non_burglar

Will test, thx. Keep up the good work.

I initially set it up because bothbsonarr and radarr were making their own api calls to indexers and I would get some “daily max exceeded” for certain sites. The idea was that if one host made the calls instead of 2, I wouldn’t get rate limited as much.

Now I only have my nzb and pb indexers, the first has no such limits because I pay for it, and the second is only used as a second priority, so I don’t really hit limits anymore.

If you have a bunch of arr services, this is useful. But I only have the two, so I don’t think it’s much work to set indexers up individually.

To me, it’s a good stack. A lot of ppl have lower numbers than this, but then they set up a VM with docker and just run 12 extra things there. :P

Yeah. I have a dell r430 sitting unused and a supermicro xeon-d board, both have a BMC.

It’s really nice to have, but server stuff is expensive and power hungry.

Plus, I’ve shifted my way of looking at the setup where I’d rather it just default to starting back up properly. Even if I have a failed disk, if I’m away there’s nothing incan do about it until I’m physically back.

I’m almost 30yrs in it/devops/infosec and I’m no longer interested in owning an excavator just because I can.

Incus, all services running in lxc. Ansible and templates to run startup stuff for new containers (ssh keys, etc). My docker setup is primitive, I regressed down to individual containers for each with docker compose. It’s so trivial to restore last night’s lxc backup that k3s/k8s doesn’t really help me. Intact, i’ve been simplifying everything to suit my use, including hardware.

• sonarr
• radarr
• bazarr
• prowlarr (I’m close to getting rid of this)
• transmission
• sabnzbd
• kavita for comics only
• calibre Web automated (CWA)
• frigate NVR
• navidrome
• immich
• openwisp to manage 2x openwrt access points
• homeassistant
• technitium DNS x2
• uptimekuma monitoring x2
• ntfy for push notifications
• ansible
• jellyfin
• radicale
• syncthing
• Wireguard
• wanderer for GPS track mgmt on “big screen”. I track my GPS trails and drives as a hobby. I’d love a self-hosted comaps web client, but I can’t really find one. :(

Plus lots of transient trials that come and go with interest. Rotating 7 day/4 week/3 months backups by NFS with pruning, includes snapshots, but I set expires on these.

This is running on 2x minipcs with 48GB ram each, but they are way overkill. I just received a mini itx i5 board, which will house all of the containers, save VPN and 1x DNS, which I will run on an SBC.

So I’m going down from 2x servers + 1 NFS nas to one 1u server for everything plus one SBC so I can reboot it.

Power consumption is king factor for me now.

I haven’t found one, no. I just use markdown and a static HTML site generator.

Is this a trick question?

Websites are complicated. Easy, secure, cheap: pick two. There is no such thing as a universally easy, secure and cheap solution, or else we would always be using it.

Assuming you want secure and easy, I would suggest you pay someone who knows what they’re doing.

It was time in 2013.

It isn’t technically tough to do anymore, but you can only self-hosting the sip endpoint, you need to rely on and pay for upstream trunking.

Also, be aware that 911 or emergency service contact is all over the place. In Canada, VoIP providers do not provide 911 unless they have a pots tie-in somewhere, and there are still tragic issues where 911 calls are routed to dispatchers thousands of km away.

If you have any nontechnical people who expect all the features of a landline using this, don’t do it yourself.

Calibre Web Automated. I have Kobo integration enabled, so when I add an ebook to the “sync” folder, it appears on my Kobo. pretty nice system.

You have already identified the problem in the logs.

You have a fake drive with firmware that says 1.8tb but are actually much lower.

access beyond end of device

This means an inode is mapped to a non-existing sector. Get your money back, if you still can.

In tempus, the setting is called “continuous play”. In feishin, it’s called “auto-dj”. Both settings are turned on by default, so you shouldn’t have to do anything.

Scrobbling helps because every played track goes into played history, and play counts help dynamic song selection more and more over time.

I don’t use the ratings, but I’ll “heart” songs I like.

I scrobble my playing from navidrome using listenbrainz and tell my two clients Tempus and Feishin to use the scrobbled data to build dynamic playlists. If I start with a particular song or album, the mix following that is usually kept in the same mood, only strays into weird stuff once in a while, but no more that YouTube Music used to.

I mean, there’s a difference between not gatekeeping when talking about cloudflare and completely waving Cloudflare’s banner on your front lawn.

