Submitted 1 day ago by tofu@lemmy.nocturnal.garden to selfhosting@slrpnk.net
What’s going on on your servers? Smooth operations or putting out fires?
I got some tinkering time recently and migrated most of my Docker services to Komodo/Forgejo. Already merged some Renovate PRs to update my containers which feels really smooth.
Have to restructure some of the remaining services before migrating them and after that I want to automate config backup for my OpnSense and TrueNAS machines.
Since I discovered that Freebox (the set-top box of a common ISP in France, without about 8 million installed) are welcoming to users running their own docker images, I wonder if I should not write a specific guide about how to install an alternative to Google services on these, and have a huge local impact…
I’m hosting foundryvtt on a k8s cluster. I’m using Authelia+lldap to have only authenticated users passed on to that behemoth of a NodeJS app that is undoubtedly full of vulnerabilities.
I have Authelia set up to enforce 2FA for any request outside my users’ home networks. Or so I thought, but one of my players kept getting asked to 2FA.
Turns out I forgot about IPv6. He connects over IPv6 by default.
Certbot complained about invalid files structure… after 18 successful updates over the years. Seriously, those guys should put a bit more care into updating stuff. Of course, the fix was trivial.
Sunday is upgrade day, meaning I will update the OS on my servers and then update all my helm charts.
Did an oopsie. I never realized that after upgrading the OS, my certbot renew service to renew the HTTPS certificate always failed. So now I had an expired certificate. At least it was an easy fix by reinstalling certbot.
This is the second time someone mentions issues with certbot after an update, interesting. I’m glad I have my certificates monitored and will get alerted when the remaining time is <7d
I’ve finally pinned down my backup automaton:
PartOf= a custom containers.target.Conflicts=containers.target for creating read only snapshots of the relevant subvolumes.Wants=borgmatic.service wich creates a borg backup of the snapshots on a removable drive. It also starts containers.target on success or failure since the containers are not required to be stopped anymore.rclone synced to an S3 compatible storage.What I’m not super happy about is the starting of containers.target via the systemd unit’s OnSuccess= mechanism but I couldn’t find an elegant way of stopping the target while the snapshots were being created and then restarting the target through the other dependency mechanisms.
I also realize it’s a bit fragile, since subsequent backup steps are started even if previous steps fail. But in the worst case that should just lead to either no data being written (if the mount is missing) or backing up the same data twice (not a problem due to deduplication).
I’ve been hosting Home Assistant now for about nine months very smoothly. So far the only outage has been when I moved the server into a different room last week because it was cluttering up my office. Feels good to have it tucked away in a closet. I’ve got my thermostat, and all my upstairs lights running through it. I keep trying to get these moisture sensors to work for my plants but they just keep losing signal or something and rtl433 just stops seeing those but meanwhile detects every other damn hardware on the whole block. I’ve got 500+ entities that aren’t my three sensors lol. Once I figure that out my Plant Cards dashboard will work again which is super cool.
Other than that, I’ve been hosting Jellyfin for home media and digging it. Much less success with the 'arr suite, it works and stays up but it really struggles to automatically find the weird-ass old niche media I’m looking for. I generally have to handle that part manually, but at least they are good as wishlist of what I’m looking for so I can use that just to keep track.
All in all these two servers (home assistant OS on an old laptop, jellyfin and arr on my former Ubuntu desktop) have been great and just work really without any issues.
Oh last week when I moved them into the closet, they got assigned new IP addresses, so I figured out how to lock them so my clients and bookmarks still work.
Sunday
What’s good, Kiribati ? 🇰🇮
I made some effort recently to try and set a K3S cluster with Flux but my bunch of RPi are just not powerful enough for that (never managed to deploy Longhorn). I’m moving to a more reasonable Docker Swarm with Ansible.
Uh, yeah, that’s right, I’m in Kiribati and absolutely didn’t confuse the weekdays 🫣
Bit disappointing it doesn’t seem to run on your Raspis, I thought that’s basically what k3s is for? Is Longhorn the problem or what component exactly? Figuring if you are going to switch to Swarm, the payload isn’t the issue
I noticed bc I live very east and in general I’m off by one day in the other direction x)
I had two problems with my gitops setup:
Probably skill issue in both case, but the trial and error was slow and annoying, so I figured I would just upgrade my Ansible setup instead.
I bought a second USB SSD which has now become the second backup SSD. I ended up skipping my switch to Podman because I got invested in writing another script.
I’m not interested in having my backup drives automatically decrypt and mount at startup but those were the only guides I could find. I still want to manually type my password and wanted an easier way handle that.
I ended up writing this script which turned the 4 lines of code I was using before into a 400+ line single file script.
Once I pair it with my rsync script, I’ll be able to remotely, automatically and interactively decrypt, mount, update my backup, unmount and re-encrypt my USB SSD. The script also has tests to make sure the mount directory is ready for use and not sending anything with rsync if the encrypted SSD is not mounted. I just finishes writing the script and now I have to integrate it into my systems.
I was originally going to add the second backup to my local-only network Pi server but I think I’ll add it to my web facing Pi server so I am able to access it remotely. I would feel a lot more comfortable knowing that data on there isn’t easily accessible because it’s not auto-mounting.
Other than that, things are boring and boring is good.
standarduser@lemmy.dbzer0.com 57 minutes ago
I just purchased my first domain, so now i get to learn how to use that with a reverse proxy and setting up the routing. DNS already giving issues on home network so this’ll be fun.