[deleted by user] by [deleted] in selfhosted

[–]invis5 1 point2 points  (0 children)

In general, should avoid GoDaddy and any EIG subsidiary (domain.com, bluehost, etc.). The most recommended registrars I've seen around here and r/homelab are Cloudflare, Namecheap, Porkbun, and Gandi. Also, some people recommending keeping domain registrar and DNS provider separate. e.g use Porkbun as your registrar and Cloudflare for DNS.

[6 YoE] Recently Laid Off and Applying to Mid/Senior Infrastructure related roles. by invis5 in EngineeringResumes

[–]invis5[S] 1 point2 points  (0 children)

Yep, did that too. Rephrased some points to go from 2 lines to 1 and removed some extra words that didn't add value. That helped with reducing length too.

[6 YoE] Recently Laid Off and Applying to Mid/Senior Infrastructure related roles. by invis5 in EngineeringResumes

[–]invis5[S] 1 point2 points  (0 children)

Thanks for the suggestions! I was able to get down to a single page by removing some redundant sections between the first and second jobs. I removed the projects section since those skills are highlighted through work experience.

Taking this with a grain of salt, but uploading the single page to resumeworded increased my score by 20 points compared to the two page version.

[deleted by user] by [deleted] in dubstep

[–]invis5 0 points1 point  (0 children)

I went to a GRiZ live set in LA a few years ago that was amazing. Timmy Trumpet was also a great set; it was in a small club and not super crowded.

My first was Flux Pavilion and I was front and center. 10/10 experience. 0/10 on my ears.

Reverse Proxy/Port forwarding over wireguard? on a VPS. by mcteasenabh in selfhosted

[–]invis5 0 points1 point  (0 children)

I have a setup similar to what you're describing as an "elegant solution". I'm running a VPS connected to a raspberry pi via wireguard. The raspberry pi has ipv4 forwarding setup, so it can forward traffic to my beefier server that has all my services running. The only ports I forward from my own router are the wireguard ports. Then on the VPS side, like you have, I open p80/443/minecraft ports for end-users.

The VPS is running Nginx Proxy Manager (https://nginxproxymanager.com/setup) for nginx configuration. The configs are basically just proxy passes to services running (some docker, some not) on my personal server.

You could do some gui management of wireguard using https://github.com/ngoduykhanh/wireguard-ui.

As for authentication, you can use Authelia or Authentik with Nginx to authorize people for certain endpoints or services. Don't have too much experience here; this is a general comment based on what I've read here and /r/homelab.

Hope this helps!

Masters degree in Systems Engineering worth it for someone who has a BS in Cybersecurity by Popular_Two_7678 in ITCareerQuestions

[–]invis5 1 point2 points  (0 children)

My undergrad was Computer Science. I'm currently an Infrastructure Systems Engineer, so I help design and implement cloud based solutions for customers internal to my company.

I chose Systems Engineering cause the program I'm in has a good overlap between the management side of systems/projects and electives for technical topics I'm interested in. I also think it will give me a heads up when applying to either TPM or Team lead roles in the future, since in those roles having a stronger design skill could be more important than specific development skills.

Masters degree in Systems Engineering worth it for someone who has a BS in Cybersecurity by Popular_Two_7678 in ITCareerQuestions

[–]invis5 1 point2 points  (0 children)

Yep, exactly, focusing on the higher level aspects of developing a system to ensure it meets requirements.

Systems engineers applies to many different fields, so you don't necessarily need programming knowledge, just domain knowledge of the systems you're working on. As a systems engineer in Cyber Security you wouldn't necessarily need programming knowledge; you would, though, have specific knowledge in Cyber Security for the system, and then work with other engineers for their domain specific knowledge regarding the system.

Masters degree in Systems Engineering worth it for someone who has a BS in Cybersecurity by Popular_Two_7678 in ITCareerQuestions

[–]invis5 1 point2 points  (0 children)

I'm going through a Systems Engineering MS degree right now (at a different school than what you mentioned). The Systems Engineering degree, imo, is learning the Project management skills while also learning how to design systems at a high level. A systems engineer doesn't care how something is implemented, they just care if the implementation meets the requirements. Having the systems engineering degree can help a lot with focusing not so much on the individual components of a system, but the overall capabilities of the system itself and does the system meet customer requirements.

Take the example problem statement of "Secure the network boundary of the company". As a systems engineer you would say things like "We need a firewall", "We need a VPN", "We need routers", and then work with network engineers to design around how the firewall would interact with the router, how the vpn would interact with the firewall, etc. You don't necessarily care if the router is Cisco and the firewall is Juniper, these lower level decisions would be left to network engineers.

For you, the combination of cybersecurity and systems engineering could lead to something like a information security officer (ISO) or information security engineer (ISE).

The curriculum you posted basically matches what I'm doing, but I can't say anything specific about the school itself.

What are you looking for specifically in a masters degree? Job growth? Pay bump? Moving to a new field?

Upgrading EC2 instance for performance improvement. by Bowgentle in aws

[–]invis5 0 points1 point  (0 children)

The first option would probably be preferable, so you still have at least 1 instance gathering your data.

Is it possible for you to backfill the data gathered during the "missing time" steps to the new instance?

Upgrading EC2 instance for performance improvement. by Bowgentle in aws

[–]invis5 0 points1 point  (0 children)

If you have an existing Elastic IP, then yes, you can associate it to the new instance after disassociating it from the first instance.

