towerful

my router and my reverse proxy (traefik) is able to receive the necessary SSL/TLS certificates however

From something like LetsEncrypt?
As an HTTP-01 Challenge? Not an DNS-01 challenge?
Http challenge means that port 80 is accessible from the public internet (because that's how LE can confirm it can reach your server via the public DNS records, proof of server ownership).
DNS-01 is about proof of DNS record ownership, and doesn't prove public internet access.

Also, what are you self hosting?
Does it really need to be publicly accessible? Or just accessible by you and people you trust?

If it adds to the content, then it is worth something. So make someone worth something.
If it doesn't matter, add a random screenshot of kernel code.

The "worth something" doesn't even have to be financial.
Find a nice image that someone has made which is linux-related, and ask if you can use it & credit the author.
If no, try someone else.

If that's too much work, use a random screenshot of kernel code ...

There are artists out there that have already freely shared some really cool art, that would love to be able to point to publications that they have permitted to use it.
If you have some budget, pay them. Value the time involved.

Just not AI filler BS. I'm not going to see some filler AI art and go "oh yeh, I'm going to use that for X/Y/Z".
But if I see some cool art, I'm inclined to commission something for an actual use case

I swear, if it didn't have a $ in it, it wouldn't have had the initial 18 rating and yt wouldn't be restricting it.

It could've been cookies, and I bet it wouldn't have faced the pushback it has.

It's a rogue-lite. It just happens to be played with cards and poker hands. But the only gamble is Wheel of Fortune, and that isn't a gamble cause it never hits

Sounds like you have had a very productive life! Your son is very lucky.

Encourage the education. But there are loads of good careers that don't need university degrees.
And all the while, he can try and achieve his dream.

From personal experience, university wasn't useful for me - other than giving me time to figure out what I don't want to do, and meeting friends that are still friends to this day.
But I could've easily done an apprenticeship, or gone straight into some industry/company. Some days, I wish I had. Other days, I wouldn't want to be doing anything other than what I am atm.

Dream case, he makes it.
Best case, he figures out what he wants to do by 21.
Worst case, he's still figuring it out when he's 25.

I wasn't making decent money until I was late 20s. Even now, I can't guarantee I have enough work next year. It's extremely likely, but I'm self employed so...
Knowing my folks will still support me means I can continue pursuing interesting, useful and innovative things, even in my 30s - even tho the support is no longer required.

Maybe talk to some of your contacts in the football industry.
See if they have similar "football or nothing", or if they had backup plans.
Talk to some managers, coaches, sports scientists, medics etc.
Ask them how they would get into pro football. Ask them what happens to pro-football aspiring players that don't make the cut.
Use your experience and connections to help and support your son. And be there if it doesn't work out.
You might know better, but he still has to learn. The best lessons are mistakes.

Did you go straight into being a pro footballer? Or did you have back up plans? Like "if this doesn't work out, I'll be an electrician" or something?

I've never had super lofty goals, but my parents always supported me in what I wanted to do. They never tried to steer me, but they did ask pertinent questions about what I was planning at various points. Probably to hint at bad idea.
I feel like I could have asked them for money/support at any point for any of my projects/ideas/whatevers, and - after making sure I was serious - would have helped out however they could.
I have a very unique career at this point, and I am only in this position because of the eclectic experience I have. And it is completely unrelated to my dreams as a kid or what I studied at university.

Ultimately, he is growing up. He's going to have to make mistakes.
I'd say you have to be prepared to support him as much as you can in his dream of being a pro footballer.
Maybe he won't be a pro footballer, but he might get a satisfying career out of being football-adjacent. Medic, science, coaching.
Or maybe he will try it for 5 years and eventually realise it's not gonna happen, and be an electrician.
Or maybe he will struggle for 2 years, realise he needs to double down, and make the cut a year later.

I had a friend when I was growing up that dreamed of being an RAF pilot. Everything he did was around that.
Due to some unfortunate life circumstances, that dream was ripped away in the space of a week. Completely out of anyone's control, but he could no longer qualify as an RAF pilot.
He was heartbroken. He's now an engineer/mechanic in the RAF and loves tinkering with cars.

He shouldn't find another dream.
But he should be aware that dreams don't always come about. And if this dream doesn't, would he be happy in an adjacent career? Or something else entirely?
Help him research the backup plan.

I moved to endeavouros. First time using a rolling release, and I was struggling with some webdev stuff cause node was on a recent non-lts build and a few other things.
Not a problem for building, cause I already have that containerised. But things like installing packages was refusing, and obviously couldn't run dev workflows.

