Do your policy enforcement at the port level, connect the printer with a physical cable, that way even if the printer gets compromised and changes it’s Mac your rules still apply.

Also setup your network alert system to notify you when a a new driver is available and the printer is behind so you can manually apply security updates.

1 is fine from the port level

2 is great, but more brittle

2.5 only allow incoming connections to the vlan on printer ports, and outgoing mdns

Depending on your threat model, you might need 3, if the printer is malicious, and printer drivers are also malicious, they can proxy information from the printer through a client device to the internet.

I setup a simplex alerting bridge so grafana can create lab alerts to a simplex group, messages disappear when alerts are resolved.

This is great! much more organized then my fever dream local dashboard!

It sucks ass that there’s no long-term solution for ADHD. Just temporary fixes that rapidly stop working.

There is exciting research being done in metabolic psychiatry looking at ADHD in fat adapted people. There is a ongoing study (https://doi.org/10.1186/ISRCTN62698625) but there is a good expectation they will see sustained results, this is inline with Dr. Georgia Ede’s metabolic strategy in Change your Diet Change your mind. The study authors gave a interview 2 years ago - https://www.youtube.com/watch?v=sUAbqXcSAzg , so maybe we will see the results published soon.

TLDR - metabolism and brain energy appear to be the core of many psychiatric conditions, so its worth trying a fat burning metabolism for 30 days and see if it improves your ADHD.

If you want https it’s gotta be a external DNS record anyway, might as well point to internal ips

Depending on how paranoid your setup is not everything will use the DHCP provided DNS servers

That is a very common myth. the rise in modern heart disease is directly proportional to the rise in low fat diets and insulin resistance.

Humans are lipovores, we are fat burning machines, that is why we store the vast majority of our energy as fat. real saturated fat is healthy

addiction and just normalization!

A coffee with cream, a soda, a healthy “kombucha”, a fruit juice… all spike blood glucose, and most people simply don’t think of it as eating…

cheese will not elevate your blood glucose, so it is not involved in fatty liver etiology

That is tragic

No, it’s just a reflection of how our diets have changed over time. When fatty liver disease was first being categorized. It only happened in alcoholics. So fatty liver disease meant The patient was an alcoholic. However, now with high glucose-driving diets, elevated insulin levels, the vast majority of fatty liver disease patients don’t drink alcohol…

So we have this awkward naming scheme because our diets have changed faster then our language

Persistently elevated insulin from high glucose driving diets.

Even “healthy” people end up putting glucose food into their mouths 8 or more times per day. Insulin inhibits the body from mobilizing fat, and the liver builds up fat stores it cant get rid of.

The fastest way to resolve fatty liver is to stop eating food that elevates blood glucose - i.e. carbohydrates.

Fun fact, Non-Alcoholic fatty liver disease is now the number one cause of fatty liver disease!

In my production systems, and in my home systems, and in my gaming computers, I turn swap off. There’s no good reason to wear out disc writes. In production systems, I’d rather have something fail hard, then get slower and slower and slower falling behind.

Quite frankly, there’s no good reason to have swap on anymore, memory is huge. Most programs don’t need as much as they use. You can set memory pressure in systemd, telling programs to reduce their usage, and giving them individual hard cutoffs, so something like Prometheus can’t take down your whole system just because it’s got a memory leak.

oh yeah, it does that!

Get a ai agent, run it on your server as a un privileged user and ask it to do a security audit for you, delete the account after. If you want to get fancy make a new VM and give it root and ask it to probe your production host.

Everyone’s advice here is great, but you need to test your config and systems for gaps.

https://nixarr.com/

Works a treat for me!

But 100% is a big ask. There are always things to improve or fix

Have one VPN attached in a work profile and another in your private space

Yeah the literature coming out on the metabolic brain connection, and improving metabolism resolving psychiatric disorders can’t be ignored.

Given we are in a metabolic health crisis that is only trending up, it’d reasonable to speculate it has had a impact on larger mental health trends since the metabolic health collapse started.

I.e. 96% of western adults have impaired metabolic health.

https://doi.org/10.1002/ajpa.24247

Do you have a better source?