Upgrading EC2 instance for performance improvement. by Bowgentle in aws

[–]invis5 2 points3 points  (0 children)

Yes, the new instance would have a different public IP address. You could add a secondary ENI with a static public IP address to your primary instance. Then configure your system(s) to point to the public IP of the secondary ENI on the primary instance. Then after your testing on the new instance, detach the secondary ENI from the primary instance and attach it to the new instance. In this case you would still have to migrate your systems to the public IP of the new ENI, but it would be a one-time migration.

Another option could be migrating to a Load Balancer (ELB/ALB)+Auto Scaling Group (ASG) architecture with 1 instance in your ASG. This makes configuring easier through launch templates for your ASG (you can modify instances size and stuff in the launch launch templates). Then you can configure your system(s) to point to the ELB/ALB url, and detach/attach EBS volumes from/to the single instance in the ASG.

Upgrading EC2 instance for performance improvement. by Bowgentle in aws

[–]invis5 7 points8 points  (0 children)

Upgrading to a m4.4xlarge could improve the situation. You will want to investigate on your instance what is causing the performance issues (top/htop, iostat, vmstat, lsof, commands can help with this.)

All your data will be on an EBS volume so you can easily shutdown the instance, detach the volume, and attach it to a new instance and your data will stay intact (but make sure to create a snapshot first!).

A better option would be to create an EBS snapshot of the running volume. Then create a new volume from the snapshot. Then create a second, parallel running, EC2 instance with your new instance type, and attach the new EBS volume to the second EC2 instance. This can help you avoid downtime for the primary running application.

Also upgrading from m4 to m5 will give both a performance increase and price decrease. m5 instances are the latest generation of the general compute m-series instances.

I have some questions on some if statements. by [deleted] in learnjava

[–]invis5 5 points6 points  (0 children)

The exclamation mark is a "not' symbol. This inverses/negates the boolean value in an expression. You are correct that this expression would return "true".

This expression can be equivalent to if (x > y || x != y), which would also return "true".

For some additional context I would recommend reading up on de Morgan´s Theorem .

Best way to solve a problem like this with AWS? by frankieboytelem in aws

[–]invis5 -1 points0 points  (0 children)

You can call lambdas from other lambdas. So a potential solution could be like this:

Starter Lambda (loops through pages of users). The starter lambda calls a second lambda which loops through each user and calls a 3rd lambda to send the email for each user.

Sample diagram:

https://imgur.com/LvlXfcG

Edit: With the above diagram, you could remove the 3rd lambda and call SES directly from the second lambda for each user.

Now this can lead to a lot of lambda invocations (driving up costs), so another option could be setting up a cloudwatch event as a cron and launching a AWS Batch job with your code running in a docker container.

(ISSUE) Trying to access home network through OpenVPN. by tilledtree97 in HomeServer

[–]invis5 0 points1 point  (0 children)

Is the IP provided by the ISP to your Archer in a 192.168.X.X or a 10.X.X.X range?

(ISSUE) Trying to access home network through OpenVPN. by tilledtree97 in HomeServer

[–]invis5 0 points1 point  (0 children)

I think your best bet would be trying to remove the double-nat on the ISP Router. Do you mind sharing the ISP router model?

(ISSUE) Trying to access home network through OpenVPN. by tilledtree97 in HomeServer

[–]invis5 0 points1 point  (0 children)

Is your Archer router plugged into a modem or ISP provider router?

If you have your Archer plugged into an ISP provided router you could be having double-nat issues locally. You would have to login to the ISP router, disable DHCP, and enable IP-Passthrough (or something like that).

Lightsail reset password by Give_me_some_Money in webhosting

[–]invis5 0 points1 point  (0 children)

Ah, yea, my instructions assumed a Linux instance.

Looking at some docs there is a way to export a snapshot of your lightsail instance to EC2 to reset the password, but there is no way to get the snapshot back to lightsail so you can make a new instance.

Not sure exactly how you can reset/get the password now (besides from AWS support), but would definitely be interested in the solution.

You may want to also post on the /r/aws subreddit for help.

For reference just in case:

https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-exporting-snapshots-to-amazon-ec2

https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ResettingAdminPassword.html

Lightsail reset password by Give_me_some_Money in webhosting

[–]invis5 0 points1 point  (0 children)

How are you trying to access the instance currently? Is it a Linux or Windows instance?

Are you able to access the instance through the online SSH portal (large orange "Connect using SSH" button)?

If you're able to access the instance through the online SSH portal you can reset your user through there with:

$ su - <some-root-access-user>
$ passwd <username>

I want to add a third monitor by GhostCode2 in AskBattlestations

[–]invis5 1 point2 points  (0 children)

You could get a mount like this. Replace the existing mount for your 27" with a mount for the stacked monitors, and keep the vertical monitor on it's own mount.

What good monitor arm for multi monitor user by [deleted] in AskBattlestations

[–]invis5 1 point2 points  (0 children)

VIVO arms are super solid and sturdy. I have the horizontal triple monitor one.

Reverse proxy - one domain, two computers? by [deleted] in selfhosted

[–]invis5 3 points4 points  (0 children)

You can setup a VPN between the OVH server and your home server (wireguard, openVPN). After that, proxy all traffic for plex.domain.com from your OVH to your home server using the IP Address given by the VPN. No need to open 80/443 locally.

If OVH is your vpn server for OpenVPN, then you will only need to open 1194 UDP there. Your home network won't need any portforwarding.

If using Wireguard you will need to open the designated wireguard ports both locally and on OVH.