who has actually moved to nftables?

>>109150446
Is it less ass to use than iptables?

Gufw chads keep winning

I spent an entire day flashing a SAS controller to work in HBA mode and trying to unlock an encrypted drive, why are SAS drives such bullshit

File: 1782619162483.jpg (130 KB, 717x1101)

130 KB JPG

I have a wireguard server and client. They form a tunnel.

I initiate the tunnel connection from the client. It works. The client traffic goes to the server. And the server (vps) can proxy 443 web traffic to the client (homeserver). Good.

Now. I do not want the client traffic going through the tunnel to the server. Only server --> client traffic. Is this possible?

I already tried setting allowedIps on the client to everything you could think of (wg server ip, public server ip, ...). The result is always the same. Either
>the tunnel doesn't get used by anything (client allowedips not set to 0.0.0.0/0, but something else)
>or, all traffic uses the tunnel (client allowedips set to 0.0.0.0/0)

I am starting to consider using some other tech to achieve this, because this "split tunneling" seems impossible.

Why do I want this? Well, if I decide to update the client's software, I don't want everything downloading through the server (VPS)

>>109151789
manually adjust adapter metric in os

File: 1.jpg (30 KB, 456x577)

30 KB JPG

>intel SSD reports thousands of power on hours after few days of use
>check logs
>it clocks exactly 1440 "hours" per day
>24*60=1440 which means the drive is counting power on minutes (?) but all software treats that value as hours

>>109151789
It would be helpful to see your actual configs. But anyway, the WG interfaces can have a /31 transit network with private IPs. Traffic arrives to the reverse proxy on your VPS, then the reverse proxy talks to the homeserver through that /31 network. Homeserver can still reach the public IP of the VPS directly.

>>109151789
set firefox proxy settings to vpn peer? also use vm for this stuff, easier to manage network stuf

>>109150271
What are some use cases for OPNsense over a wifi consumer router?

>>109154165
>set firefox proxy settings to vpn peer?
Firefox also has multi-account containers, which are pretty nice for occasional VPN usage.

I have a "VPN" container that points to a Gluetun HTTP proxy, and I have some sites set to automatically open in the VPN container using the "Limit to designated sites" feature. So whenever I open a specific URL, it opens it automatically up in the VPN container and then proxies that through Gluetun.

>>109154460
I do similar but just use FoxyProxy to point to the Gluetun proxy port. The sites in its list get directed there instead.

>>109154460
>>109154551
>container
>FoxyProxy
Have you tried SmartProxy? imo it has the most convenient UI to adjust current site settings for "split tunneling".
>open some new site
>it's region-locked
>click smartproxy icon
>click enable proxy on current site
And that's it.
Though it cannot use multiple different proxy server configs simultaneously. Can FoxyProxy?

>>109154676
I haven't seen it before no, but I'm interested in anything that's simple and seamless, like that other guys multi account container thing.

That smart proxy looks like a paid thing though. I only do free stuff. I'd never pay for a VPN either, Just raw dog the small amount of torrenting I do as none of the free ones really work properly.

Is it worth upgrading from Proxmox 8 to 9?

>>109154719
What no SmartProxy Firefox add-on is free with no paywalls
GPL: https://github.com/salarcode/SmartProxy
Though it has one non-intrusive sponsor ad in settings page (that you would visit once to set up server and probably never again)

>>109154754
Oh right, I just did a web search. I'll keep it in mind if I need to change approach. It looks very similar to what I'm doing.

I presume you still need to feed it a proxy manually though, same a foxyproxy?

>>109154836
Yes it does not come with any presets nor offer first party subscriptions. You must find your own servers.

>>109153523
>It would be helpful to see your actual configs.
I think it's pretty basic. Again, my goal is to have a wg tunnel established, but not pipe the client's output traffic through wg (just incoming VPS traffic)

>Client - Homeserver that hosts a website
[Interface]
PrivateKey = REDACTED
Address = 10.66.66.5/32
DNS = 9.9.9.9,1.1.1.1
[Peer]
PublicKey = REDACTED
PresharedKey = REDACTED
Endpoint = 123.123.123.123:12345
AllowedIPs = 0.0.0.0/0 # This puts client traffic in tunnel. Changing it to "10.66.66.1/32 , 123.123.123.123" does not keep server traffic in the tunnel. Also, I tried using 192.168.1.5 and I think it put the traffic in a routing loop, my ssh connection frozen and I had to reboot my homeserver.