• Cloudflare has full access to your traffic, and privacy is a very strong motivator for a good chunk of self-hosters.
• You might also be interested in Cloudflare’s unending string of bad actor captcha redirects that Cloudflare inexplicably won’t resolve, for all their 800lb gorilla strength in warding off DOS volumetric attacks.
• Another thing you would think Cloudflare has resolved: captcha hell.

So yeah, I wouldn’t have phrased it the way original comment was phrased, but holy cow, bro… Cloudflare is far from perfect and the people that will have existential problems with Cloudflare are very likely to be self-hosters.

Yeah, that’s fine too. I’m being facetious, I don’t actually care that much. I just know B at this point, 30 years later.

Haha, I don’t really know, it just seems easier to remember.

B or death.

So long as my mortal body can pull drops, it will be B. Or you’re fired.

My friend, I am a daily user of tempus and it is amazing.

Late to reply here, but I set this up and it’s pretty great. The space savings is cool, but what I like is the compatibility with various Jellyfin player apps is much better. I had a number of files with over twenty subtitle tracks all labelled “undetermined”. Using subtitles on these episodes on certain (Roku) versions of Jellyfin player was an unpleasant experience. Muxarr cleaned that all up.

Could be.

Speedtest (the ookla one) uses a bunch of traceroute and compares hops to pick a peering point, but they display your public IP on the test page and probably use some icanhzip or other service to know that. It should come as no surprise to you that most north American ISPs pay Ookla to prefer peering points in which they have a heavy presence.

Icanhazip is an older service, I’m surprised cloudflare didn’t just kill it, they built their own when they were standing up 1.1.1.1.

Could also be some other tooling on your lan built before the Claude days.

The back story of icanhazip is OK, but I want to know where you picked it up in your logs… Incoming on edge? Something in your network dialing out?

You’re a programmer, what would you recommend?

Hah! By trade, I’m a sysadmin, my daily is security reviews at the planning and governance level.

I spent a good 6 years working in a Dev shop, and I picked up a lot of habits there, learned a ton about rest APIs, etc.

Setting up a vault for secrets (Hashicorp’s vault is a popular one) might be a bit overkill for your needs in a homelab, but it’s a great way to inject some security into python, bash scripts, which I think is useful, because lots of us start with scripting and move from there.

The basic mechanism is you set up the vault, define pools, etc and then use a token request instead of putting the secret in the script itself. There are tons of examples for each language and mode, but i just use a vault command in the script, throw the output in a variable and that’s pretty much it.

Secrets management in Dev and devops work is really interesting, if you ask me. All the way from the IDE to prod, there are many ways to leak passwords, api tokens, paths no one should know, etc.

Well, it’s not super difficult. I sort of mash my way through getting data by api by just using curl and then clumsily filtering the output.

You’ve already got the mechanism to get the data, I think your solution is fine. My way to do it is just a relics from my time working with a bunch of devs.

I would have just baked an api call to navidrome in a shell script with an interpreter like js and some bash variable manipulation and called it directly from motd.

For security, you may want to look at vault for secrets management so you don’t have to expose plaintext secrets in your script.

I’ve been working solo on this project for the past year

The commit history is three weeks old, so that becomes difficult to believe.

Davx5 is just a bridge between calendar apps and dav providers. One calendar has this function built-in. Any issues showing content on the right time zone, etc would be in the client, not davx5.

Yeah, that tracks fine.

It’s the recent one where a person told this group about their app, asked if anyone was interested in beta testing in exchange for full paid app access for free.

I don’t think that person posted in bad faith. But the crowd here acted like an absolute mob, calling him names, telling him to f*ck off, etc.

That was handled poorly. And I don’t think your rule would address the abuse part, regardless of how much “community interaction” you made a requirement.

That’s my problem with these new guidelines, they don’t address the venom people have towards folks for not much justifiable reason. You can’t just bend to what the crowd wants, sometimes they want blood.

If you’re not pushing your paywalled stuff

I’m not, but that shouldn’t be part of this conversation.

Where is the line for what you’re saying is “paywalled stuff”?

If someone promotes Plex, for example? Not allowed? What about deluxe features of homeassistant, which is fully open source, but paid?

Promotion of a software product? Not sure I understand where you’re coming from.

And now I’m doubly confused why you dont get the Plex reference.

Unless they are a closed source dev looking to promote.

I’m not, I swear!

Jokes aside, your example of Plex is a good one to illustrate that we’re not all at the same ratio of FOSS use, some of us have more or less of each.