Cyber

I have a mix…

I have a home built NAS running on Arch with local installation of Immich (ie not a container)

I also have a low power, passively cooed box with Proxmox installed to run VMs for Home Assistant, ansible, uptime kuma, smokeping, etc.

I only intended to run Proxmox to test it out (my Home Assistant was running on a Pi3 and getting too slow for Voice), as I’d been using ESXi for years at work.

I now want to migrate to Arch with Incus and move those VMs across, but as I currently only have the 1 host and hardware’s expensive, it’ll stay that way for a while…

(Bonus: I have a few RasPi Zeros scattered around the house too running various things bare metal)

Yeah, I get it. I do think containers encourage lazy integration - could be hard coded paths, or things like leaving apt in there, so no worries.

If you’re using Arch, Immich is in the AUR, that’s how I’m running it bare metal.

I have an ESP32 based switch between the power and my tablets which turn on /off the power between 80% and 20% using an automation in Home Assistant:

…esphome.io/…/sinilink-xy-wfusb-usb-switch-relay/

Been working well for a couple of years now, but still, the batteries in the tablets are gonna be the thing that determines how long this will work for.

@cerebralhawks@lemmy.dbzer0.com this is the very important bit:

Document every step. <— important

Whatever you do will make sense for about a day, you’ll have a rough idea of what you did the following weekend, after that… all gone.

And, whatever you do won’t be right first time, so you will be editing those notes - all part of the journey

This one.

You can setup recurring tasks, tasks that speak to you, tags, multiple reminders (good for birthdays: next month / week / today)

And locations (although I’ve not tried that yet)

I think you’re allowing icmp in, but not back out again

Wasn’t even aware of opentofu until now

@AlThePilcrow@lemmy.blahaj.zone I’m using restic to backup my NAS to a Hetzner storage box. (1TB for ~€3/month)

It’s easy, and you can SSH into the box to verify what’s actually there.

Ask for it to be removed

I agree this is an old thing, my firewall has blocklists and allowlists to prevent known bad IPs and allow only the countries I travel to.

But if Nabu Casa is an outbound VPN, then my blocks won’t work. I’d need them to block

Either way it would make sense for HA to also use some crowdsourced blocklists as a 2nd level defense

I’ve not looked into Nabu Casa much, is it an outbound VPN from our HA instances to their servers? If so, maybe the Nabu Casa admins need a blocklist?

Ok, good luck 🙂

And if it wasn’t for your post I wouldn’t know he created Ruby on Rails

It’s been a while for me (I don’t upgrade things that work and I try to buy things that last a long time…)

But, Hotel Mode might still be a thing, and it might bypass some “smart” stuff on the TV

I used that to make my TV start on the correct external HDMI port for my MythTV instance running on Arch Linux (btw) with dual TV tuners in.

The TV is rarely used to watch live TV and it’s certainly not connected to any networking.

Just another approach that I’ve not seen mentioned here

Ok, interesting… any advances after d2?

Mermaid --> d2 --> ???

It’s keeping the drawings / spreadsheets / etc. up to date, to know what changes are required, that I’m thinking about.

With multiple switches, VLANs, subnets, etc and I want to add an IoT device somewhere physically convenient, then maybe I now need to trunk the IoT VLAN through multiple devices from the Wifi AP PoE switch, update firewall rules, because this is the 1st device on that physical segment, etc… and then update the drawings afterwards.

Now that’s worth automating.

I’m looking for a map, not a calculator.

Ah, ok, so you’re usng it as a live agent to interact with the live system as / when you need some info?

Hmm, not thought of doing live queries…

I don’t have any AI running, hence just thinking of using public LLMs to create a drawing, but maybe this can interact with uptime kuma (for example) and tell me more about what just broke…

Not really seen much of mermaid diagrams before, thanks.

Btw, Looking at the issue comments, seems beautiful mermaid is unmaintained and now forked to zombie mermaid: github.com/dfadler/zombie-mermaid

I have Visio drawings already, and KeePass files and backup configs and…

So, it’s mostly therrle, but there’s always something that’s not captured, like maybe MAC address I’m trying to resolve in a switch…

I was thinking AI could draw, redraw and draw again…

Is the TV still in warranty? (I don’t know that model)… if so, send it back, it’s “broken”

If we tolerate this stuff it’ll only get worse.

To be fair… if all that happens, you’re probably toast too

Get 2 devices, set them up the same and put 1 in a cupboard.

When you make a change / update and / or the hardware fails, then you can still recover.

Personally I have a Fritz router in bridge / pass through mode, then a pfSense firewall - basically a low-ish power microATX (I think) PC - which does all my adblocking and DNS as well as reverse proxy for home assistant, etc.

Works well

I had to modify the wiring in a - fairly new - tractor once.

I opened up an inspection panel and found a pair of pliers in there, used them to fix the wiring and took them out.

I gained a tool and fixed an annoying rattle too.

If you’re not usng it for your own purposes, I doubt you’ll do what a bunch of strangers on Lemmy will tell you to do.

It needs to be running, either in your possession, or someone else’s, so sell it and make some profit from the recent price rises. Put a minimum sell price on ebay and it’ll go eventually.

Hmmm… there’s a few different things going on here.

As others have already said you don’t need a cert if you’re just messing around internally, you can use an internal TLD - .local is reserved for mdns, Avahi, etc. so that’s fine… personally, I use .home

I use pfSense, but I presume that OPNSense has the same function in DHCP to provide the Domain Name in there, so any static mappings will respond to thing.home

I also have HAProxy to resolve external IP:Port to an internal thing.home (note: no S internally)… this simplifies my setup, and I presume it could work internally too, but I’ve not set it up as DHCP solves that for me.

I don’t use containers, instead each thing is it’s own VM, or physical machine, so I don’t know whether NAT (on proxmox) would resolve your issues with everything’s on 1 VM…?

Yeah, I have 3 Ruckus APs scattered around the house and the devices are on their own SSID which I’ve VLANd off and blocked from the internet… until it’s time to do updates.

The Zeros are in far corners of the house to get a better idea of which location people are with the Bluetooth detection, but in the end I just had to throttle their bandwidth (in the Zeros) and they seem more stable now… hopefully won’t impact you, so it’s just an FYI 🙂

Nice. Did you have to sell a house to afford the parts?

I found the best thing to deal with a device that won’t work…

I’m trying to get the 3.5" adafruit touchscreen working and it’s being stubborn…

So… I went outside and split a large pile of logs.

Problem still not fixed, but I feel a hellofalot better