I’d suggest using IFME (https://x265.github.io/download.html) it does support MKV.

Due to the nature of video, using another codec will have some differences even if it’s minimal.

But if you encode the video as AV1 with conservative settings it should be possible to reclaim a lot of that space with minimal impact.

Metadata should be retainable but you’ll likely need to experiment.

So it depends. For example some legacy apple stuff had a bad DHCP implementation where it would try to hold onto an IP address it had before.

When there’s one DHCP server with a reserved ip it won’t assign that ip to the wrong device. (Unless you’re running some buggy software that takes your configuration as suggestions)

Where the advice to set it anyways comes from scenarios where that DHCP server goes down for long enough that everyone starts self assigning addresses. It’s a real hassle to find the correct system when that happens.

Ah yeah I wouldn’t be surprised if he has a double NAT going on and needs to put the ISP provided modem into bridge mode.

Perhaps change who’s hosting it? Since you’re in IT you probably have a computer capable of it?

Alternatively you could host a wire guard endpoint have them connect to you that way. But configuring that is a pain on Windows.

The problem is most likely on the host’s end. They need to configure port forwarding for the game.

If you’re connecting over the internet confirm you’re connecting to their WAN IP address.

There is a rare edge case that comes to mind. In server.properties look for use-native-transport and try setting it to false on the host.

Alternatively I would suggest checking if you and the host support ipv6 and use that. It’ll help avoid the problems you’re experiencing with NAT.

Avoiding spam filters and ISP blocks are a common issue with self hosted email.

Ideally you’ll have a mature domain, dkim configured and an IP that’s not blacklisted on a network that allows email traffic.

OVH offers pretty cheap email hosting if you just want a turn key solution.

Otherwise if you want your home lab to work this way you may need to configure something akin to a forward proxy on a VPS to act as a gateway for your homelab.

This could be achieved using wireguard and iptables. By routing the email traffic to your homelab.

I’d suggest using OVH. https://help.ovhcloud.com/csm/en-ie-dns-dynhost?id=kb_article_view&sysparm_article=KB0051641

Depending on your country you may need to use ovh canada

Syncthing like others suggested is probably the way to go.

But if you want more options you can do a lot with WebDAV. https://www.digitalocean.com/community/tutorials/how-to-configure-webdav-access-with-apache-on-ubuntu-18-04

It’s possible that the app has been disabled on the Play store if the developer has failed to raise the SDK level. A bunch of apps have been delisted for that reason.

If you still have the purchase email you may be able to contact the developer about it.

So I’ve been the person who denies projects like these in the office.

There are two non-negotiable requirements for equipment like this.

1. It absolutely must not in any way interact with outside servers or remote services. All data must stay contained within the company.

2. The software must be open for inspection with a locally reproducible build. Or accredited by a trustworthy provider such as Microsoft.

Failure to meet those requirements and the proposal is dead.

Hey I just had another thought. Do you have your ISP provided router in bridge mode? That would help if you’re not using it for anything else.

If your lan devices only have a fe80, your clients are not receiving a proper router advertisement.

Which routes and firewall rules should I be checking?

Since the OPNsense device is getting a ipv6 address and is able to ping ipv6 devices on the internet.

It sounds like you don’t have ipv6 configured for the LAN. Try enabling “Assisted” mode.

https://docs.opnsense.org/manual/radvd.html

Confirm the ipv6 addresses your clients in the LAN are being assigned an ipv6 address within the scope of what your ISP is assigning.

If you are check default routes and firewall rules.

If you aren’t, investigate “router advertisement”.

I like that idea.

I’d suggest OVH or Digital Ocean.

If you think a DDoS attack is possible I’d suggest azure for that.

Sounds like an issue with your registrar more so than the domain authority?

Do you have any information to distinguish that?

Does anyone here know if they are the same entity?

This is probably a bit extreme. I think it has a way to tie into your phone’s calendar too.

But you could use redmine and create tickets and reoccuring tasks.

Using a whitelist in this manner with cloudflare may be challenging as this list can potentially change. They do have means to query it though. https://developers.cloudflare.com/api/operations/cloudflare-i-ps-cloudflare-ip-details Additionally, have you considered ipv6 support?

if you haven’t solved the problem yet, I would consider switching to Apache for your reverse proxy and using mod_remoteip.

Track the CF-Connecting-IP field instead of the IP address to get the client.

https://developers.cloudflare.com/support/troubleshooting/restoring-visitor-ips/restoring-original-visitor-ips/

I found this docker option.

https://hub.docker.com/r/apache/james#!

Although it’s pretty cheap to have someone else host it.

https://www.ovhcloud.com/en/emails/mail-hosting/

Transcoding a lossy format like H.264 or VP9 to AV1 will reduce the quality.

Not by much and it can save a bunch of space depending on what you’re working with. Works well with modern anime. Squashing a h264 60GB anime to <10GB with minimal quality loss is pretty satisfying.

Hey its unfortunate you are being downvoted since this is about a active problem and all you’re doing is bringing attention to it.

It’s not that the OS doesn’t support such tools, (anyone can choose to run a 3rd party kernel module) its the devs of the anticheat software that refuse to do the work needed to make it a reality.

The other problem is that such software is unlikely to work correctly out of the box across the plethora of available operating systems and configurations. Just targeting the steam deck would be received rather negatively and probably illicit chilling effects across the community.

You could theoretically, do what NVIDIA has done for their driver and opensource just the parts needed to make it work for your OS. However, that could potentially be used as a means to circumvent the purpose of the tool.

All anti-cheat software is a cat and mouse game and any determined group will eventually circumvent any client side means which speaks to architectural problems with the game. Which could potentially be insurmountable without considerable investment in server sided solutions.

However, the creation of client sided kernel modules would at least bring it close to par with the Windows experience.