nsfwpls@lemdro.idtoAsklemmy@lemmy.ml•to those of you of either sex who wear thongs or strings, doesn't the back side get in direct contact with your anus?English
181·
7 months agoI think it depends on the thickness of the cheeks and thong/string. I have a thicker than average booty for a guy, and I usually just feel thongs rest between my cheeks. If I start doing some crazy stretches or yoga I’m sure it’d get a little closer to the anus as things spread out.
Strings definitely get more up close and personal, but I feel it more on the top of my ass where it meets my back and on my gooch than my anus directly. It definitely goes a little deeper between the cheeks though, but I sure don’t feel it rubbing against my anus. The right thong/string should feel like almost wearing nothing.
Are you using a *.duckdns.com domain or is that only for Dynamic DNS pointed to something like jelly.domain.com? I’m not sure if you’ll be able to get a cert in the former scenario.
Your router won’t let you access it because you’re trying to connect from your internal network to your external network, so you’re just connecting in a loop and not getting routed properly. This could work if you had a firewall that would let you set up a loopback NAT, but my guess is your router won’t let you setup NAT rules like that.
You won’t be able to get a certificate using a local domain from a public certificate authority (like Let’s Encrypt). You would want to define the FQDN you want to use, like jelly.domain.com, and generate the certificate for this domain. You can do this manually with certbot and import the certificate to jellyfin, or put jellyfin behind a reverse proxy like Caddy or Nginx and let it handle automatic renewal for you.
The local DNS entries would then redirect internal requests for jelly.domain.com to your local server, which presents the same certificate for jelly.domain.com regardless of whether you’re accessing it via the private or public IP.
A bonus of using something like Caddy is being able to open a single port on your router for every service. I have multiple services all accessed via the same port, and Caddy just reads the requested subdomain (jelly.domain.com, nextcloud.domain.com, etc) to route the traffic to the corresponding local server. This lets it handle every cert for all services with no manual steps needed for any of them after the initial setup, and reduces your attack surface by only having one port open.