Of you already have a will the most secure, proof idiot way I’d to add that key + instructions to the will. Get some lawyers on board for that and it will work.
If you still have concerns about having the full key on a single place, add a topt or second way of identification and distribute it between your heirs.
Sometime, the old fahion way is the best one by far.
Totally agree with the first point, it is a limitation, and the guest wifi sticking to a eth port is just a patch. One that works but still a patch.
But I don’t see the point of the prefixes. What do you mean? I also have a custom domain and a local dns server y can use the domain even internally. I just simple ignore that…
True, but I would expect a soon end of life for those too
Fritzbox boxes.
They tick all the checkboxes
It is a well known brand in Germany but pretty unknown outside that country. Honestly it is the best bang for buck I was able to get.
Honestly, I would spend 10 minutes checking on them
A nas is your friend.
And there is plenty is space in the Caribbean Sea
No idea at all, but I am highly interested in your experience. So it would be great if you could came here back to share it with us
This is the answer
Yes, it will be enough if your services are not exposed via port forwarding , tailscale / zerotier are super convenient for this.
Honestly, if I were you I would start thinking in having a small computer just to act like a proxy / firewall of you synology, or even better, just run the applications on that computer and let the nas only serve files and data.
It is much easier to support, maintain and hardening a debain with a minimal intallation than nay synology box just because the amount of resources available to do so. In this easy way you could extent the life of your nas far beyond the end of life of the Sw
Don’t make it available from internet. This will solve the issue.
If it is not possible, once the cve is published and properly described, perhaps there is another way to secure it via an external proxy or even a waf.
If you have unsupported Sw, it is always a pain in the ass to keep them secure so try to figure out always the first point
Can someone be so kind to explain me what I am seeing?
Because it seems like I am not celvee enough to get it
The answer is mTLS.
But you will run into the key distribution problem. But if your number of devices is manageable, it could be the solution
This thing reduces the attack surface of the inmich installation.
If it is good, or bad or fitting to your security model can only be said by you. But honestly it sounds like a sensible thing to do
Even if you have a valid point, modern fingerprinting technics usually is done through your data and the connection dependencies of them (which accounts are activated from the sane computer and so on).
Selfhosting remove some links between your data set like the files you store in drive, the people who appear in your photos, your contact list, to whom you email… Etc etc
Suddenly all this data is vanishing from the big techs, so, in theory it would be possible to make that association process more difficult
Then follow that path, once you are comfortable with the approach you can start hosting more and more services,to the point that you can selfhost your own messenger services or ms teams services.
Once you are in that situation, you can think in accounts rotation and/or burner identities to address the services you can not pull from the big techs
OK, thanks for the feedback. Perhaps I am doing something terrible wrong with it.
I will recheck the system again.
Thanks
You need to start reducing your fingerprint on internet.
The only reliable way to do so is selfhosting your stuff.
There are a few communities here in lemmy, so check on them
Would you mind to elaborate a bit more about your experience witht he sophos?
I got a reused xgs115 a few months ago and I found the experience not so pleasant. The device lags a lot with the web page interface, the learning curve is steep in my opinion and I have problems to setup some services in a reliable way (they tends to hangs up, but this is perhaps my own problem)
Do you know by chance if they are able to have the Ds-lite tunnel for an ipv6 to ipv4 working?
How the average quality from those IKEA plugs?
In my experience Ikea quality in electronics range from ok to a big ball of crap without any apparent way to distinguish in which side they are.
Thank for the suggestions, I will take a look because it is true that I focused myself on the link manager but perhaps a link sync tool could do the job.
Thanks again
Well, I don’t know how many online interactions you have. But has you ever imagined that perhaps the feedback you received here is actually the average of the people?
In these days is quite difficult to calibrate the crowd feeling for the insane amounts of echo chambers, the mass media crating opinion instead of informing and personal biases.
Usually, everybody of us is quite biased by our own interactions and knowledge of how the world worked around us. But those interactions are mainly defined by your social status, place of birth or simply where we live. By the specific details of people who debate in internet (probably accommodate urban person) it is possible that those ideas lean into a specific direction. But once again, it could be that you are simple realizing you are not with the majority