. Complexity and cost are going to depend heavily on the cause and location of the obstruction.
If you want to try to DIY it, you could try to snake the drain but on a 3 or 4" line you’d need a good sized power auger to make any serious headway.
If it were me, I would get a sewer inspection camera. Low end ones start at less than $150. This is really the only way you’re going to find out what the root issue (no pun intended) is outside of paying a plumber to come do the same thing. A large wet dry vac also comes in really handy in these situations.
How old is your home and what’s the sewer line made of?
The big gap looks like the mortar has just deteriorated to the point that it’s fallen out. It’s not ideal but not necessarily an emergency yet either. Most likely the ground under the foundation has settled a bit. How urgent it is depends partly on whether the crack continues to expand. I would check it every week or two for a few months and see if it gets any wider. You can use a deck of of cards and keep track of how many you can squeeze into the crack. That will tell you if it’s expanding.
I would also suggest making sure you don’t have rain water collecting anywhere next to the house. If you have downspouts, make they’re they’re diverted away from the house as much as possible.
Not nearly good enough to make me give up Quicken but it is nice to see some more self hosted options popping up.
There are many, many, many specialized enterprise applications out there that are windows only.
I use a combination of both. SSD’s to store read/write intensive data. In my case, I run multiple VM’s and store the primary VHD’s on SSD’s. HDD’s for stuff where space matters more than speed, like digital media and local backups.
Every time I think about hosting my own mail server, I think back to the many, many, many times I’ve had to troubleshoot corporate email systems over the years. From small ones that ran on duct tape and prayers to big ones that were robust, high dollar systems.
98% of the time, the reason the messages aren’t coming or going is something either really obscure or really stupid. Email itself isn’t that complicated and it’s a legacy communications medium at this point. But it’s had so much stuff piled on top of it for spam and fraud prevention, out of necessity, and that’s where the major headaches come from. Honestly, it’s one service that to me it’s worth paying someone else to deal with.
deleted by creator
If you’re not hosting any publicly available services, then no. A reverse proxy would be unnecessary. You can just just set static records in your DNS server that tell it which internal hostname goes with what IP and it will relay that info to any device on your local network that requests it. Even with a Wireguard connection, you can tell it to use the DNS server from your local network.
They do maintain an x86 build. I haven’t used pfSense but I have used OpnSense so that’s that closest thing I have to compare it to. I think the upside and downside to RouterOS/Mikrotik is the same thing: it allows very granular control over almost everything. Maybe to a fault. It’s probably overkill for most home networks.
Set up a VPS. Create a VPN tunnel from you local network to the VPS. Use the VPS as the edge router by opening ports on the VPS firewall and routing incoming traffic on those ports through the VPN tunnel to servers on your local network.
I used to do this to get around CGNAT. I ran RouterOS in a Digital Ocean droplet and setting up a wire guard tunnel between it and my local Mikrotik router.
It will obscure your local WAN IP and give you a static IP but that’s about the only benefit. And you have to be pretty network savvy to configure it correctly.
It does not make you immune to DDoS attacks and is honestly more headache to maintain (albeit just a small headache).
If those are the right boots, what do you do differently to keep them from leaking?
This is great! Thanks so much for the advice.
That makes me feel better. There was no crown initially. The flue tiles terminated flush with the brick inside the chimney cap. The old cap made cleaning and inspecting the flues difficult. It also had a fair bit of water damage.
What would I use as a base for the new crown?
From what I can tell it goes all the way down.
I hadn’t thought of it that way. I suppose the decorative brick could be just considered a chase. I haven’t been able to find any similar examples so I wasn’t quite sure what I was looking at.
Sorry, I suppose I should have clarified that. The right side is the “gap”. Both flues are lined with clay tiles. The left flue is not visible in the picture.
Mail servers are the one thing I refuse to self host. Years of managing enterprise email taught me that I don’t need that kind of negativity in my life
Yep. Split tunneling has been a standard option for a long time.