The idea rocks… Love it!

… Something that added to a Gentoo distribution would be amazing …

I would do it. Its fun…

Will you mess up? Yes. Who cares, Do it, just ensure its data you can lose no worries.

I would host on a vps, just to keep you home safe from swat raids (assuming you in the us, other nations should be safe).

Never had issues. Both with nvidia and Intel cards.

Link doesn’t seems to point to a product

I know, what a pity

On Conduwuit here… Synapse is a PITA.

Podman works with nft, not iptables. Ufw iirc uses iptables (iptables can work as a subset of nft, so there is that too).

Try a different firewall tool, or use nft directly

If your containers are bound to 127.0.0.1 and you only have a reverse proxy on 443, you probably don’t even really need a firewall.

Run rootless podman and segregate each container stack on its own network, podman will take care of it for you.

Yes, something like that. A non profit foundation would be mandatory.

Yeah, that is something I keep thinking. I need a way to keep all that working somehow.

Maybe a foundation, to keep personal data for future research scope, or general knowledge. Its sad that all that will go to waste.

I see you are on Lemmy.world, keep in mind self hosting your Lemmy will bypass the heavy censorship going on on Lemmy.world in terms of defederation.

For example another great community and very active is the pirate community on db0, which is banned on your current instance. And not the only one.

Not that “alternatively young” but the difference is slight here.

Yeah I self host my Lemmy because why not? As well I self host my matrix with bridges to all main chat closed ecosystems because why not?

At least my descendants will own all my comments and posts.

And I also host (not at home, but on vps) my email because why not.

Do you really need any other reason to?

Also, Lemmy rocks, this community is one of the best and more active.

You can edit your posts, you know :)

I fully agree with you…

Its just complex.

I hate it for my Android device maintainer role much more than my Linux admin role…

On Android, its a fucking mess between vendor stuff and system stuff. But not for selinux itself, but for the mess that vendors often do.

I think you got it wrong. Nft is replacing iptables. Ufw is only a frontend.

Actually, your uoyabled might just be a wrapper on nft.

You don’t. Providing you have an upstream gateway that do the firewall for you, provided you don’t have an open WiFi, provided you use a reverse proxy, provided you have sane network settings all around, provided you run linux(or similar).

Even better if you are behind CGNAT.

Provided you know what you are doing.

On the other hand, setting up a firewall in a safe way is no easy task either.

I use an opnSense on top of my home network, given all the above “provided”.

Before that, I never run a firewall and never had an issue. Always being cg-nat tough.

Hard to say, unless you give us more on why and where you failed!

Gentoo lover and long time user here, OpenRC only.

Feel free to pm/DM me for any question in general.

I use Genkernel, works like a charm.

I am pretty sure it would be impossible.

That connection I expect to be secured by using signature keys that are private and would need to be released by Tesla to allow anybody connect its car to a different back end.

Love summit, glad to hear this welcome evolution.