Mm I also got probes for WordPress a month or so ago, but after I switched from Cloudflare to Mythic Beasts. Have you switched off the setting that says Cloudflare will allow known AI bots to trawl your domains?

Aha, I disabled the LEDs by unplugging them from the motherboard, you could do the same with the power sw plugs

A lot of folk decry Cloudflare as a terrible corp (and their AI push now involves the login page shunted to the side while 70% of the screen is a relatively blank section with some sentence about using their AI), but what is the non-3rd party alternative? Does one rely on sharing the IP instead? It is impossible to have public (non-family) traffic without a Cloudflare/Google DNS resolver right?

Being on a standard ISP I cannot use a higher-level rDNS.

Nice that’s similar to my setup! As for a website hub yours looks neat, mine is plain as hell unless you’re a family member, thanks to Authelia – but making public info is on my todo list – I tried custom-building a website many years back and adapted that. (If anyone discovers security flaws please lmk, but I’m preeetty sure I did good)

Gonna share mine :3

• i3 6100 (2 cores, 4 threads), iGPU passthrough to a LibreELEC VM so I could finally replace the Google CCwGTV 4K*)
• 24GB of RAM (16GB+8GB, mobo is ITX so that’s it)
• RTX 3060 12GB (handles GPU-accelerated processing with GPU passthrough to Emby and LLM LXC’s)
• 256GB Samsung 850 Evo SATA SSD for everything but media
• SATA HDDs for media:

1. Shucked Barracuda Pro 10TB
2. Ironwolf Pro 20TB
3. Ironwolf Pro 24TB

• Proxmox 9.2.3, kernel 7.0.6-2 (not quite sure why it’s not using .14)

Once I can upgrade my 2017 flagship to a 2027 midrange I’ll be transferring the i7-7700K and the other half of the 2x16 RAM, and I’m in dire need of more storage so a 30TB Ironwolf is in my sights (but fuck, it’s 2x its pre AI-pocalypse price (aka Sep 2025).

Interesting, I figured people would use MySQL instead if possible.

The only thing I know about apparmour is that it breaks some permissions for a couple of my machines, and I have to disable them in the container config in order for them to boot

Welcome to the club! It looks like the other recommended solutions have a UI for browsing as well, which is cool. As it is my ytdl-sub feeds into a library for Emby so I personally don’t need another UI, but it is tempting. Only issue I could see is the same one I had to fix: Some videos only had AV1 available, and support for AV1 encoding only begins at the very recent Intel Core Ultra and AMD 7040 CPUs. Without those even 720p playback is laggy af… I have an RTX 3060 at my disposal for HW transcoding but who knows if those YouTube archiver/players support it

Edit: Just did some research, it seems that the other services don’t have support for HW transcoding or multiple users. And they are much more resource-intensive than ytdl-sub + Emby

Having dabbled with remote codes I can only assume that the remote sends a different, albeit common, signal. My Chromecast remote for example does not send (via Bluetooth) a traditional signal code for power, but a signal name that only is recognised by some devices.

Wow thanks!! Looks like it works with 6-9 numbers

What do you do, randomise it every year?

How much would gofu.ckyour.self go for I wonder. And how does artificial popularity inflation even work on a domain, like how does a name go from £5/yr to £2,500/yr

I kept all my certificates separate - have I been wasting time with 15 subdomains each with their own cert and A record? I have wondered. And then set in my reverse proxy a single domain.tld cert for each entry? TIA.

