@ariadne That could be integrated however, and the blocklist linked is for entire domains, so #Firewalling works...

But yeah I think these should be integrated and I'm convinced admins like @stux would prefer a smooth "setup & forget" option similar to #pfBlockerNG being integrated natively in #ActivityPub server software...

Cuz that works very well in almost all cases:
https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html

@yakkoj Have you ever considered using #Netplan?

#ItJust works and also does all the nice stuff, like #VLAN's and #Bonding...

https://netplan.io/

Personally, I prefer putting #firewalling into the #Networking segment and put a #pfSense, #tnsr or #OPNsense in between it and the Interwebz.

But Netplan allows you to go precise and i.e. specify that no incoming connections are permitted on the Storage-LAN used for iSCSI traffic at MTU 9k and other stuff...

This whole exercise has not made me feel safer in my #firewalling capabilities!!! 😎 . As a matter of fact it feels like my whole network is open!! I don't know.. I couldn't tell you!

#homelab #selfhosting #still #hate #networking

@lijn I forgot to mention all the other sort of related stuff.

Like #PVE, cloning of machines, #cloudinit, #firewalling, subnetting, vlan's, reverse proxies.

The goal now is to get #Pixelfed running as an Instagram alternative on beeldenaars.net. I might be looking into a #Mastodon #instance after that.

Are there #Helm charts for Pixelfed 🤔