• 1 Post
  • 22 Comments
Joined 5 months ago
cake
Cake day: February 8th, 2025

help-circle





  • ohshit604@sh.itjust.workstolinuxmemes@lemmy.worldAny more?
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    2 days ago

    Why is 255 off limits? What is 127.0.0.0 used for?

    Hypothetically you’re working on an application but you don’t want that application exposed to the internet, you would use localhost to either expose it to 1 machine on your network or network wide by opening a port and telling the application to listen on the private IP assigned by your router.

    Advanced setup would include a reverse proxy to forward the requests from the applications port to the internet, the reverse proxy would use port 80:80 (http) & 443:433 (https), so the flow would look a little like this -

    Internet > Reverse Proxy listening on 80:80 & 443:443 > Application listening on 8080:8080

    —-

    Why does it span to .254? Well this is another advanced setup but if you wanted to segregate two application on different subnets you can. I’m not sure if there is a security benefit by adding the extra hop but the option is there.






  • So why would you not write out the full path?

    The other day my raspberry pi decided it didn’t want to boot up, I guess it didn’t like being hosted on an SD card anymore, so I backed up my compose folder and reinstalled Rasp Pi OS under a different username than my last install.

    If I specified the full path on every container it would be annoying to have to redo them if I decided I want to move to another directory/drive or change my username.










  • “Technically” my jellyfin is exposed to the internet however, I have Fail2Ban setup blocking every public IP and only whitelisting IP’s that I’ve verified.

    I use GeoBlock for the services I want exposed to the internet however, I should also setup Authelia or something along those lines for further verification.

    Reverse proxy is Traefik.