I wrote bash scripts to run via cron to keep my IPs updated, using Cloudflare API. It’s probably useful to other folk but as I used to need just v4 addresses I made one separate script for v4 IPs, v6 IPs and proxied, but it wouldn’t take long to combine. Here’s my v4:

#!/bin/bash
CLOUDFLARE_API_TOKEN="<api_here>"
ZONE_ID="<zone_id_here"
DOMAINS=({subdomains.,www.}domain.tld)
log="/opt/ddns/log_$(date +%F).txt"
result=""
CURL="/usr/bin/curl"
JQ="/usr/bin/jq"
IP=$($CURL -s http://ipv4.icanhazip.com/)
echo $(date +"%FT%T")>>$log
echo "Performing v4 proxied domain IP address check...">>$log

# Get v4 records
for DNS_RECORD in ${DOMAINS[@]}; do
DNS_RECORD_ID=$($CURL -s -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records?type=A&name=$DNS_RECORD" \
  -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
  -H "Content-Type: application/json" | $JQ -r '{"result"}[] | .[0] | .id')

# Get each record's IP
current_ip=$($CURL -s -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records/$DNS_RECORD_ID" \
  -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
  -H "Content-Type: application/json" | $JQ -r '.result.content')

# Check if the IP addresses are different
if [[ "$IP" == "$current_ip" ]] || [[ "$IP" == "" ]]; then
  continue
fi

echo "IP address for $DNS_RECORD has changed from $current_ip to $IP. Updating record...">>$log
result="$result${DNS_RECORD%%.*}, "

# Sets the new IP if different
response=$($CURL -s -X PUT "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records/$DNS_RECORD_ID" \
  -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
  -H "Content-Type: application/json" \
  --data '{
    "type": "'"A"'",
    "name": "'"$DNS_RECORD"'",
    "content": "'"$IP"'",
    "ttl": 120,
    "proxied": true
  }')

if [[ $response == *"\"success\":true"* ]]; then
echo "DNS record updated successfully">>$log
else
echo "Failed to update DNS record for $DNS_RECORD. Response: $response">>$log
result="$result\nFailed. See log."
fi

# Sends information to webhook
unset DNS_RECORD_ID
done
if [ -n "$result" ]; then
  $CURL -X POST -d '{"result": "'"$result"'\n'"$current_ip"' -> '"$IP"'"}' "<home_assistant_local_webhook-delete_this_block_if_unwanted>" -H "Content-Type:application/json"
fi
echo $result>>$log
echo $'Done.\n'>>$log
/opt/ddns/cloudflare_ddns_v4_direct.sh # This triggers the next script

I second this! I’ve learned to note everything down during my experience installing services with Proxmox, and have recently started converting my notes to Public guides, just in case it helps anyone to not start from scratch

I guess porkbun, being the least renowned name, is the weak link. Companies blaming each other is all too familiar…

I have a .uk via Cloudflare and never needed to give proof, but I did buy it several years ago

Them and Amazon Web Services. Every single “83c92b227da1a9e337ef305b1f99f42418af47e96edb2960d01a7ed26d35eec.us-east-1.prod.service.minerva.devices.a2z.com” and “awstrack.me” URL. They’re so heavily integrated.

Also if you have your own net filter like PiHole or AdGuard Home with DNS rewrites set up, and you use it as a DNS server in WiFi settings, then it works a small bit differently. (I need to do this because my current ISP removed their DNS settings page for the new model). A public IP and NAT routing is never needed, as the device contacts the DNS server via the router Access Point, and the DNS server translates the service’s FQDN into its internal IP. Aside from that, provided everything is set up correctly, all actual data packets go from device ←→ router ←→ service. If the router lost connection to the Internet this wouldn’t break communications.

I’m in the middle of perfecting a guide for one type of Matrix server, based on my own experience (Proxmox LXC, Continuwuity, token based registration), will update this with a link (placeholder comment)

I was at this point for a while, believing gaming on Linux wasn’t up to par, until I discovered that Linux has a decent translation layer (Proton/Wine) that means even though the vast majority of Steam games are Windows only, Steam or other launchers like Heroic just run them in a container, and from my experience none of my games have had issues. This has only improved massively over the years.

+1 for Hyper-V, despite being glitchy and only sustaining Home Assistant for about 12 hours this and VirtualBox were my best chance at self hosting VMs on a Windows host. The problem wasn’t the virtualization, but the rest of the OS and its persistent maintenance cycles. Antivirus (MsMpEng.exe) and its NTFS scanning running more and more resources until the CPU was clogged. OP has gotta start somewhere.