You’d be surprised

Obligatory “check out Kagi”

I explained why. Misconfiguration and caching.

You would also need to clear your device’s DNS cache.

Not two A records. From what I understand, OP has an A record pointing to their public IP address (which Nginx is listening on behind a NAT). Then, on the local network, OP uses their own DNS server to ignore that entry and instead always serve the local IP when a host on the LAN queries it.

Aside from OP’s devices potentially using a different DNS server (I was only able to solve it for my stock Android by dropping outgoing DNS in my firewall), this solution is a nightmare for roaming devices like mobile phones. Such a device might cache the DNS answer while on LAN or WAN respectively and then try to continue using that address when the device moves to the other network segment.

These are the most likely scenarios in my opinion - OP’s devices are ignoring the hacky DNS rewrite (either due to using a different DNS server or due to caching) and try to access the server via the public IP. This is supported by the connection timeout, which is exactly what you would see when your gateway doesn’t do loopback.

Never point your DNS at two different IP addresses like this. It will only cause you pain and unexpected behaviour.

What you are experiencing is solved by so-called “NAT reflection” or “NAT loopback”. It’s a setting that - in the optimal case - you should just be able to activate on the appropriate interface on your gateway.

If you do not have that setting or do not have access to the edge router, but only some intermediate router, you can do a nasty hack. You can point static routes to your public IP address to point at your local IP address instead. In that case, you also need to tell your server to accept packets with your public IP address as the destination.

It’s not open source by choice. In fact, they tried breaching the license to keep it closed source.

Picking emojis that make sense actually made it easy to read.

Damn, wood. Or wood-looking material at least.

My lead dev used to pronounce it njinx and I always needed some time to realize what he’s talking about.

Everyone should report it as bug.

It means something else.

Figured out how to automate pushing out videos with to content and plagiarized stackoverflow responses every few minutes. YouTube doesn’t care. I am filled with deep hatred whenever I see that face.

Other comment have gone way more in-depth, but there’s also a difference between using commercial VPNs and ones you set up yourself. I have a few private VPNs set up on servers I physically own in different countries and that offers different protections than just using NordVPN.

Narrative-driven games made Valve into Valve. But ok, you do you.

I first got this realization when I started using grey scale mode for my phone at night. A “good to bad” scale in an app became unintelligible. Since then I try to consider colorblindness if I design stuff myself. It’s fantastic if color scales carry meaning in both their colour but also the same meaning in their lightness, so everyone can understand them the same.

Super super user.

Have you ever tried Linux on photosynthesis?

Bold of you to assume they read the book.

I use Debian for any of my servers. Its stability is unparalleled.

My personal computers are a playground though.