Ok so This is a bit outside my Caddy knowledge base, but I remember reading about the Caddy RealIP module: https://github.com/captncraig/caddy-realip. Sounds like maybe that would be something to investigate.

ETA: Oops looks like Darkassassin07 has you covered.

Can confirm. A lot of the old wifi drivers are missing from Debian 32 bit and OP will have to dig those up. I have an ancient Dell, 32 bit laptop I use when I am reading before bedtime. It didn’t have to be anything super nice, as I just read on that laptop. I installed Debian 32 bit, but the drivers were not available, and being as it was just barely a viable laptop that I’m trying to squeeze the last drops of usefulness out of it, I didn’t bother trying to find drivers. I dropped back and installed MX Linux. So, yeah, OP might need to do a little leg work.

This is a good point. I know there are a handful that my ISP blocks right off the bat. For me it’s 25,135,137, 138, 139, 445, 6666, 6667.

the simplest option is probably to just have Postfix deliver into a local mailbox and access that over IMAP

I already have sendmail on the server. Is there something special about Postfix? Just asking,I’ve never run Postfix and I’ve never had this experience before with a host. I guess they think that if they charge an extra 6 Euros to flip the switch, people wouldn’t use it for spam purposes. I’m bound and determined to figure out a workaround just because.

Would something like Mailu work. It runs in a docker container.

ETA: The client would be on my desktop in the form of Thunderbird. It lives on part of my tailnet. In theory, it would be ‘connected’, no?

She sure has a lot of domains tho. That’s not that unusual, just notable. I hope she finds inner peace.

opnSense and use that immediately after your new ISP device

This. It’s how I set up my local network, tho I went with pFsense and then hung Pi-Hole+unbound off the managed switch. I did have to set up a vlan just for my lady friend because, apparently, screens full of ads is exactly what she likes, and I don’t want to have to reinvent the wheel every time she comes over. So, I guess you could say it’s pain avoidance. LOL

nobody needs an 8Gb internet connection

The fuck you say…LOL.

As I mentioned, one man’s trash is another man’s treasure. One thing I don’t like about Contabo is that you can only maintain one snapshot at a time and there is no automatic way to create multiple snapshots. I did find an n8n flow that does just that.

One man’s dream VPS is another man’s nightmare VPS.

I do business with Contabo. They did raise my monthly by $1. I’m still with them, I have had no real issues with their service. I also do business with Ethernet Services. They are bare bones, no frills, hosters. I pay $25 per year with them so I don’t really expect that much in return except for keeping everything online and they do a fairly good job of it. Their service tickets are slow, but they’ll get around to you.

LuxVPS is my latest host. I get more bang for buck from them:

• Black Luxury Deal #1

• 4 vCores (Xeon Gold 6150)
  

• 26 GB DDR4 RAM
• 150 GB Raid 1 NVMe
• 1 Gbit internet speed | 40 TB Traffic
• 1x IPv4
• 1x /64 IPv6
• 3.2Tbit Premium DDoS Protection
• 24/7 Ticket Support
• 4 Backups
• For ONLY 10€/Mo (recurring)

Their only caveat is that you have to pay extra for mail ports.

If it was free, I’d say go for it. If it’s $100, you’re halfway to a much more capable machine

This very line of reasoning is why I cannot build cheap desktops. I’m always thinking ‘well you know, if you add another $100 you could have all of this’

Tailscale Healthcheck looks interesting.

If I understand you want iptables to be persistent across reboots? Would the following be useful?:

apt-get update -y && apt-get install iptables-persistent -y
service netfilter-persistent save

I have no clue about ansible as I have not explored that region of selfhosting yet. It’s on the list tho.

For the average consumer of AI, it’s a novelty at this point, even tho we have been using pieces parts of AI for a long while now. But it’s getting it’s stride in stuff like face swaps, neat tiktok videos, making weird pictures. I liken it to when ‘the cloud’ came to town. Hell, we’ve been uploading to servers and running apps on servers for a long while before ‘the cloud’ happened. Everyone and their brother trampled each other to move their entire operations to the cloud. Then, as the dust all settled, we started realizing that not everything that could be in the cloud, should be in the cloud, and so things got back to normal. But just the words ‘the cloud’ made CEOs jizz their pants at one time.

Sameie, sameie with AI. It’s a selling point. There was a thread here I believe, talking about an AI rice cooker. The ‘AI’ part sells it, even tho we’ve been making excellent rice for millennia. I use AI. I find it a faster way to cut through all the searches and give bulleted points to deviate from. I realize that it’s not best practice to rely on AI’s word, but use it as a springboard into further investigation.

That looks interesting. Might have to check it out.

…did I commit a grammatical faux pas?

Don’t forget to make a backup before any changes.

Absolutely, and now I know a little more about the process.

It’s been a good day 'tater.

Indeed I did. I had apparently screwed up the formatting of a couple of the entries. The associated apps worked on a daily basis, the certificate was visible, but apparently the improper formatting was enough to confuse Caddy when it came to renewing the cert. Looking at the backup Caddyfile verses the newly formatted Caddyfile, I had a couple braces out of whack.

ETA: what led to all of this was that two certs expired today, and everything I had previously read said that Caddy wouldn’t let that happen. Well it won’t if I don’t fatfinger the format next time

Well, I had a time wrapping my old head around Caddy. It took me an embarrassingly long time to get it, and one day the clouds cleared, and the sun shone through, and it made sense. I had no clue about the formater, but you can bet I’ve made some notes so I don’t do that shit again. LOL