I have a flint 2 (glinet) as my firewall as well, I had read somewhere that I should install vanilla OpenWRT so I did (I have added stuff to it so I like coming up with different flavours when talking to people like rocky road). I have Caddy running in docker on a pi in my LAN I have a password file of some sort that Caddyfile references at the top. Don’t ask me how I formatted it because I do not remember that part but take my secondary pihole as an example of using a domain that cannot be reached, from outside of my lan.

pihole52.reannlegge.ca {
    @allowed {
        remote_ip 10.0.0.0/8
    }
    handle @allowed {
        redir / /admin{uri}
        reverse_proxy http://10.0.69.52:31415/
    }
    handle {
        respond "Not available from this network" 403
    }
    import easydns_tls
    log {
        output file /var/log/caddy/pihole52.log
        format json
    }
}

While other places on my domain can be reach outside of my vLANs. I have to secure some things up as I found that my SearXNG is open to the WAN.

Edit: looks like search.reannlegge.ca was available on the WAN if you where in Canada but I have changed that to only on my vLANs and VPNs

I got into self hosting because my place flooded and I was waiting on insurance and the repair people to fix give the go a head and then to actually fix my place I do not really go anywhere so I was fine with being blasted with ads when I was out of my home, until I caught myself watching ads to get extra whatever from a mobile game. I had a pi zero 2 (with a PoE hat) that was not being used for anything so I thought why not use it to host wireguard, I had looked at a few options for VPNs but thought wireguard fit my needs the best. It “worked” I do not know if it was just my copper internet speeds or the silicon in the pi zero 2 which slowed everything down but now that I have a dedicated OpenWRT firewall, fibre, and a static IP (well technically 2 I just do not use the second one because the weekend project of spinning up my own SMTP and IMAP server had me at the point where I wanted to pull out my hair), I have wireguard automatically turn the VPN on when I am away from my LAN. So I would only see the adds if I went on someone elses device.

I use easyDNS and they have a wild card option for their email, so I have a formula whenever I am signing up for something my email addresses are always nameofservice_funSaskathchewanwordplusthreerandomnumbers@reannlegge.ca. When I started this I was on hosthero and they use cpannel with no wildcard options you have to go in and create the email address before you use it. When I left hosthero, because they cost to much and are not the friendliest company to deal with I had something approaching 300 unique email addresses after 4 or 5 years because I did just not bother closing them after I continued using the free trial of whatever or just stopped the forwarding to my main email address or whatever email it needed to be sorted into.

Now I just have everything automatically go into junk mail unless it is something I need than I make the effort to log into their easyMAIL web thingy and sort where it should go. I have it set to delete things that are a week old (I think it could be a month?) so if I do not need it I do not need to worry about it and it will just go away on its own other things are sorted into folders and very few things are sent to my inbox.

I was never really a windows user, I grew up on Mac OS (Apple DOS, 7, 9, and X). I am stuck with an iPhone and an iPad because I do not have the money to replace them at the moment but as soon as there are no longer updates for them they are being stripped of most of the data, being put onto my IoT vLAN and being used as HA kiosks. I say so long to things as soon as updates are not being pushed because they become attack vectors. I have had my ID stolen once before, probably not because of out dated things but I want to limit the places bad actors can get to me (just know the process of making sure stuff doesn’t hurt you further is hell).

I have a Mac mini I am thinking of doing some actual work to get Debian installed on but I turned on the Mac just to get my iTunes purchased music off of it and than half assed an attempt to get refit installed and get Debian running, maybe some day I will get it working but that day is not now.

Yeah I know it was a very iffy time luckily it was only one night and morning. I broke the protection many times today but I am all wrapped up now.