Absolutely. Simply use ACME with the DNS validation method. Using bind you’ll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn’t exclusive to bind, ACME tools supports dozens of other backends. That’s all you need the actual domain doesn’t need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.
Except it isn’t. Saying it is trivial is just gross generalization. It’s trivial to configure bind to have internal zones that aren’t resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.
You can have (sub)domains that are listed in the certificate lists and yet aren’t resolvable externally as well.
It’d be better and more accurate say the list of certificates then.
Sub domains aren’t public unless your DNS server has XFER on.
Worth noting about this approach is that the global list of subdomains is publicly searchable.
Can you expand on this? What is it that you call the “global list of subdomains”?
Use yt-dlp to download the file and play it in MPV/VLC/Celluloid.
It’s not rocket surgery
Easy to say for a rocket appliantist.
Thing is, it’s just not true. OnePlus also allows relocking.
The comment I’m replying to mentioned other OSs and non gaming functions. For those purposes Virtio requires almost no configuration to work with acceleration and works more than well enough.
That said, vietio drivers do in fact exist for windows.
Virtio works jisy fine.
Anything that supports bind’s built-in nsupdate.
You can even use SecureBoot and TPM in a VM ;) OVMF EDK2 fully supports both ;)
SecureBoot is fine, sucks that vendors won’t add distro keys but you can do that yourself, or use the shim.
I don’t know which distro you’re using, but in Fedora and Debian it’s pretty easy to install the signed version of grub and the signed shime and get full secure boot in Linux. No setup needed.
It’s very possible, but on the bright side it’s all local, no cloud garbage 😎
Yeah really. I keep hearing these tales of issues with poor network and what not…
I have literally over 120 devices in my network. Ranging from the cheapest Tuya door/windows sensors I could find (cause I needed thirty+!) to innovelli switches and it just works fantastic. HamGeek PoE concentrator. My only complaint it not being able to control the mesh more (tell certain devices not to be routers, force certain routes for end devices so they don’t use routers that go down when the power is out). I will probably remedy that by adding a second concentrator.
That’s not to say wifi with ESPHome.and Tasmota aren’t great. Far more powerful and flexible, and with a quality AP it can also support a ton of devices, I have easily four dozen devices running with no issues.
That’s very good.
Everything got enshitified to increase shareholder value.