Hmm that’s a good point.

Aws also can cost a good chunk if you restore un-optimally

Per their own releases, they includes October’s AOSP security patches.

This is pretty good, but still behind GrapheneOS in terms of security.

(I did a quick search, so I could be wrong)

Edit: Oct patches were included on a release from 1 week ago. I have no clue what their history is

Yup! This is what I do! Love it so much

Thank you. It really was that simple

deleted by creator

Oops you are right.

A quick search said mc uses tcp

Yes, and Minecraft is TCP not http

Anything.

Personally I use Debian. But Docker doesn’t care. I chose Debian because it is very stable and simple

Nope

Wikipedia is only 110GB… https://library.kiwix.org

Thanks for the help. This is enough to get me started

With Crafty you can bind a specific port.

I use tailscale for public access, and have set it up so tailscale users can access the domain.

I guess what I’m asking for is NPM but for tcp.

No I’m not.

I have tailscale setup for external access. (I have dns records already in my domain provider pointing to a tailscale ip, so a device on my tailnet can access my domain. ie an authorized tailscale device can access nginx.example.com)

I want to know what I have to do to get minecraft.example.com to resolve interenally.

Oh fascinating. I’ll have to look into that

Cool okay.

What about the CNAME one?

For 4 II, its CNAME Name: @ Target: ???

What is the target supposed to be?

Edit: putting “@” for name on the A record, once saved, it changes to my domain instead of @, in your screenshot

A good dashboard helps with not remembering port numbers also. And can look slick

Holy crap thank you so much. I was literally thinking of figuring out how to do exactly this EARLIER TODAY!

Thank you again for this write up. I have almost all of what you wrote already done (cloudflare, NPM and tailscale setup) but haven’t hooked Tailscale and NPM together yet.

I have gluetun+socks5 containea running, then in an app, I put in localip:port into a proxy field. Then that app will use that connection for internet. Browsers on desktop also support proxies. So if you want a specific browser to always use the VPN, this is a very simple way to do that.

https://source.android.com/docs/security/features/private-space

Its not bad using the official wireguard app. Its definitely noticable. On the android battery screen it’ll show around 5% after a full day of use and it on always