>Server - VPS that acts as a proxy to homeserver website (nginx -> anubis -> homeserver)
[Interface]
Address = 10.66.66.1/24
ListenPort = 12345
PrivateKey = REDACTED
PostUp = iptables -I INPUT -p udp --dport 12345 -j ACCEPT
PostUp = iptables -I FORWARD -i enp1s0 -o wg0 -j ACCEPT
PostUp = iptables -I FORWARD -i wg0 -j ACCEPT
PostUp = iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE
PostUp = ip6tables -I FORWARD -i wg0 -j ACCEPT
PostUp = ip6tables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE
PostDown = iptables -D INPUT -p udp --dport 12345 -j ACCEPT
PostDown = iptables -D FORWARD -i enp1s0 -o wg0 -j ACCEPT
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT
PostDown = iptables -t nat -D POSTROUTING -o enp1s0 -j MASQUERADE
PostDown = ip6tables -D FORWARD -i wg0 -j ACCEPT
PostDown = ip6tables -t nat -D POSTROUTING -o enp1s0 -j MASQUERADE
[Peer]
PublicKey = REDACTED
PresharedKey = REDACTED
AllowedIPs = 10.66.66.5/32

>>109154676
>Though it cannot use multiple different proxy server configs simultaneously. Can FoxyProxy?
Firefox containers should be able to do that since every container has its own settings. I only have a single proxy so I've never tried it though.

>>109154977
you have something listening on the wireguard up address and you specify that address and put it in the allowed ips
you have any other tcp request to any other ip sent out through the normal route.

>>109154977
>>109155005
It's not WG config thing, it's OS routing thing.
You have your real adapter and your WG adapter and they both can accept all outgoing traffic.
If you want all outgoing traffic to use real adapter you deprioritize (bigger metric value = lower priority) WG adapter and vice versa.

Getting a low power draw mini pc soon,, but what do I need to do so I can my laptop host movies from my hard-drive to play on my android tv sticking the meantime Jellyfin?

>>109150446
>>109150459
i have. it's not bad, there is a built in auto rule converter / compatibility layer to get you started

>>109155261
Huh?

>>109155276
Am retarded my bad. I want to use my computer as a media server and want to know if jellyfish is best for that.

>>109155296
It's pretty easy yeah, not the slimmest option though depending on your hardware.
Are you going to use GNU/loonux for the miniPC?
You could get by with something small like miniDLNA daemon and a lot of players still support that. Far less overhead than all of JF, but you lose the nice menus and transcoding options.

Anyone powering their home server from solar panels? What's your setup like

I have 4 SAS drives I just got secondhand on ebay that have/had DIF 2 enabled.
First one I formatted to 512 with no protection and it stuck at 7.5% for about 8 hours, but then finished and it's working no problem.
Second one though also stopped at 7.5% and it seems to fail every time after 4-5 hours.
I updated the firmware on it from A007 to E007 and that was successful it tells me. Trying another format on it to test.
Other two are going now, so hopefully they are fine.

What's a utility I can use to check if this is just a hardware failure or if I fucked it somehow?
I've been using openSeaChest as these are Seagate ST4000NM0023 drives.
Not the end of the world if they are duds, but I'll certainly complain to ebay for a refund.

>>109158619
Updating the firmware did fix the issue, I was able format the drive, so if anyone has a similar scenario.

File: 1778906875693649.jpg (45 KB, 610x600)

45 KB JPG

eWaste homelab?

here is what i've acquired:

2 HP EliteDesk 800 G2's (i5-6500, 16GB DDR4, 500GB SSD)
1 Samsung Galaxy Tab A8 LTE
1 Microsoft Surface Book (1st Gen) (i5-6300U) 8GB RAM 119GB SSD
1 MikroTik RB2011UiAS-2HnD-IN

idk what to do with it all

File: photo_2023-02-15_00-06-28.jpg (20 KB, 450x411)

20 KB JPG

>>109159465
Even one 800 G2 is enough to run Seafile/OpenCloud/Jellyfin whatever the fuck you want. That tablet can be turned into a nice Home Assistant dashboard, the Surface Book is probably the least useful server hardware on this list.

Deadass will I actually save power on transcoding if I transcode with my RTX 2070 Super instead of software encoding on my 5700X?

