help on setting up home lab (networking)
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    You don't want the nextcloud to be public for everyone, then I'd go the tailscale route without a vps. Just connect your Server and phone.

    If you want it to be public, then I'd still use tailscale and do it like the other comment suggested.

    Reverse Proxy on vps connected to tailscale, proxzies the traffic through the tailnet to your server. That's what I'm doing btw.

    1
  • Secure portal between Internet and internal services
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    You need a wildcard cert for ypur subdoman:

    *.legal.example.com
    

    Then point that record to 127.0.0.0. This will not resolve for anyone. But you'll have an internal dns enty (useig pihole/adguard/unbound) that redirects to your reverse proxy.

    You could also point to your revers proxy internal address instead of 127.0.0.0.

    This video could help you: https://www.youtube.com/watch?v=qlcVx-k-02E

    4
  • How do you guys handle reverse proxies in rootless containers?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    I do. If you run caddy with network_mode: hostor better with network_mode: "slirp4netns:port_handler=slirp4netns" it should work.

    also adding:

    cap_add:
          - net_admin
          - net_raw
    
    2
  • Podman rootless Jellyfin/Plex container with hardware acceleration
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    I played with this problem too. In my case I wanted a zigbee usb to be passed through. I'm not sure if this procedure works with gpu though...

    This was also needed to make it work: https://www.zigbee2mqtt.io/guide/installation/20_zigbee2mqtt-fails-to-start.html#method-1-give-your-user-permissions-on-every-reboot

    devices:
          # Make sure this matched your adapter location
          - "/dev/ttyUSB.zigbee-usb:/dev/ttyACM0:rwm"
    

    Also I passed my gpu to immich. But not 100% sure it is working. I've added my user to the render group and passed the gpu like the usb zigbee stick:

    devices:
          - "/dev/dri:/dev/dri:rwm"  # If using Intel QuickSync
    

    The immich image main user is root if imI remember correctly and all permissions that my podman user 1000 has are granted to the root user inside the container (at least this is how I understand it...)

    For testing I used this: https://www.zigbee2mqtt.io/guide/installation/20_zigbee2mqtt-fails-to-start.html#verify-that-the-user-you-run-zigbee2mqtt-as-has-write-access-to-the-port It should be working with gpu too.

    I can test stuff later on my server, if you need more help!

    Hope this all makes sense 😅 please correct me if anything is wrong!

    3
  • Too many issues with Lychee. Any alternative ?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    I'm sorry to hear that. But the dev points that out very clear on the docs etc.

    From what we self hosters are used to, this does not happen often, but it can.

    Hope you can recover!

    1
  • Too many issues with Lychee. Any alternative ?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    Immich is very cool. Be carefull to read every release note and do not auto update. There are can be breaking changes! In total im happy with immich!

    5
  • Best firefox build for android?
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 100%

    You can take a look at FFUpdater on F-Droid. There you can see different browsers for android and information about the features they have.

    I'm useing mull.

    4
  • Ente - Open sourcing our server
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    herrfrutti
    Now 66%

    I understand this, but that way you always read the update notes and you control what version you install. This can be a good practice.

    That stuff breaks is not so nice though.

    2
  • Our lovely Cosmo 🤗

    488
    9

    One of my cats

    169
    9
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearHE
    Now
    3 80

    herrfrutti

    lemmy.world