sardaukar

I couldn’t do this with OPNSense, but you can do it with nginx, without TLS termination https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html I just used a separate Linux VM for it

Wrote a blog post today with a working example https://blog.nootch.net/post/my-home-network-setup-in-2024/

I’m getting real “people person” vibes here.

Boeing’s stock kept rising in the last 10 years, because they were sacrificing what they should be doing for shareholder value. Stock price alone is not a good metric for companies.

I’m not supporting them, I haven’t bought anything from Blizzard since the last Protoss SC2 game ages ago. But I don’t want to lose access to my games.

It’s not that easy. My Blizzard account is over 10 years old - never thought they’d go down hill so much. What’s the solution, to never create accounts online anywhere? Even if a service looks good and you support it, a corporation like Activision can come along and have their asshole CEO infect everything.

Walking away from my account now means throwing away a lot of money spent on it.

Yes, it would cause downtime for the one being migrated - right? Or does that not count as downtime?

You’ve never had to run migrations that lock tables or rebuild an index in two decades?

The official Postgres Docker image is geared towards single database per instance for several reasons - security through isolation and the ability to run different versions easily on the same server chief among them. The performance overhead is negligible.

And about devs not supporting custom installation methods, I’m more inclined to think it’s for lack of time to support every individual native setup and just responding to tickets about their official one (which also is why Docker exists in the first place).

I used to be a sysadmin in 2002/3 and let me tell you - Docker makes all that menial, boring work go away and services just work. Which is want I want, instead of messing with php.ini extensions or iptables custom rules.

Not really. The docker-compose file has services in it, and they’re separate from eachother. If I want to update sonarr but not jellyfin (or its DB service) I can.