>>109161050
yea nvenc is more efficient

File: gay sex.jpg (311 KB, 1408x807)

311 KB JPG

>>109155261
>Getting a low power draw mini pc soon
Just a get a used laptop so you have an integrated UPS and rack console along with superior and more efficient hardware. Also some part breaks -> you can replace it for $12.

>>109153134
I never used Intel ssd in my life especially after the "8MB" fiasco

>The 8MB bug is caused by an unexpected power loss under specific conditions. This will reduce the capacity of the SSD to 8MB and change the serial number to “BAD_CTX 0000013x”. Once this error occurs, no data on the SSD can be accessed and the user cannot write to or read from the SSD. The only way to get the SSD back to work is to erase it. Unfortunately, there doesn't seem to be any way to recover data lost on glitched drives, so you'll have to cut your losses if you want to revive the unit.

What NAS shit do I get as a beginner. I just want some fucking storage. Hopefully cheap, in this economy.

>>109163680
You either are rich or you don't get access to storage. People are literally using ddr4 again cause of AI.

>>109140398
>It seemed weird having stuff like jellyfin config and other random misc stuff put onto my nas.
Well now want to backup your container volumes to your NAS, anyway... The other cool thing about this approach is that you can pretty transparently move containers to a new host, providing the mount path is the same; no need to copy+paste/backup folders like you're trying to do. Depends on your environment and what not, but game server data might not be performant enough to host off of your NAS and could be a good candidate to either keep local, or inject a script that syncs the NAS with the local state. It's a matter of preference of course, but I've ran my containers exactly like this across 4 different hosts with anything stateful served from my NAS for almost 10 years now.

>>109163680
>What NAS shit do I get as a beginner.
Literally any spare parts you have laying around will work. Then you can do piecemeal upgrades are your wallet/needs grow.

>>109141604
>Well if they exploit anything I couldn't care less, since then I've set it to run as its own user, in its own debian container.
Your risk tolerance is your own, but that particular exploit is a pretty big "they have full access' one, so even if you don't have any important data inside the container they can potentially escape it to gain more access, set up a cp relay and have the glowies after your, or anything inbetween, really. That said it was patched out a while ago, so if you're up to date on the Minecraft server it's not really a big deal (today).

File: joaquinphoenixshakinghead.gif (1.45 MB, 264x256)

1.45 MB GIF

>$250 5TB WD easystore cost me $100 5 years ago
Did not realize it's gotten this bad. Are there any alternatives? What's the consensus on buying a used HDD?

i have mikrodick ax lite and mi 4a gigabit, i set up xiaomi with openwrt to be a dumb repeater with no dhcp server and it works decently well with my pixel but fucking samsung garbage does like switching between the two devices

any idea or do i just buy another mikrotik?

>>109156434
>Linux
Yes but mostly because windows 8 would work the best so might as well use Linux.
>Nice menus
I don't mind losing pretty menus. I much prefer whatever just works

>>109156434
Could you go into detail on that minidlna player?

>>109164935
>do i just buy another mikrotik
no, it's a weird issue there
make sure both wifi's have identical settings for the seamless transition to work. ssid, password, active channels.
have you tried exclusively wireless N (turn off AC/AX) or exclusively wireless AC/AX (turn off N) and see if it works?

>>109165173
it does work it's just not seamless and some devices i.e. samsung doesnt switch between devices for way too long
active channels are the same i couldnt even change it when i wanted to, ssid and password are the same though mikrotik has WPS enabled on top of that which may or may not be an issue but in general it does work it's just not perfect

>>109165195
i would also try xiaomi with stock firmware
also dont get another mikrotik, just get the cheapest router/access point you can find, disable dhcp, setup wifi, and see if it works. it should work.

>>109165216
_it does work_ also i'm not using chink spyware firmware and it's built on openwrt with luci anyway
i literally got it as AP it cost me $10 used

File: laughing_pepes.png (62 KB, 384x300)

62 KB PNG

>Openwrt for anything wireless

>>109165246
i actually have 2 of those xiaomis and one crashes when i open qbittorrent kek
one for AP other because i had no spare pcie slots for wifi

>>109165152
Sure, look up "minidlnad" or "ReadyMedia" (name changed) first, that's what I used to use to stream to my PS3 and other small devices. It's a super basic server with almost no memory usage.
DLNA is pretty old, so newer stuff is scarce but it should work on a lot of devices.

