Ok so it is fully qualified then? I’m just confused because it sounded like you were saying I wasn’t using the term correctly in your other comment.

Hmm, my understanding was that FQDN means that anyone will resolve the domain to e.g. the same IP address? Which is the case here (unless DNS rebinding mitigations or similar are employed) — but it doesn’t resolve to the same physical host in this case since it’s a private IP. Wikipedia:

A fully qualified domain name is distinguished by its lack of ambiguity in terms of DNS zone location in the hierarchy of DNS labels: it can be interpreted only in one way.

In my example, I can run nslookup jellyfin.myexample.com 8.8.8.8 and it resolves to what I expect (a local IP address).

But IANA network professional by any means, so maybe I’m misusing the term?

TIL, thanks. I use namecheap and haven’t had any problems (mikrorik router).

If you have your own domain name+control over the DNS entries, a cute trick you can use for Jellyfin is to set up a fully qualified DNS entry to point to your local (private) IP address.

So, you can have jellyfin.example.com point to 192.168.0.100 or similar. Inaccessible to the outside world (assuming you have your servers set up securely, no port forwarding), but local devices can access.

This is useful if you want to play on e.g. Chromecast/Google TV dongle but don’t want your traffic going over the Internet.

It’s a silly trick to work around the fact that these devices don’t always query the local DNS server (e.g., your router), so you need something fully qualified — but a private IP on a public DNS record works just fine!

EulerOS, a Linux distro, was certified UNIX.

But OS X, macOS, and at least one Linux distro are/were UNIX certified.

Add to that photo editing (as much as GIMP is great…). I would guess DAW and video editing would fall under that category, too…and good luck finding many AAA open source games.

IIRC Torvalds uses Fedora.

(Debian for me.)

Remote backup server would be my suggestion.

Configure it with a VPN to talk to your home network and set it up at a trusted friend’s or family’s place.

I do this with a raspberry pi and an external HDD that takes daily/weekly/monthly snapshots, with daily rsync. Works nicely for me.

My headcanon for The Matrix’s “humans are batteries” is that it’s the machines’ perverse interpretation of this — killing the humans is off the table, and for whatever reason letting them live with no purpose to serve the machines is also disallowed. But giving their lives “meaning” in the form of a shitty (and thermodynamically dubious) “battery” somehow satisfies the rules.

It’s a very big stretch, I’ll admit…

I’m guessing it’s because the developers either have a different speciality that they focus on, are employed to support specific hardware, or both.

If you have a TV, you likely already have the receiving device. Antenna can cost, or you can play around with wire length and orientation.

It’s mostly so that I can have SSL handled by nginx (and not per-service), and also for ease of hosting multiple services accessible via subdomains. So every service is its own subdomain.

Additionally, my internal network (as in, my physical LAN) does not have any port forwarding enabled — everything is over WireGuard to my VPS.

My method:

VPS with reverse proxy to my public facing services. This holds SSL certs, and communicates with home network through WireGuard link configured on my router.

Local computer with reverse proxy for all services. This also has SSL certs, and handles the same services as the VPS, so I can have local/LAN speeds. Additionally, it serves as a reverse proxy for all my private services, such as my router/switches/access point config pages, Jellyfin, etc.

No complaints, it mostly just works. I also have my router override DNS entries for my FQDN to resolve locally, so I use the same URL for accessing public services on my LAN.

It can be daunting to get into the hobby, there are a ton of niches.

To start: where are you? I’m in the USA, so that’s where my experience is.

License: required to transmit on the ham bands; you can listen without a license.

Range: are you looking to talk to people in your city/region? If so, a cheap “walkie-talkie” style (called “HT” in the biz — best avoid “walkie-talkie”) is a good place to start. These VHF/UHF (very/ultra high frequency) radios are affordable — something from Baofeng(~$30) or similar will work just fine, though they are often looked down on (I have one — for the price, it’s great). You will have the most luck if there is an active ham scene in your area, in large part because they may have a repeater, which can greatly extend your range. Many regions will have scheduled “nets” where you just go around and chat.

If you’re looking for the ability to chat with folks on the other side of the world, you’ll want to look into HF (high frequency). This is much lower frequency, thus longer wavelength, than the handheld VHF/UHF HTs. So…the antennas take up a lot of space. Mine is 52 feet long, in the attic. And the radios are much more expensive (more like $1k new). ICOM 7300, Yaesu FT710 are popular entry level units (but you also need power supply, cables, and antenna).

That said: if you just want to listen to HF, the antenna doesn’t matter as much at all, and you can use an SDR (RTL-SDR probably works?) for listening. You can probably also find a used shortwave radio that covers some of the HF ham bands.

Getting TLS certs will be complicated

I just use Let’s Encrypt with a wildcard domain — same certs for public and private facing domains. I’m sure this isn’t best practice, but it’s mostly just for me so I’m not too worried :)

Yeah I don’t expose Jellyfin over the Internet, so it doesn’t matter for me, and wouldn’t work at all over WAN (unless VPN’d to home network).

Also, it’s all reverse proxied, and there’s nothing preventing having two Jellyfin hostnames, e.g., jf-local.mydomain.com and jf-public.mydomain.com.

Another fun trick you can play is to use a private IP on your public DNS records. This is useful for Jellyfin on Chromecast for instance — it uses 8.8.8.8 for DNS lookup (and ignores your router settings), so it wants a fully qualified domain name. But it has no problem accessing local hosts, so long as it’s from 8.8.8.8’s record.

I have set up local DNS entries (with Pi-Hole) to point to my srrver, but I don’t know if it possible to get certs for that, since it is not a real domain.

So long as your certs are for your fully qualified domain there’s no problem. I do this, as do many people — mydoman.com is fully qualified, but on my own network I override the DNS to the local address. Not a problem at all — DNS is tied to the hostname, not the IP.

The only flaw in Corel’s logic was that as soon as you’re running Linux, you lose all desire to run WordPerfect, and develop an irresistible need to align yourself with vim or emacs…