bbs VS Nginx Proxy Manager

https://github.com/net4people/bbs/issues/63

People should be aware that privacy tools can make you stand out. Unless methods are used to obfuscate your data.

I never trusted Signal due to https://github.com/net4people/bbs/issues/60

VPNs are totally detectable - its your traffic eg what ur searching up that is hard or impossible to decrypt. to make the VPN TRAFFIC itself undetectable, you have to obfuscate it. Now there could be a lot of reasons as to how your school blocked your vpn. The ports expressvpn use may have been blocked, for example. I personally don't use express vpn but use my own, but protocols like wireguard which MAY (im not sure) be used by express vpn use udp packets and the school could have just completely dropped them completely (Most games use udp packets since its faster), or the ip ranges you have been assigned on expressvpn may have just been blocked from the school wifi. As for why the cheap free vpn may be able to bypass your school wifi, it could be that it avoids the reasons above OR its something different like a proxy, which is what I use to bypass the restrictions at my high school. The fix, or what I do, is I setup my own servers. The price of a vps server at digital ocean is like 4 dollars a month, probably around the same price if not cheaper than expressvpn. Get yourself one, setup your own proxy server and connect to that. You can search around for tutorials, but the one I use is VMESS+TCP, essentially disguising the proxy traffic as a tcp packet so that the school can't distinguish it from regular traffic. Find a tutorial online, probably ask around on here: https://github.com/net4people/bbs If you followed a guide and still can't get it to work, your gna have to find an unblocked port. I would try 443 or 123 first since usually those aren't blocked but for my school 3478 is the one that works.

I discovered these 3 amazing projects recently:

Cryptpad, essentially google docs/sheets/forms e2e encrypted. It does include collaboration. https://github.com/cryptpad/cryptpad

Immich, google photos self hostable, with share options https://github.com/immich-app/immich

Nginxproxymanager manages certificates and proxies to self hosted stuff through nginx https://github.com/NginxProxyManager/nginx-proxy-manager

Great self hosting stuff!

Nginx Proxy Manager

Take a look at NginxProxyManager. This would give you the opportunity to put everything in the form of service1.domain.com , service2.domain.com ,etc.

Prime example: Nginx Proxy Manager is often recommended in the sub. The latest minor release came with breaking changes (so already ignoring semver). I bet you many people were running on latest and then had broken stuff: https://github.com/NginxProxyManager/nginx-proxy-manager/releases/tag/v2.10.0

I started looking into how to make add dynamic IPs to NPM access lists. I came across a couple of GitHub issues (1, 2) on the topic. It looks like people have solved the problem, but not in a complete way without modifying the NPM docker image. I did not want to do that, so decided looking into writing a separate script.

Here is the (NPM) GitHub issue where the "fork of a fork" image came into existence (lepresidente/nginx-proxy-manager). It has some interesting discussions about the challenges of having NPM and CrowdSec coexist and cooperate.

Agree with this, myQ is such a dumpster fire. It needs to have an the ability to be managed over the local network instead of requiring the garage door and app connect to their server.

My very first experience with myQ was figuring out that their IP blocklist provider, brightcloud, blocks anything with the word "proxy" - including the default "it works" page for Nginx Proxy Manager [1]. And they have no way of overriding this to actually provide service if someone turns out to be a legitimate customer.

[1]: https://github.com/NginxProxyManager/nginx-proxy-manager/dis...

Edit: If you're using Nginx Proxy Manager there seems to be open PR for support for proxy protocol https://github.com/NginxProxyManager/nginx-proxy-manager/pull/1882 however in the comments there's a name of repository with this PR merged.