cyberwolfie

I am still very much a novice in the self-hosting space, Linux etc. having fairly recently switched from using macOS as my daily driver and not tinkering much at all.

One of the things that often confuses me is networking and making sure my setup is secure. This is currently holding me back from hosting more stuff locally that I would require access to from outside my home, as I am afraid I am doing something that could severely compromise my data. It can sometimes be difficult to follow explanations from more advanced users due to the many different components of networking and security, and different layers of abstraction, which prevents me from following completely. I might understand one particular case, but then be unable to make connections to another one. So I would want to research this more intensively, and ideally I would end up being able to easily understand the data flows - the paths the data takes (e.g. I make a HTTPS request to some server from my laptop, how is that traffic routed correctly through my local area network and later the wide area network), in what forms (i.e. different protocols, encryption layers etc.).

In communities like this, I see there are a lot of very knowledgeable people who maybe could recommended any resources that cover this from the basics and onto more advanced stuff? Maybe a textbook from a university course on ICT that is considered particularly good? A YouTube channel with great explanations and visualizations? I am looking both at home LAN and internet in general. Enterprise level networks are not very interesting to me (at the moment).

I've been using a sound bar from Sonos with my TV for several years now, but in an effort to ditch the last appliances that unnecessarily require accounts and internet access, I am looking to ditch it in favor of something that is entirely contained within my own network.

What I think are my requirements:

• No microphone
• Ability to directly play audio from my Android (running Calyx OS), something I cannot do with the Sonos.
• HDMI ARC-connection to TV so that it can be controlled by my remote
• Sound must not be abysmal, but I am no audiophile. Preferably stand-alone without subwoofer
• Maximum 90 cm in length so that it fits under my TV, preferably in black / dark grey with a clean look

So far I've found something like this, which I believe gives me enough flexibility with HDMI ARC, Bluetooth and 3.5mm, even though it comes with a subwoofer: https://www.tcl.com/eu/en/soundbar/p733w

In terms of software, I have long been considering something like balenaSound to replace the Sonos functionality, but I'll soon be setting up Home Assistant to run my lights, and I see that there is a Snapcast integration that might work for me here?

Are there anyone here who have done something similar and have found setups that work well or that I should stay away from?

I am in love with my Jellyfin server (running in a Docker container) - it feels so nice to take back control over my media consumption again, after more than a decade in the land of streaming. So much, that I want to share this with my family.

So I was thinking of setting up a reverse proxy (Nginx Proxy Manager is what I have used before) and expose my Jellyfin-instance through that. However, I've seen several people be skeptical about this solution, instead opting for access through a VPN (I don't think that would be a good solution for some of my family members).

What are the potential pitfalls of setting it up this way, that makes people skeptical? Where could I go wrong, and what dangers would I expose myself to? As I understand it, this would only expose one port to the internet, direct all that traffic to the Nginx Proxy Manager, which then forwards traffic to specific ports internally on my home network, which sounds safe in my mind. Is it misconfiguration of the proxy manager I should be wary of? Or some exploits in the proxy manager?

I am using ProtonVPN, and have (or so I thought) set up qBittorrent to bind to the network interface that ProtonVPN is using (tun0). The connection symbol turns red if I turn off the VPN, and downloads will stop. However, when checking the torrent address on ipleak.net, it seems that this bind is not working properly - my real IP shows up after I have disconnected my VPN. I thought that there shouldn't be any connections made when traffic is not via the tun0 interface, so that my real IP should never be known by the detection tool. Am I wrong?

I have not configured the kill switch, but perhaps I should do so?