mhzawadi

mhzawadi , 7 days ago

well the work they did to allow for faster updates has paid off in spades, sterling job to them

mhzawadi , 10 days ago

Hello 👋

You need to edit the below lines

set $jellyfin jellyfin;
resolver 127.0.0.1 valid=30s;

To look like the below

set $jellyfin 127.0.0.1;
#resolver 127.0.0.1 valid=30s;

Edited after reading the full config

mhzawadi , 11 days ago

Why delete the answer, why not edit it so that a human can see the answer but for AI its a load of nonsense?

mhzawadi , 11 days ago

So we need to up vote wrong answers only?

mhzawadi , 12 days ago

Im a nagios head here

mhzawadi , 26 days ago

I have just been round my small setup and run an OS update, took about an hour. That includes a reboot of a dedicated server with OVH.

a pi and mini PC at home, a dedi at OVH running 2 LXC and 5 qemu vms. All deb a mix of 11 and 12.

I spend Wednesday evenings checking what updates need installing, I get an email every week from newreleases.io with software updates and run Semaphore to check on OS updates.

mhzawadi , 27 days ago

The comments about storage still stand, that's a tricky thing to do over the internet.

But I would recommend a meshing VPN, tinc can mesh and will route round network problems.

Also don't forget about backups, as that could be a better thing to have off site

mhzawadi , 28 days ago

How much do you point and click your setup?

As I use nagios

mhzawadi , 1 month ago

Not sure if it's in fedora, but I use nullmail as my mta. Simple to config and does just MTA

mhzawadi , 1 month ago

My guess is the massive amount of hardware variations, you would need a house full of devices to test all the different options

mhzawadi , 1 month ago

Plus 1 for newreleases.io, I use it for both GitHub repos and docker hub things.

You can get alerts to a boat load of things on a daily week or monthly basis

mhzawadi , 1 month ago

I live under a rock, so whats a threads and who is Mark Zuckerburg?

I gest, I really dont care that Mark is on the fediverse. Till my Lemmy instance is full of threads crap and I have to route via the Zuckerburg hive mind.

mhzawadi , 2 months ago

They make the money on the ink, not the printer. Laserlet for win

mhzawadi , 2 months ago

me remembering I caused an outage yesterday by deleting nginx config 🤦‍♂️

mhzawadi , 2 months ago

fediverse for the win?

mhzawadi , 2 months ago

we can only hope

mhzawadi , 2 months ago

That's not my hand!?!

mhzawadi , 2 months ago

Have a look a small step ca
https://smallstep.com/docs/step-ca/#introduction-to-step-ca

mhzawadi , 2 months ago

What?

It's a single process that runs a ca, it might well be a web service but that's built in. I use it for SSH certificates in my homelab, setup was a doddle.

Might have a look at the web cert bit, but you might find certbit can connect and get a cert

mhzawadi , 2 months ago

Maybe investigate why it hung?

That could be a sign of something bigger about to kill it altogether

mhzawadi , 2 months ago

Boobs?

mhzawadi , 3 months ago

Something to check is the type of USB devices, as I had a hard time with finding enclosures that work.

Some enclosures just don't work and randomly disconnect

mhzawadi , 3 months ago

I think your missing the point of HAOS, it's an appliance. You don't manage it like a normal self host system.

Once you treat it as an appliance, it's great. Also there is a portainer agent you can run that will connect to a portainer instance.

As for your tunnel issues, maybe the tunnel thing is your biggest issue. I run all my self host stuff on its own subdomain, if I want to route something home I use the site to site VPN I have. Even a cheap ovh vps could be a way to run stuff on subdomains

mhzawadi , 3 months ago

Requiring a full URL will be more of security thing I would guess, as some users put HA on the internet and it could have access to open doors.

Also I have tried things on sub paths and it got very complicated to know where a service was, a domain keeps things easy to setup and manage. As I run internet facing services for my day job, I have to look at both security and easy of maintenance when setting things up.

I would say that if you need a path over domain, its a skill issue and you need to find a better way of working.

mhzawadi , 3 months ago

Ok, I dont get your point of view. As I dont see the need to sub path things.

What I do see is a lot of people who seem to think that a sub-path is good security, cheaper to run and lots of other things.

