The reason I want to preserve the IP is mostly for fancy graphana plots and tracability.
X-Forwarded-For is great but only works for http/https.
Also I would like to keep the https termination on machine B.
I was hoping for a solution which allows for other protocols not just https and http. I will take a closer look at grok.
A ssh tunnel could work. I didn't think of that. I will have to test how this interacts with docker but I think it must be setup directly on the host.
I don't think the ssh tunnel limitation applies since the service will still be reachable from As local network. Speed might be a concern but I will have to test.
I don't want to defend current ai art but writing sentences falls under art for me even if they get adapted on their way to the final product.
Though I also think programmers, knitters... can create art.
An AI use case I think is OK and is art. Is using your own sketches and ideas and taking them to the finish by filling in the background or coloring/shading it.
Edit:
On another note.
Let's look at it from the perspective of an indie game developer using Godot.
He programs his game logic finishes his sketches with ai.
Generates materials with ai and maybe even 3d models in the future.
He won't hire artists.
So they don't get paid.
However he also uses insane amounts of open source libraries written by thousands of programmers. They don't get anything either.
If he is kind they get attribution maybe some will even get donations.
The indie dev could create something he would not have been able to create without these technologies.
A big corporation creating AAA games can also cut costs massivly.
Absuing the work of artists by using their data without paying. These companies also take from open source and give nothing back.
I think the abuse of artists that is starting to happen, is very similar to the abuse open source has been suffering for a long time.
My samsung laptop has no way to change the backlight from Linux so it stays off.
If only there were a way to this in a standardized way (acpi) samsung?
Hahah thanks. I can do it if think about and I know the rules. It just doesn't come naturally to me. I have to make a conscious effort to get it right.
Yes. That is possible.
However if the hardware configuration/software configuration changes the TPM should trip and prevent decryption.
The attackers would have to break you ssh/terminal/lock screen/other insecure software. However code injection should be impossible because you used custom secure boot keys and ideally a signed unified kernel image. (Can't even change kernel params without tripping TPM.)
You would not be safe if they did a bus listening attack or if your shell pwd is not safe. If that is your threat vector this may not be a good option for you.
I have only played FTL for ~100 hours but I can still remember most of it. FTL is a roguelike space game where you assume the role of captain. I really feel connected to my crew and never abandon hopeless runs. I always go down with my crew. This is the one game (and Magicite and Into the breach) where I really enjoy the ironman no save scum mechanics. Making it out of bad situations feels so rewarding. 🤩
I have heard of it seems like a good option. If you use it please tell me if it can fullfil my requirements.
Mhh I didn't know headscale exists. Tailscale being proprietary was the main thing keeping me from using it.