>>109164140
>Literally any spare parts you have laying around will work. Then you can do piecemeal upgrades are your wallet/needs grow.
My old laptop died, to the point it's unusable. And I only have a hard drive lying around. I need something to put them into.

>>109164532
Small capacity HDDs are never cost efficient.

I’m so poor bros. It’s over

>>109165246
just werks

>>109166781
>trust me bro
Show me wifi benchmarks stock vs wrt N/AC/AX/BE separately.

File: 1769729224037569.gif (2.87 MB, 320x240)

2.87 MB GIF

>>109165246
>wireless

>>109166582
I should calculate how much I've invested into my server build in the last two months.

Guys I think I'll be getting CGNATted soon and I'm afraid I might have to leave this thread as a result :(

>>109167801
My current ISP charges for a static IP but let me have a public "dynamic" IP for free
It's dynamic but it's sticky and has never changed
Worth checking with your ISP if that's an option

>>109167820
The problem is i'll be on 4G/5G wireless because my new place literally only has ADSL, so I decided there would be no point.

I see a lot of weird UK resellers offering SIM cards with public IPs for "IoT" for like £80 a month, does anyone have any experience with them? Ideally I'd like unlimited, but 500GB should hopefully be fine...

For example:
https://4grouter.co.uk/large-data-unlimited-data-fixed-ip-sim-cards/

>>109167801
Tailscale? Gluetun?

>>109168143
Yeah, maybe. I'm just clueless about all this stuff and kinda bitter about the fact that I looked down upon CGNAT peasants and now I'm gonna be in that situation myself.

goddamn this thread is fucking dead

>>109169413
still better than homelab discord
>just buy a $8000 Cisco switch and a 14th gen intel bro, are you poor?

>>109169413
Look I've been busy troubleshooting SAS drives.

I'm still working on my /hsg/ project, but once I'm done I'll share.

Hydrus is ok for single images and variants but it sucks for short comics and image sets. What do you guys use?

>>109150271
i have most of the spare parts for a junk server build
e3-1265L v2
4x16gb ddr3 ecc memory
lga1155 fan, spare psu, hard drive
is it worth buying a supermicro x9scm/l for like $30 to put it in? i know its ewaste but ddr4 memory is dumb expensive and the socket P x11 boards are also now dumb expensive (i have a xeon 4215 spare as well)
i just want to set up a mini AD + sso lab, so like 5 vms (2 DCs, 2 member servers, workstation)
i could do this at work but i dont really want to

>>109171487
yea
you can also find a cheap x10 board and E3-1240 v3, best absolute bang for buck for that ram

>>109171574
shit, a complete dell t3420 with one of those is $100

god fucking damn it i wish i looked into headscale/netbird sooner instead of setting up wireguard over yggdrasil kek

>>109171954
>yggdrasil
btw it's pretty quick overall but its p2p tree routing is indeed very fucking weird. almost always it chooses a weird ass route to the peer instead of the quickest one. even if a direct link to target peer is available, it chooses to talk to some random node. if you want to use yggdrasil, you would get best health for your network if you either only peer with the physically closest nodes to you or if you do not peer with third party nodes at all.

>>109171954
>>109172023
instead of just... wireguard?

>>109172134
Zoomers get scared and angry if a technology either doesnt use Go or doesnt make you sign up for an account.

>>109172134
if you think plain wireguard will cut it if you live in russia, you're silly, anon. i've used yggdrasil to set up a reliable connection with an automatic failover to a foreign server over ssh, other ygg nodes, i2p as well as dnstt. it works on android with yggstack, too.

>>109167820
https://freedns.afraid.org/

Get your own subdomain, set up a script that runs every 5 minutes or whatever to update it.

What do you guys use for certificate management? Is there anything with a web UI for creating and renewing self-signed certs?

>>109173077
freeipa is all I can think of

>>109173100
Doesn't seem to be quite what I'm after, I basically just want a certificate authority with a web UI. I'm looking into Hashicorp Vault, does anyone here use it? Looks to me like it could be enterprise-level overkill

Kiwix or project nomad?

>>109173077
i use one cloudflare cert for all my services. no real need for a manager.

Jellyfin shits the bed 3/5 times I want to watch asian moving tapestry on my TV.
Starting an episode -> freeze, then going back to TV home screen
Changing subtitles/audio track -> same as above
How to troubleshoot and fix this? Logs on the server don't tell shit.

>>109174553
buy better hardware goy

>>109174553
are you doing any transcoding?

