Not familiar with opnSense, but on your PC, you can check the address it assigns - if it’s /128, it’s a single address.
My ISP does not assign a prefix for delegation unless you specifically ask for it. I had to add “request_prefix 1” to my dhclient.conf file to get a /64 I assume opnSense has a friendly setting somewhere for that. For me, the key phrase was ‘prefix delegation.’ After I got that, I could search around and get my solution.
He believes he is the smartest person in any room - great genes, uncle at MIT. He thinks we are more stupid than he is.
Whatever else comes out of the 2020s, I like that the era of ‘superpowers’ is pretty clearly over. The former Soviet Union can’t bring one of its former soviets back into the fold. The USA can’t get a regional power to roll over.
I hope that means a lot more coalition building among the regional powers. Actual compromise and consensus among people with different perspectives. I hope that means less kowtowing to Washington, Moscow, maybe even Beijing, because letting one nation tell the rest of the world what to do just sucks. We can get a lot more done working together than following a bully.
As an American, if that means giving up the global privilege I’ve had, being the ‘default currency,’ the ‘default language,’ and the ‘default rule,’ then I’ll suffer through it. Maybe it will even help us focus on fixing our domestic problems as they grow to crisis proportions.
Beyond “whomever holds the highest office at the moment,” there’s “whomever gets the biggest media coverage.” That might be Gavin Newsom, who’s not very popular, even in his home state. Bernie Sanders and AOC always get good coverage, but that’s partly because they’re so far outside the mainstream.
US isn’t really set up for singular leaders at the national level, which is part of what makes Trump so unusual.
I’m trying to imagine Mohammad bin Salman or Kim Ju Ae going on a “re-elect President Trump” tour of the US. I can’t imagine it would be received well by either party. Can’t imagine why JD thinks this is a good idea. Maybe I’m just not that good at imagining.
Grandma in a body bag. Can she get a military funeral as a casualty of the war?
From the GOP perspective, this explains why Colorado is a Democratic island in the otherwise “real American” range states. They probably tell each other that without all the fake, mail-in ballots, Colorado would be as red as Wyoming and Utah.
Also possible that Daily Mail found it out from foreign intelligence, maybe even as a consequence of Noem losing her value as a source.
Logging power use by my server was one of the motivators to add homeassistant. That also showed me that specific containers use a (relative) ton of background power. Immich and authentik each raised power consumption by 2-3 watts, so I leave them down unless I have specific need.
Donors will abandon hmi for not supporting Israel. Voters will abandon him for supporting apartheid & genocide.
It’s not gambling if you’ve rigged the game.
On the one hand, death (or murder) of expertise is one of the things that got us here. On the other, you don’t need an expert to tell you that a car is on fire.
If you only need it to be accessible inside your home, then you just need to run your own DNS. Have your dhcp point at your DNS and your DNS declare itself the master for your domain.
To get full functionality, you’ll probably want to have your registrar point to the public IP you get from your ISP as the domain’s authoritative name server.You should be able to script it to update the registrar when your ISP changes your IP, but that usually happens infrequently enough to do manually. Obviously can’t do that if you’re behind CGNAT.
To get Lets Encrypt certificates, you can do the DNS challenge. If your ISP gives you a (even inconsistent) public IP, you can do fancy ‘views’ with your selfhosted DNS, where it responds with private IPs inside your network and your ISP-given IP outside your network. I have certbot set up to expose my DNS & web server just before it starts its renewal process, then close the firewall after. Once you have the certificate, you can move it to where ever it will actually be used.
Rats fleeing the sinking ship is exactly what we need.
I’m not saying to forgive and forget the past, but it has to be possible for the rats to jump ship. If we just trap them all in a corner, then we give up any chance of peaceful transition of power. Hold them responsible for what they’ve done so far; not for what might happen next.
To me, the nonstandard port is mostly nice for reducing log spam from scripts. The risk is that using a nonstandard port lulls one into a false sense of security and overlook good sshd practices. Good sshd practices will prevent the script-kiddies just as well as the non-standard port, while a non-standard port will not challenge a targeted attack. And, if you interact with multiple servers, it can be inconvenient to remember a different port for each one.
They haven’t chosen the next democrat yet. Now is the time to be screaming that no one wants another corporate democrat, but we sure would love someone to come in and clean house and support working people.
Lemmy is social media, too.
The problem isn’t social media. The problem is profit-driven monopolies incentivized to promote high-emotion content. The problem, more generally, is monopolies that no one has hindered since 1974.
Pretty sure he just thinks he, personally, gets all the tariff money, because he’s incapable of distinguishing between himself and the organizations he runs.
I don’t know how the others set theirs up, but I use “views” in bind 9 https://kb.isc.org/docs/aa-00851
Essentially, the DNS I run on a router-like box much like you describe uses a different database depending on whether you query from an internal IP address or a public address. For me, the advantages are that I can let devices on my local network declare their own names to DHCP and enter them in DNS without worrying about the outside world. Mu internal network doesn’t crash if my ISP changes my address, Certbot happily requests certs for any site with a public address, and that cert works seamlessly on the corresponding internal address, no wildcards or DNS challenge required.