• 16 Posts
  • 73 Comments
Joined 4 years ago
cake
Cake day: January 3rd, 2022

help-circle




  • I’m a fairly advanced user of gnu Linux distros at this point in my life. Fedora is no where close to straightforward for gaming. Bazzite is plug and play set and forget. Is it frustrating to deal with flatpaks and osm-tree instead of simply using a standard package manager? Sometimes, sure. But for an absolute beginner there really is no better option for gaming as a fresh convert from windows.

    Audio problems and nvidia drivers can be an absolute nightmare on almost all major distros from Debian to Ubuntu, to fedora if you don’t have an absurdly advanced grasp of the processes underlying.

    Bazitte takes all of that out of the picture. It’s absolutely not a meme distro. It’s perfect for an average tech literate person.

    I use arch btw, Debian, fedora, Pop, lubuntu, Ubuntu, and a half dozen other distros on a daily basis across a handful of devices. So I’m not daily driving Bazitte, but for gaming and general purpose computing there’s no simpler distro imo and I’ll die on that hill.






  • This is fine unless you have a slightly higher threat model.

    Me personally, I dislike the idea that if someone (VPS provider or LE) were to snoop inside my VPS, they would have all of my unencrypted data where TLS ends and wireguard picks it up.

    I don’t do anything illegal, but I do have photos, personal files, and deeply personal journals/notes for which I enjoy the comfort of mind when kept private and secure.

    My recommendation is always to have your TLS equipped reverse proxy on your own hardware. Then use a VPS as a SSL passthrough proxy that forwards requests to the locally hosted reverse proxy. You can connect the two via wireguard.

    This has a few benefits. It keeps encryption end to end. It also allows you to connect to your server via your domain name even in you LAN. You can hijack your domain at the router level DNS menu to reroute to your local reverse proxy. And it keeps the TLS connection.






  • There’s a few apps I need to split out. Top priority is the signiant app which according to their documentation requires various AWS subdomains as well as their own. Specific subdomains are not specified and are implied to change regularly/on demand.

    In an ideal world I would do my split tunneling on the device itself, but I don’t trust Windows and thus I run my VPN at the router level.

    This isn’t a problem for most things, but I need to utilize my full bandwidth to transfer large files to clients in a timely manner, and a VPN becomes a massive bottleneck.

    Pfsense lets you alias by domain name (I believe it regularly resolves down to an IP and uses that for filtering), but again, you need to supply the exact subdomain.

    Just wondering if there’s an alternative solution to this issue. If it’s external to pfsense that’s not the end of the world.

    Worst case scenario, I would set up a dedicated Linux box or maybe even a VM which could share access to the file transfer NAS and split tunnel the entire box around the VPN. Definitely less convenient.







  • We’ve all been there. It’s super frustrating but once you’ve attained enough experience with a Linux OS you come to appreciate it and the problems either become less impactful or disappear as you learn to anticipate your actions causing said issues and adjust your behavior accordingly.

    I’ve been a Windows user for multitudes longer than I’ve been a Linux user. It took me a few years to become a fairly advanced user of Linux. When I occasionally have to use Windows for work I still struggle to troubleshoot anything and am constantly frustrated knowing a task I’m doing could be many times simpler if I was on Linux.