this post was submitted on 03 Sep 2025
580 points (94.9% liked)
Technology
74831 readers
2742 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
a custom VPN without security minded planning and knowledge? that sounds like a disaster.
surely you could do other things that have more impact for yourself, still with computers. use wireguard and spend the time with setting up your services and network security.
and, port forwarding.. I don't know where are you running that, but linux iptables can do that too, in the kernel, with better performance.
Oops, I meant self-hosting a wireguard server, not actually doing an alternative to wireguard or openvpn themselves...
With my previous paid VPN I had to use natpmpc to ask their server for forwarding/binding ports for me, and I also had to do that every 45 seconds. It's nice to get a bash script running in a systemd demon that does that in a loop, and also parses output and saves remote ports server gave us this time to file in case we need them (like, for setting up a tor relay). Also, I got another script and demon for tor relay that monitors forwarded port changes (from a file) and updates torrc and restarts tor container. All this by Copilot, without knowing bash at all. Without having to write complex regexes to parse that output or regexes to overwrite tor config, etc. It's not a single prompt, it requires some troubleshooting and clarifications and ultimately I got to know some of the low level details of this myself. Which is also great.
oh, that's fine then, recommended even.
oh so this is a management automation that requests an outside system to open ports, and updates services to use the ports you got. that's interesting! what VPN service was that?
be sure to run shellcheck for your scripts though, it can point out issues. aim for it to have no output, that means all seems ok.
Proton VPN
It does some logging though, and I read what it logs via
systemctl --user status
. Anyway, those scripts/services so far are of a simple kind - if they don't work, I notice that immediately, because my torrents not seeding or my tor/i2p proxy ports not working in browser. In case when error can only be discovered conditionally somewhere during a long runtime, it needs more complicated and careful testing.