The company behind pfSense is shady as hell:

https://opnsense.org/opnsense-com/

Also the complete and utter clusterfuck of an attempt to bring Wireguard into the FreeBSD kernel:

https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/

What kind of ISP are you dealing with?

And maybe PPPoE.

traceroute --mtu 1.1.1.1

Pick the lowest value displayed for F=xxxx like e.g F=1492 and subtract 80.

For my DSL connection the optimal value is 1412.

nonfree drivers accessible right away

Non-free firmware is included in the Debian installer since Bookworm.

Do you really know how Wireguard works?

Updating without a reboot only works for wireguard-go. The default implementation runs in the kernel. An update to it would require kernel live patching.

Wireguard doesn’t answer to unsigned packets. Using obscure ports or even port knocking is rather pointless. It’s indistinguishable from a closed port.

I’d rather take Casaos out of the equation and target Ubuntus’ Wireguard stack instead.

Jellyfin is completely free. I only used it shortly in my LAN environment so I can’t give you any numbers. It should roughly be in the same ballpark as plex though.

You can skip fail2ban for SSH. I missed the important bit. Duh…

Never used Plex but had a good experience with Jellyfin.

Just a few thoughts:

• don’t cheap out. Building your whole stack on top of free or ultra budget providers is going to backfire eventually
• check the traffic limits if you want to stream 4k content from your NAS
• if latency and bandwidth is a concern, you need to select a VPS provider with good peering. This fully depends on your ISP.
• i’d recommend setting things up with split DNS. Your DNS server would answer with local IPs for queries from within your LAN and with the IP of the VPS for external queries.
• take a look at AdGuard Home
• you can skip fail2ban if you go straight for ssh keys
• 100% wireguard

https://serverfault.com/a/1112627

Why are you running two HAProxy instances? You should be able to forward the traffic on your VPS to your homeserver with a firewall rule.

If that’s not an option, this should still be doable using the X-Forwarded-For header. Instead of setting it to single value, you need to append to it:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For#syntax

He’s stating the obvious. It’s no more threatening than saying you’ll burn your hand if you touch the hot stove.

Is it still tone deaf? Absolutely.

“Don’t allow others to join your defense pact or we’ll demonstrate why it’s necessary in the first place.”

Perfectly sane logic. Nothing strange.

I’m a fan of AfB: https://www.afbshop.de/gebrauchte-pcs/mini-pc

https://www.afb-group.de/ueber-uns/

“humming along” is very different from “not collapsing”.

watching a video about how the Russian economy is humming along

Source?

It is morally questionable, yes. But we are not talking about hundreds of thousands of refugees with luxury cars. In every conflict there are people with a golden parachute.

All you liberals give cons

All this my team, your team rhetoric…

Honest question, but how many times a day do you think about events and try to fit them into one of these two categories? At what point do you start using these terms interchangeably for good and evil?

These days, I try to skip posts from people who crossed that line. Left, right or centre. If someone has limited their mental capacity to binary decisions, it’s not worth arguing with them, because the answer to everything will always be “my team”.

So where are you on the other refugees who get nothing

We didn’t buy those cars for them if that’s what you’re trying to imply here. Being a refugee doesn’t mean that you leave your country without any possessions or money.

and are from even close countries than Ukraine? They get nothing because they’re not white, right?

I’m not aware of any bonus for Ukrainian refugees that would set them apart from others. But feel free to cough up some facts.

They are at the image of their president, arrogant and ungrateful.

Look at Mr Worldwide over here who knows each and every Ukrainian.

I’m just an european taxpayer pissed of!

Sure.

I’d be happy if Russia would simply send its soldiers home.