

It’s an industry security standard. Not a defect. If you don’t agree with it, fork the software and modify it to suit your needs.
It’s an industry security standard. Not a defect. If you don’t agree with it, fork the software and modify it to suit your needs.
Some self hosted services refuse to work if you use a self signed certificate with your public facing IP. They only allow self signed certificates when using one of the handful of private addresses.
Some apps on mobile devices for the service you use won’t work unless a trusted certificate is used. A self signed certificate behind the scenes creates an error that isn’t handled and you can’t connect.
You lose the ability to have a proxy in front to handle abuse so your server is spared the headache. You need a domain to do this.
TLS.
While technically you can use TLS with a self signed certificate, it creates additional problems with a public facing service. Only recommended for internal services.
I would be cautious with this thought process though. Oil cools, lubricates and cleans the engine. These engines are air cooled so keep that in mind. Degraded oil can’t do the job very well.
It’s always been bad practice to just blindly update software. That’s why we have different distros.
Ubuntu and Mint hold your hand and make it easy for newcomers. Great way to dive into Linux. I completely agree these are great for “it just works” and no fuss. I’ve not had one break on me.
Arch and Gentoo expect you to have experience and know what you’re doing. You build it up how you want it. That’s what makes these so great. But you need the experience and knowledge.
I’ve personally tried openSUSE and in my opinion it feels like a good middle ground between both ends. In the past I’ve recommended Mint to get started, openSUSE once you’ve got experience, and then Arch for when you want total control.
You either set the DNS settings per device to the system running PiHole / AdGuard Home, or if your router allows, set the DNS there. It’s ideal to set it on the router.
Any time a device makes a DNS request to a domain, it’s checked against the list. If found, it’s stopped. If not found, it gets sent upstream to your choice of a public DNS configured during setup. I use Cloudflare (1.1.1.1, 1.0.0.1).
Being able to do this is why Linux is so amazing. If Windows finds a corrupt file and can’t repair itself, you gotta find the package it’s part of (Windows update catalog), or create an ISO that’s updated to do an offline repair. If the registry gets fucked, good luck fixing that.
TeamSpeak is doing an overhaul to be similar to Discord. You can self host.