• 0 Posts
  • 16 Comments
Joined 2 months ago
cake
Cake day: September 30th, 2025

help-circle



  • It doesn’t really matter how you setup dynamic DNS and SSL. I prefer to handle dynamic DNS on the router, incase it’s smart enough to refresh the IP after DHCP renews it. I do SSL on a seperate nginx instance, but I run a few other sites; it might be easier to configure it directly on home assistant, but I haven’t tried.

    If you want some extra security, I’d look into mTLS, as that establishes some cert based authentication at the TLS layer before HTTP, but it can be complicated to configure.


  • on these atomic distros where even something like syncthing involves shenanigans to keep active week to week? Ain’t happening.

    I don’t see why you couldn’t kexec into a new kernel. kexec will load a kernel into memory from an already running kernel, and jump into it. It’ll suck for the user as they’ll have to semi-reboot everytime they want HDMI 2.1, but it’s easy and doesn’t install anything.

    There’s also live patching, but I think that’ll be a bit of work.

    Of course the kernel needs to be compiled with those options enabled, but most distros do.

    Edit: And they probably won’t work with kernel lockdown/secure boot.



  • You’re going to have a hard time trying to get that working over the WAN (if that’s even possible).

    Wake on LAN is still encapsulated in an IP packet, so you can send it over the internet, and most WOL clients let you specify an IP. However your router will need to DNAT it to a broadcast address. Some routers have a check box for this (e.g. An ISP provided Technicolor router I have), some let you port forward to broadcast (e.g. Many routers, sometimes with workarounds), and some let you manually configure NAT (e.g. MikroTik routers).

    So it is possible, but forwarding public internet traffic to a broadcast address seems like a bad idea, and I wouldn’t recommend it. Why I know this: I used to do this in middle school, and it does work quite well.








  • And I feel like it’s not a good idea to have a modem directly attached to the pc directly unless you’re using it as a router?

    Yeah I feel like this is the issue. The modem/router would be firewalling between the networks hiding the PC behind it.

    Also from the description, does OP have a router at all? Is their ISP somehow just allocating public IPs to everything? Do your IPs start with 192.168 or something else?