But the attacker should know the internal and the external DNS. If the internal DNS doesn’t have any SSL certificate on its name, it’s impossible to discover.

By the way, I always suggest to reach services through VPN and use something like Cloudflare tunnel for services that must be public.

P.s. Shouldn’t public and private DNS be inverted in your curl example?

My point is that you can’t compare today’s problem with 20 years ago! 20 years ago the access to the Internet was through the home PC for the amount of time the kid was allowed to use and with people in the house (usually); today the access to the Internet for a kid is 24/7 and everywhere. There is no comparison. Parents should be more present in the kids life? Sure! Parents should block Internet access to porn website at least until a certain age? Yes! But most of them doesn’t even know that ths is possible. Maybe we (society, givernment) should work more here.

Thanks!

Guys, come on, in the '80/early '90 it was almost impossible to have access to porn, maybe some magazine found somewhere. Today a 10 years old can see porn video on a smartphone everytime he wants! You can’t say that it’s the same!

P.s. In my original message I didn’t say that I’m ok with that law, I was asking (to start a kind discussion) what other possibilities there are.

In fact I wrote:

The firsts with wide Internet access were the late millennials.

which seems to be you.

I know, but what were the risks there? There was no Internet! The firsts with wide Internet access were the late millennials.

Or just point secret.local.mydomain.com to the LAN IP of the server.

To avoid opening ports, have a look at Cloudflare tunnel.

Thanks, I did’t know that.

I agree with what you say, but how can we prevent kids to use those websites? Todays parents are too IT ignorant and they don’t know that they can protect their kids by using tools that they already have (parental control on smartphones and routers). So, how do we protect those kids? Pornography (for example) can do huge damage to kids.

Is there an Immich Android app that auto upload pictures?

Dude, chillax! Why would I read the article? I assumed that you got the same hardware that was mentioned in the article; how could I know that you wrote it about your server?

And by the way, your analogy with the archeology doesn’t fit at all.

No way! For just 1 reason: I will have to learn another new thing and replace it in about 6 servers. I value my time and for now Proxmox is fine.

P.s. Incus seems nice though! NO, stop tempting me!!! I’m already in the rabbit hole with a gazilion of self hosted services and dozens piling up in the to do list 🙈🙈🙈

2004 hardware -> dumpster! Seriousky, with the electricity bill of 1 year of that server running 24/7 you can buy a used Dell, HP or Lenovo PC (2/3 maybe 4 years old); you will have more power, way less power consumption and way less noise.

I run it on a 4GB Fujitsu Futro S920! 😆 All the RAM seems to be used by 3 VMs. Some SWAP is been used, ok, but the Proxmox overhead doesn’t seem that much.

Totally agree! Also, at work we have some Synology and their web UI is soooo slow that it’s almost unusable

30/40€ Fujitsu Futro where you can install OPNsense, the AP you linked and you’re good to go!

Guys, read the article first! At least try, at the beginning it says:

Unless you self-host at home on your own NAS

Wasabi have similar pricing to glacier, but without the limitation

Or Wasabi