I’m paranoid so I have created a physically separate network for the IoT stuff. Everything gets its IP from the same server from a /25. The lower is the trusted network, high IPs are not. IoT network devices cannot open connections to the other network. A bit awkward, but works fine.

I don’t see how VLANs would help OP.

I agree, people come here to learn. Don’t gatekeep information.

The first sentence is not really true though.

“Hey Bob, you did add a retry when you added that call to service X?

Umm, no?

Oh for fuck’s sake!”

All the fucking time.

time to do some perf profiling

Connect using 2.4GHz, create own network with the 5GHz antenna?

How about doing your job instead of copypasting shit? Jeez.

Yeah, but it’s a proposal, so not really better that .lan.

There’s a draft rfc that defines “.home.arpa” as an internal. It looks stupid and totally misses the point, but works.

AFAIK it’s a planned feature for Forgejo

In theory 🤡

A multitude of things are far easier to do on Kubernetes. If you combine it with an immutable OS, then less effort too.

People can see what domains you use with TLS, but that could be OK: https://letsencrypt.org/docs/ct-logs/