I'm aware it isn't designed to be a sandbox, I'm just betting that the typical exploiter wouldn't target wine past writing stuff into mounted filesystems. So at most they'd wreck the proton prefix and perhaps spawn a few processes within it.
I'm aware that this isn't how DNS works, but I'd imagine it is possible to have a DNS server that when it receives a query from the internet looks at the requested domain and translates it to an internal domain and in turn query that one, returning the result without revealing the internal domain. Something like a ALIAS virtual record provided by some services (but wont work against a internal DNS).
As for Traefik acting as a reverse proxy for internal network addresses, yeah that's the way it works. However in this case I have several instances of Traefik running on a subset of IP-addresses on a public subnet. So essentially we want to loadbalance several Traefik loadbalancers using DNS.
Is it really a problem that they want to stay faithful to the original game? You say it yourself that FIRS is available as an option for people who want something more advanced to work with, along with all the other NewGRFs.
What do you mean by "a block of external phone numbers?" We'd like to simply have our own internal numbers ideally, nothing to connect to the regular phone network.
Less that, more just going over to the side to let faster vehicles pass and then continuing on. It is just common courtesy to everyone else driving faster vehicles, and is at least something taught to do in Swedish driving schools.
I'd say the main benefit gained is sovereignty and a sense of place. This is not for personal use, but rather for a computer enthusiast association that I'm part of, so having our own git to integrate with the rest of our services makes sense. Throw on branding and link it to our SSO.
freddo @ freddo @feddit.nu Posts 19Comments 19Joined 2 yr. ago 
I'm aware it isn't designed to be a sandbox, I'm just betting that the typical exploiter wouldn't target wine past writing stuff into mounted filesystems. So at most they'd wreck the proton prefix and perhaps spawn a few processes within it.