Gagootron

Even safe rust can do it, if we allow compiler bugs

That reminds me of PayPal. I can’t use my hardware sevurity key to log in on mobile… Unless I enable desktop mode in firefox. Then it works

It seems to that it works. I don’t get any web-scrapers hitting anything but my main domain. I can’t find any of my subdomains on google.

Please tell me how you believe that it works. Maybe i overlooked something…

Of course i get a bunch of scanners hitting ports 80 and 443. But if they don’t use the correct domain they all end up on an Nginx server hosting a static error page. Not much they can do there

I use good ol’ obscurity. My reverse proxy requires that the correct subdomain is used to access any service that I host and my domain has a wildcard entry. So if you access asdf.example.com you get an error, the same for directly accessing my ip, but going to jellyfin.example.com works. And since i don’t post my valid urls anywhere no web-scraper can find them. This filters out 99% of bots and the rest are handled using authelia and crowdsec

I mounted my zfs dataset in a Jellyfin VM using 9p. All the features of the host ZFS while still running in a VM