gagootron

joined 3 weeks ago
[–] gagootron@feddit.org 20 points 1 day ago

That reminds me of PayPal. I can't use my hardware sevurity key to log in on mobile... Unless I enable desktop mode in firefox. Then it works

[–] gagootron@feddit.org 1 points 1 day ago (1 children)

It seems to that it works. I don't get any web-scrapers hitting anything but my main domain. I can't find any of my subdomains on google.

Please tell me how you believe that it works. Maybe i overlooked something...

[–] gagootron@feddit.org 7 points 2 days ago (5 children)

I use good ol' obscurity. My reverse proxy requires that the correct subdomain is used to access any service that I host and my domain has a wildcard entry. So if you access asdf.example.com you get an error, the same for directly accessing my ip, but going to jellyfin.example.com works. And since i don't post my valid urls anywhere no web-scraper can find them. This filters out 99% of bots and the rest are handled using authelia and crowdsec

[–] gagootron@feddit.org 1 points 1 week ago

I mounted my zfs dataset in a Jellyfin VM using 9p. All the features of the host ZFS while still running in a VM