Until I realised I should just work inside a container.

I know vscode is still Microsoft (and I'm sure I could get it to work with vscodium), but the dev container workflow is fantastic.
Absolute game changer.
And I know I can easily work on a different platform, os whatever. And still have the same dev environment.

Or use what PTP does.
https://en.m.wikipedia.org/wiki/Precision_Time_Protocol

Which is a more accurate protocol than NTP.
https://en.m.wikipedia.org/wiki/Network_Time_Protocol

I've heard Drupal uses SQL

What?
You have a product that costs 450 to produce.
And you add a 50 markup so you are selling at 500.
Tariffs push that 500 up to 750. Which means a 50% tariff.

So you remove your 50 markup and sell it at cost in that market. Which means a product at 450 with a 50% tariff will cost 675.
You don't make any money on that sale. Fine, it's a loss-leader. Hopefully you make up the profit of game sales and subscriptions. Which will also be tariffed.

For a finished product, the tariff is applied to the selling cost. It doesn't care about the value of the parts or the amount of markup.
A government isn't going to pick through a device and apply Country of Origin tariffs on every part, or separate company profit from cost-of-product.

If a company says a product is worth 500, that's the amount the tariff is applied to.
I doubt Nintendo is going to eat the cost of tariffs.
It's insane to. They could say "we will still launch at this price", and have the us government cook up more tariffs or whatever. Then Nintendo is holding the bag, or has to renege on the price.
It would be smarter to mildly offset the cost. Like you say, knock $20-50 off but stipulate the final cost is subject to import duties.
I'd love them to say "well, you do you. This is the cost of the console. Your import duties are not out problem." But I feel (despite their bullshit legal department) Nintendo is more passionate than that, and I think they will mildly reduce the price

What kind of sane person is gonna debug and track down a memory leak, though? Just buy more ram

You need to control a domain, so LE can verify you are the controller of the domain, then LE will issue you a certificate saying you are the controller of the domain.

For a wildcard LE cert, you need to use the DNS challenge method.
Essentially the ACME client (or certbot or whatever) will talk to LE and say "I want a DNS challenge for *.example.com".
LE will reply "ok, your order number 69, and your challenge code is DEADBEEF".
ACME then interacts with your public nameserver (or you have to do this manually) and add the challenge code as a txt record _acme-challenge.example.com. (I've been caught out by the fact LE uses Google DNS for resolution, and Google will only follow 1 level of NS records from the root authorative nameserver).
All the while, LE is checking for that record. When it finds the record, it mints a wildcard certificate.
ACME then periodically checks in with LE asking for order 69. Once LE has minted the cert, it will return it to acme.
And now you have a wildcard cert.

So, how to use it on a local domain?
Use a split horizon DNS method.
Ensure your DHCP is handing out a local DNS for resolving.
Configure that local DNS to then use 8.8.8.8 or whatever as it's upstream.
Then load in static/override records to the local DNS.
Pihole can do this. OPNSense/pfSense can do this. Unifi can do some of this.

How does this work?
Any device on your network that wants to know the IP of example.example.com will ask it's configured DNS - the local DNS that you have configured.
The local DNS will check it's static assignments and go "yeh, example.example.com is 10.10.3.3".
If you ask you local DNS for google.com, it won't have a static assignment for it, so it will ask it's upstream DNS, and return that result.
And it means you aren't putting private IP spaces on public NS records.

Then you can load in your wildcard cert to 10.10.3.3, and you will have a trusted HTTPS connection.

Here is a list of LE clients that will automate LE certs.
https://letsencrypt.org/docs/client-options/

Have a read through and pick your desired flavour.
Dig into the docs of that flavour, and start playing around.

If it's all HTTPS, consider using something like Nginx Proxy Manager (https://nginxproxymanager.com/) as a reverse proxy in front of your services and for managing the LE cert.
It's super easy to use, has a decent GUI, and then it's only 1 IP to point all DNS records to.

That's great news!

Ukraine currently has fewer than 1,000 terminals connecting to Eutelsat's network, but Berneke [Eutelsat CEO] said the company aims to increase this to between 5,000 and 10,000 "relatively fast."

A Eutelsat spokesperson, Joanna Darlington, said discussions are ongoing regarding further funding from Germany and the EU.

Starlink, which provides service to over 50,000 Ukrainian military, medical, and civilian users, has faced uncertainty over continued access.

Excellent work. Will be interesting to see how "relatively fast" plays out, and if other countries step up.
Musk cannot be relied upon as a military ally. Well, for some governments at least...