The same dude:

https://youtube.com/watch?v=swtmrtC5yx4

Russia is DESTROYING NATO as Putin Rejects Europe for Global South

tl;dr: Russian mouthpiece says whatever he’s paid to say

The company behind pfSense is shady as hell:

https://opnsense.org/opnsense-com/

Also the complete and utter clusterfuck of an attempt to bring Wireguard into the FreeBSD kernel:

https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/

Milei surely chose him because he is the best in his field. The whole neo-Nazi background is pure coincidence and wasn’t the reason why the right-wing lunatic chose him. /s

Why would you? You don’t have to wipe anymore.

Speed has never killed anyone. Suddenly becoming stationary, that’s what gets you.

Sounds like an election during war time is a pretty fucking bad idea.

The 14th amendment in the US and the 1864 election happened in war time.

On a scale of 0 to 10, how likely were civilian areas to be hit by artillery shells and rockets during the civil war?

Hint: the maximum range of a cannon at that time was barely a mile.

Gnomes built-in RDP should work. There’s also RustDesk which offers proper Wayland support.

Heimbüro: aus meinen kalten toten Händen

What kind of ISP are you dealing with?

And maybe PPPoE.

traceroute --mtu 1.1.1.1

Pick the lowest value displayed for F=xxxx like e.g F=1492 and subtract 80.

For my DSL connection the optimal value is 1412.

Aber sie wird ja eh nicht mit ihrer Partei stärkste Kraft

Ähnliche Aussagen über die AFD sind schlecht gealtert. Da war das Kredo auch immer “ach, die paar Spinner”.

https://youtube.com/watch?v=o_AIw9bGogo

nonfree drivers accessible right away

Non-free firmware is included in the Debian installer since Bookworm.

Do you really know how Wireguard works?

Updating without a reboot only works for wireguard-go. The default implementation runs in the kernel. An update to it would require kernel live patching.

Wireguard doesn’t answer to unsigned packets. Using obscure ports or even port knocking is rather pointless. It’s indistinguishable from a closed port.

I’d rather take Casaos out of the equation and target Ubuntus’ Wireguard stack instead.

Protocol ossification is a huge problem. That’s one of the reasons why the IETF went with the UDP based QUIC for HTTP/3.

Shelter?

Jellyfin is completely free. I only used it shortly in my LAN environment so I can’t give you any numbers. It should roughly be in the same ballpark as plex though.

You can skip fail2ban for SSH. I missed the important bit. Duh…

Never used Plex but had a good experience with Jellyfin.

Just a few thoughts:

• don’t cheap out. Building your whole stack on top of free or ultra budget providers is going to backfire eventually
• check the traffic limits if you want to stream 4k content from your NAS
• if latency and bandwidth is a concern, you need to select a VPS provider with good peering. This fully depends on your ISP.
• i’d recommend setting things up with split DNS. Your DNS server would answer with local IPs for queries from within your LAN and with the IP of the VPS for external queries.
• take a look at AdGuard Home
• you can skip fail2ban if you go straight for ssh keys
• 100% wireguard