u/iCujoDeSotta

i've found this old Eee PC 1001PXD in the trash, it looks kinda cool and i don't want to throw it away but i don't have the charger and i'm pretty sure it would be painful to use with that atom cpu and 1gb of ram. not sure if puppy linux would solve that.

even to run alpine and use it to ssh into my servers i'd need to find the power adapter or try to take it apart and swap the charging port with a usb c one.

not sure if i would be able to do that.

i've thought about using the chassis to build a cyberdeck but i'd have to replace everything i think and that would be pretty expensive, especially now.

i could take everything apart and use the chassis as a case for my tablet which is almost the perfect size, but i'd have to find a way to attach it.

the hinges are pretty solid, i like the keyboard and the finish.

what do you think? what could i do with this?

i'm exposing my jellyfin server with a cloudflare tunnel pointing to caddy as a reverse proxy.

i want 2FA and i've tried authelia which works very well but not with the apps.

so i've tried to set up authentik which despite the gui has been even harder than authelia, still won't work on android (i sign in, insert the TOPT and get stuck on a black page saying "loggin in") and worst of all, makes 2FA login optional so it's basically useless.

i've tried a very plugin that offers built in 2FA by ZL154 ( https://github.com/ZL154/JellyfinSecurity ) but that still won't make it mandatory.

i'm not sure if i'm missing something or should just give up.

as a "solution" gemini suggested hiding the login form via CSS but i don't think that would be safe.

any advice?

so i spent yesterday trying to figure out intrusion detection with no success.

i run opn as a vm in proxmox, i know it's not ideal but it has been working without issues.
i use it as my main router, even for proxmox.

i followed a guide to create the vm and according to gemini i might not have the best setup to make suricata work; the cpu type is x86-64-v2-AES and the NICs for lan and wan are linux bridges (i have 2 dedicated nics i only use for opn, but i created a bridge for each and assigned those to the vm, don't know why tbh)

after hours of troubleshooting, and spiking cpu usage, i found out that apparently the blocklists i have set on unbound (or possibly opendns on my modem, which is also my fallback router, but i don't think so) is acting before IPS, and so the alert tab remains empty.

i do have a few blocklists on unbound but i thought IPS was supposed to work on a higher level, is it not? also, in my experience opnsense bypasses the opendns blocks on my modem (i have set very restrictive blocks on that)

i'm not sure what i'm doing wrong, the vm is using 5gigs of ram out of 6, which i thought would be plenty for a router (especially since i'm the only one using it).

i'm trying to learn as much as possible on my own and possibly for free so that i have something to say when interviewing for jobs but thus far networking has been quite tough for me, any advice would be welcome

if left out any important detail please let me know, i'm quite new at this