• 0 Posts
  • 526 Comments
Joined 2 年前
cake
Cake day: 2024年2月1日

help-circle

  • Maybe not a service in the typical sense, but setting up your router+server to route your home network traffic through a VPN is a fun project.

    My router (MikroTik) supports WireGuard, so I can use it with Mullvad for the whole house—but wg is demanding and it’s a slow router, so while it can NAT at ~1Gbps, it can’t do WireGuard at more than ~90Mbps. So, I set up WireGuard/Mullvad on a little SBC with a fast processor, and have my router use that instead. Using policy based routing and/or mangling, I can have different VLANs/subnets/individual hosts selectively routed through the VPN.

    It’s a fun exercise, not sure I implemented it in a smart way, but it works :)










  • This is actually the one that I would agree with (edit: see below), if the difference is “professional” vs. “academic.” I certainly wouldn’t call a natural science degree professional, and if you’re in a research institution studying some form of engineering I’d probably put you in the same category. Just my experience/opinion though (and the rest of the exclusions are super stupid, I agree).

    Edit: from the replies, this is referring to Professional Engineering; in my corner of the world, “Engineer” is an overloaded term that generally means electrical, mechanical, software, and sometimes computer engineer. My comment was referring to these engineers, who are rarely licensed and study alongside scientists in school. I completely agree with parent in the context of “professional engineering” (I mean…it’s right there in the name…).




  • VPS+VPN, this is what I do.

    VPS has public IP and runs WireGuard “server”* and a reverse proxy (and fail2ban…). Reverse proxy points to my home computer over the WireGuard link. No open ports on my home router.

    For private facing/LAN-only services I just don’t have an entry in the VPS reverse proxy. DNS on the router points everything to my local server, so if at home I access everything directly. To access internal services remotely requires VPN (i.e., WireGuard to the VPS).

    Works well; I have a tiny free tier VPS but even so, no complaints.

    *Yes I know there are no wg clients or servers, only peers, but it plays a server-likr role.


  • In a VHCOL area, $100k with one child is extremely tough/you’re likely dipping into savings. Our daycare alone is over $40k/yr per kid, and only $5k ($7500 next year) is fully tax exempt.

    Median 2 bedroom in my area is over $50k/yr.

    $100k doesn’t cut it. “Just move to a cheaper area” is IMHO not a proper response to this—anyone who works in my city should be able to afford to raise a family here, with a high quality of life/standard of living, but that’s not really the case.





  • xscreensaver of course! Note that this is not an option on Windows—jwz hates Microsoft, and any xscreensaver port to Windows is against his wishes.

    I use yabai and sketchybar for a tiling WM feel. It’s nowhere as nice as my preferred i3, but it’s ok. Unfortunately it often breaks with major OS updates, so I’m sure to hold back updating my system until yabai is working.

    IIRC sshfs will work on macOS but it’s more work to install. Worth it if allowed by your IT policies and your work can benefit from it.

    Vim, tmux, and the usual *NIX stuff you might want.

    The coreutils are not the GNU coreutils you typically find on a Linux system, so you may find a few differences. I believe sed is slightly different, and the flags for ls must be before the filename arguments, but I’ve found it’s mostly silly stuff like that (I used zsh before using macOS, so no problem there).