tychosmoose
@tychosmoose@lemm.ee
- Comment on How do I securely host Jellyfin? (Part 2) 2 weeks ago:
Ah, got it. That plan should be great. You can segment your own wired+WiFi network with that hardware, and even do Wireguard from the hAP ax2 to get whole-network egress via an outside VPN service at a good data rate, if you want.
The other devices you might consider as the router are the GL-iNet Slate series. They will be slower as a VPN router, but they’re pretty small and light. They come with a skinned OpenWRT, but in most cases you can install a build of the unmodified OS if you want.
- Comment on How do I securely host Jellyfin? (Part 2) 2 weeks ago:
Sure. That plan would work. You might want to be sure that this is permitted at your university.
Universities often have strict rules about what should connect to their networks.
- Comment on How do I securely host Jellyfin? (Part 2) 2 weeks ago:
That isn’t what I would choose for your situation. CRS3xx switches are fast at switching (layer 1 & 2), but not as a NAT router, which you probably need.
Better to pick something from the Mikrotik Ethernet Routers range, assuming you don’t want your personal LAN to have WiFi. The L009 or basic RB5009 are both good options in the same price range. Choosing depends on your upstream connection speed. Both are fanless.
Or pick a Home/Office Wireless device if you are permitted to have your own WiFi access point. The hAP ax2 is small, affordable and performs well at 1Gbps. If your upstream connection is 1Gpbs this is probably what I would choose even if you don’t want WiFi as long as this is enough ports. Just turn off its WiFi radios to use it wired-only. If you have a 2.5Gbps upstream port then hAP ax3 is a better choice.
All the Mikrotik choices will require some learning if you want anything beyond a basic router configuration. But once you get it like you want it they are very solid and reliable.
OpenWRT and OPNSense are easier to jump into without a lot of effort, so if you don’t want a networking hobby I would use one of them. Pick up pre installed device if you want it easy. Or get a mini PC with a few network ports and install the OS yourself to get more power for the money.
- Comment on How do I securely host Jellyfin? (Part 2) 2 weeks ago:
How about creating your own LAN within the untrusted network?
Something like an inexpensive OpenWRT router would do fine. Connect all your devices and the server to the router. They are now on a trusted network. Set up Wireguard on the OpenWRT router to connect to Proton so that your outbound traffic from all your devices is secured.
- Comment on DuckDNS URL no longer working on home network? 1 month ago:
Could also be a stale DNS cache entry on one device or the router. If you ping your duckdns fqdn from the device that can’t connect while on your home network, does it resolve to the correct public IP?
I still think a firewall/nat issue is more likely tho.
- Comment on DuckDNS URL no longer working on home network? 1 month ago:
What is your router make and model? You need to enable hairpin NAT.
- Comment on What are some of the things someone permanently relocating away from the US should be aware of? 1 month ago:
Not when you change residency, but if you relinquish your citizenship: en.wikipedia.org/wiki/Expatriation_tax#United_Sta… or your residency has been revoked.
So if you remain a US citizen you owe normal annual tax (minus a credit for foreign taxes paid).
- Comment on Is this massive difference to be expected? 1 month ago:
The port is forwarded from your router to the pi, right? If so, you could test for the router as the bottleneck using the router’s WAN side IP address as the target.
This should give you a good data point for comparison. If it’s also slow then you can focus on the router performance. Some are slow when doing hairpin NAT.
- Comment on YSK: Gas stoves cause cancer 1 month ago:
It’s significantly immediate-er with induction - particularly going from cool to hot. Boil water in 2 minutes and handles don’t get hot in the process. And since nothing is heating except the metal of the base of the pan there is no residual heat from the cooktop parts or the sides of the pan when you turn it off. The temperature drops much faster.
I went back to gas after 5 years cooking on induction and miss it a lot. Cooking something like pasta that requires boiling a sizeable quantity of water takes 2x or 3x longer on gas, even with a very powerful burner.
- Comment on NUT UPS support question 1 month ago:
I’d say your chances are very good. Even their high end rackmount models work with the usbhid-ups driver. Don’t think they would change things up in this regard since they would also need to change their software.
- Comment on Networking Oddity 2 months ago:
You might want to do a DNS leak test from your phone with the wireguard connection down and then with it up to make sure you’re tunneling DNS. This will be clearer if you set pihole to use something upstream that an ISP is unlikely to use - quad9 for example.
- Comment on What are your Homelab goals for 2025? 3 months ago:
Btw: does anybody know what bad things actually happen if there is no metal cage that blocks all the radio?
Noise happens. Could be no problem, or it could hurt your wifi or mobile data connections, or maybe raise a neighbor’s ham radio noise floor. I saw this recently when setting up a pi to run BirdNet-Pi. The USB3 connection to an SSD caused enough noise in the 2.4GHz band that the onboard wifi radio could only connect on the 5GHz band.
- Comment on What are your Homelab goals for 2025? 3 months ago:
To start - moving services from bare metal to rootless Podman containers running via quadlets. It’s something I have had in mind for a while but keep second guessing the distro choice. Long-ish release cadence, systemd-networkd and a recent Podman version in the native repos, well supported, and not Ubuntu.
So far openSUSE Leap seems like the winner. A testing machine is up to install everything, write some deployment scripts, and decide on a storage layout and partitioning scheme.
If anyone has another distro to recommend that checks these boxes let me know!
I like rolling release for the desktop, but only want critical patches in any given month for this server, and a major upgrade no more than every 3-4 years. Or an immutable server distro. But it doesn’t seem like networkd is an option for the ones I’ve looked at (Fedora CoreOS, openSUSE MicroOS), and I am not sure if I want to figure out Ignition/Combustion right now.
Next project - VLANs on Mikrotik.
OP - Navepoint makes good racks for reasonable money. I have a Pro series 9u from them and it went together without any problems. It’s on the wall with a pretty big ups in it.
- Comment on What are some self hosted services that you think are essential? 5 months ago:
Huh. Losing USB access?
- Comment on What are some self hosted services that you think are essential? 5 months ago:
It’s not very exciting, but: Network UPS Tools (NUT).
Keep everything in good shape in the event of a power outage.
- Comment on Post your setup. no matter how uggo 5 months ago:
Here’s my messy-cabled 9u rack.
It has:
- Fiber gateway out of view on top of the rack.
- Switch, which also powers 2 Ruckus APs and 2 other switches.
- Mikrotik RB5009 router.
- Raspberry Pi x3 all running Debian Bookworm. I have too many pis right now, running Home Assistant, LibreNMS, Log collection, and a read-only NUT server that orchestrates shutdowns and startups on power loss. I need to consolidate these.
- 1L PCs. One is on Debian serving media and files. The other is a test server where I’m trying out Immich on openSUSE. I’m considering moving to that and rootless podman for services. To that end I have another of these 1L boxes on my desk trying other options (MicroOS, Fedora IoT, maybe others).
- HDs. These are backup drives for the 1L server. I keep them powered off except when needed.
- UPS and a managed, switched PDU.
Everything is set up for low energy consumption (~90w), remote administration, and automatic recovery from power loss.
- Comment on Syncthing Android app discontinued 5 months ago:
That and the shrinking ability to grant access to device storage. If that becomes an option only on rooted phones (which seems like the directly Google is heading) it will make the audience for such an app much smaller.
