Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)BM
Posts
0
Comments
914
Joined
2 yr. ago

  • When you put your server's tailscale IP in the dns, anything that looks up that dns gets the tailscale IP. You only need to connect the devices you want to have connect to the server to the same tailscale network, and your system will handle the routing.

  • On your DNS provider, make an A record with your IP address, AAAA record with your IPv6 address. If these addresses change often, either setup a dyndns (your DNS provider needs to support this) or pay for a Static IP from your ISP. Firewall the hell out of your network, have a default deny (drop) new inbound rule, and only open ports for your service. Use an nginx reverse proxy if possible to keep direct connections out of your service, and use containers (docker?) for your service(s). Don't forget to setup certbot and fail2ban. You need certbot to auto update your certs, and you need fail2ban to keep the automated login hacker bots from getting in.

    That's the minimum. You can do more with ip region blocking and such, as well as more advanced firewalling and isolation. Also possible to use Tailscale and point the DNS A record to the Tailscale IP, which will eliminate exposing your public IP to the internet.

  • Websites ending in .onion are on the Tor network. You need to be connected to and using Tor (The Onion Router, see the other comments) to be able to connect them.

    In short, Tor connects you to the internet by splitting bits of your connection across all the other Tor users. This makes it much harder to trace your activity if you are browsing anonymously (use the Tor Browser in its default configuration and window size, DO NOT SIGN INTO ANYTHING).

  • Privacy =/= Security. Windows XP might have good privacy (I would argue Windows 2000 is better for that, as it doesn't have Product Activation), but security is nonexistant in 2025 in either case. For malware, it's free real estate.