>>109174599
I both turning it on and off, similar results

>>109174553
Works on my machine
Try a different client, try a different video

>>109174553
Sorry chuddy it just werks for me.
GPU might be failing.

>>109174667
>>109174692
what is your setup?

- I am looking for a "list" of models regarding small PC size such as Lenovo Tiny or Dell Wyse. Anything with 4/8GB RAM and slap some 2,5 SATA disk for storage should do the work. The spreadsheet doesn't seem specific on that matter.
- I want to run low-wattage server with DNS, DHCP, fileserver for my VoIP worklab.
- Just out of curiosity. How distros handle CPUs withtout x64? Should I even consider for sake being cheapskate to go with Intel Atom for instance?

>>109174760
N305 CPU + RX 7600 GPU
VM on Proxmox with GPU/CPU passthrough on a Debian 12 container. Haven't touched the config in years, but also havent had an issue since the week I set it up.

>>109174827
>want to run low-wattage server with DNS, DHCP, fileserver for my VoIP worklab
rapsberu bpie

>>109174553
I've had a few issues on my TV WebOS. Just a couple of videos in a series would stop after a few secs, wind forward or back it would start then stop again. but if I play them via browser interface on PC they play fine.

Strange but probably just version compatibility issues.

What CPU would you pick for an AM5 home server?

>>109174760
Synology NAS

>>109175136
8700G

was fantasizing about building a giant raid array using blu rays and one of those 200 disk cd changers
unfortunately even at current prices hdds are cheaper per tb than blurays

>>109174944
what kind of tv? the jellyfin apps are shit on several of the big tv brands

>>109175897
Consider tape library if you need that much storage space.

>>109176033
it isn't even that much space, maybe 10tb depending on the type of disc and the size of the cd changer, at the cost of a few thousand USD
it is kind of fun to imagine jury rigged storage solutions in a world where normal people simply can't buy drives anymore though

>>109175136
>ddr5 prices
LOL

>>109176388
I already have a kit waiting.

>>109174827
>I want to run low-wattage server with DNS, DHCP, fileserver for my VoIP worklab
you can host this shit on a 10 year old phone using termux

there's a guy on reddit running k8s on a cluster of old phones with lineageos
i suspect anyone interested should start buying phones now before this catches on and prices go up

>>109176602
>slow dogshit arm cores locked in cases with lithium timebombs
not the first time that has ever been posted but i just dont see it gainint traction. people who did that built rpi cm clusters or just bought an ampere box with 500 cores in it

File: 1781168502769868.png (90 KB, 1007x924)

90 KB PNG

>want to set up navidrome
>can't decide how I should organize my mess of a collection

>>109176635
you can strip them out of the cases and remove the batteries. i heard one of the uc campuses has a cluster of 2000 pixel phones running

>>109176635
>bought an ampere box
anything arm is shit

https://marcin.juszkiewicz.com.pl/2026/06/26/the-end-of-the-aarch64-desktop-experiment/

>>109176717
>server processor and board with snowflake arch doesn't work well as a gayman pc
no shit sherlock

I want to build a small home server to use primarily as a NAS and web server and I have two options. One is to spend about $120 on a motherboard, ssd and case to use with a r5 2600, rx 570 and 8gb of ram that I have lying around. The other is to use that money to buy a chink SBC.
Any suggestions?

>>109177694
>Any suggestions
radxa rock 5

>>109176690
That's what the embedded tags are for anon...
Your collection is properly tagged, isn't it?

>>109176690
I let beets organise my music.

>>109178274
No, other than what was already in the files when I downloaded them. I just found out about picard but I'm still not sure how to handle stuff like anime/game OSTs and preserving that x song is from y anime.

>>109175136
What's it serving? Blind, a 7500F

>>109174553
Force transcoding. The file probably is using a compression/format your client (TV) can't natively hardware decode.

laugh at me for trying to set up packer with proxmox please
>just use terraform
sigh

>>109165353
Nta, but this works fine for me on q4os, but my Toshiba hard drive unmounts after about 30 minutes. Looking online, it's a Toshiba thing with Linux in general as my wd drive works fine as a server and it doesn't do this on my windows machines.

>>109170229
in /r/homelab i just scrolled through top10 posts and two of them are like
>dude what if you die what happens to your homelab?
and one is like
>i am gay i think my Ugreen NAS is stealing my nudes

some kind of race to the bottom between the discord and the subreddit