First off, you can get free lets encrypt certs and even a wildcard cert if you know how. Also you can get a SAN cert with a little config of certbot.

Second, you dont need an A record for every domain. You can use a c-name or even a wildcard to catch any domain name.

Then the security is all crap, if the sub path is on the internet it will get found in time. A domain is just more obvious, you can also name the sub domain anything you want. Case in point is my nextcloud on an owncloud sub domain.

If you start to look into ways to automate all that, then things are trivial to add to. I use OVH for my domains, as they provide an API that I can use with certbot to get any certificate I want for my domain. I can also use the API to provision a new subdomain, be that an A record or c-name. But I have a wildcard subdomain so that I can spin up anything on any subdomain and I dont have to do any setup.

• https://knowledge.digicert.com/solution/what-is-san-certificate
• https://certbot-dns-ovh.readthedocs.io/en/stable/
• https://www.a2hosting.com/kb/getting-started-guide/configuring-domain-settings/wildcard-subdomains/

mhzawadi , 3 months ago

Crap, now we need to check out every job on your CV, thanks gpt.

As if not hard enough to find someone who can work a terminal and ansible and has used aws

mhzawadi , 3 months ago

A quick search shows that IP is known for hacking type requests https://www.abuseipdb.com/check/45.79.168.172

I would check how your router is setup, as they should not be hitting your computer at all.

mhzawadi , 3 months ago

If I had all the time I wanted to homelab, I would get me a Nas box and run like 10 pis of different vintages as purpose built servers.

A pi to run PHP, a pi to run mysql, a fleet of pis as docker nodes.

mhzawadi , 3 months ago

Is the caldev URL somehow wrong?
SSL verification could be wrong URL or wrong date even

mhzawadi , 3 months ago

many thanks for the continued hard work

mhzawadi , 4 months ago

I use OVH for my dedi, they often have sales on -> https://eco.ovhcloud.com/en-gb/

mhzawadi , 4 months ago

With davx on Android to sync it all, even your contacts

mhzawadi , 4 months ago

Why not run Lemmy without federation?

mhzawadi , 4 months ago

that looks to be almost all steaming services adding an ad-supported option, you now pay to not have ads.

Back to the high sea's to watch anything then

mhzawadi , 4 months ago

I have pi-hole running for network level ad blocking, it always confuses me when not at home and I see ads

mhzawadi , 4 months ago

I've not moved to 28 yet, might wait a bit longer from your post. My 27 is rock solid, I don't understand why so many have issues with nextcloud.

Maybe the docker installs are pants

mhzawadi , 4 months ago

Thanks for the heads up, will wait for 28.0.2 as that is currently cooking.

On the Retention app thing, I got into tagging to remove old backups. Will have in the morning for how I set it up

mhzawadi , 4 months ago

I think you want to limit to DVD, I think you Amy have Blu-ray

mhzawadi , 4 months ago

I've not seen nebula, that looks a lot like tinc. Iight have to see how hard nebula is to get running.

If your looking for a mesh VPN, tinc is very easy to setup

mhzawadi , 4 months ago

I would move the SSL to your VPS, make that your nginx entry point.

Then use virtual servers in nginx to listen on the wiregiard nic for local stuff and it's public IP for internet accessible stuff, you could also add in some Auth service for things without MFA.

mhzawadi , 4 months ago

You could, that would keep home stuff at home

mhzawadi , 4 months ago

I would move to 0.18 and then on to 0.19, how you get there will depend on how you setup in the first place. a look at your compose file would help

mhzawadi , 4 months ago

Update lines 33 and 48 with 0.18.5, then do a docker compose pull and then docker compose up -d

Once lemmy is up and happy, then repeat for 0.19.1

mhzawadi , 4 months ago

You might need to wait for lemmy to sort it's self out before lemmt-ui is happy

mhzawadi , 4 months ago

Yes, I had the same issue when I updated to 0.19

mhzawadi , 5 months ago

I use nextcloud to collate all my RSS feeds, I can then access them all from the nextcloud web UI or the mobile app

mhzawadi , 5 months ago

I have noticed something odd, I now dont see posts to local communities in the main feed. is that expected?