I installed the PVE system on the base layer of my NAS for virtualization, primarily using OpenWRT and Debian virtual machines. OpenWRT is used for dialing and routing, allocated two CPUs and 1GB of memory, with a passthrough network port for WAN connection to the optical modem. The Debian system is responsible for running most of the services I use daily, including providing DNS, RSS, and media services.

I used to find the process of opening Home Lab ports to the public network inconvenient and insecure. Recently, I configured Xray-core to access the internal network and decided to document the SSH configuration along the way.

P.S. In fact, using Wireguard is a more elegant and secure solution, but Xray-core can simultaneously implement traffic routing, making it seem like the only choice.

A simple guide about using encrypted dns in Linux、Mac、iOS and Android.

Traditional DNS queries and responses are sent over UDP or TCP without encryption. This is vulnerable to eavesdropping and spoofing (including DNS-based Internet filtering).

Encrypted DNS can make DNS queries and responses more safe.

ipv4 ipv6 dot doh address for DNS

Git is software for tracking changes in any set of files, usually used for coordinating work among programmers collaboratively developing source code during software development. Simple use just need to master about 10 commands.

Here are some useful Mac apps I recommended! Continually updated.