Install Guix

  • 15 Posts
  • 89 Comments
Joined 2 years ago
Cake day: January 21st, 2025
  • paequ2@lemmy.todayOPtoSelfhosted@lemmy.world•Using Fail2ban to protect exposed servicesEnglish
    6·
    11 months ago

    Harden your server first

    Do you have any tutorials or guides on this handy?

    Use your router/server to block some counties using geoip

    Yeah, definitely all my users are in the same town/region/country as me. So this could be doable.

    Configure rate limits in Nginx

    Hm, currently using Caddy as my reverse proxy. I guess there’s some module for this.

    only open ports in your firewall you really want to open

    The only port I need open is 443 for accessing Jellyfin and Immich. I can definitely block 22 from the public internet. And fuck it no automatic redirects from 80 to 443. TLS or bust.

  • paequ2@lemmy.todayOPtoSelfhosted@lemmy.world•Using Fail2ban to protect exposed servicesEnglish
    3·
    11 months ago

    GAAH! OK! I’M NOT CRAZY!

    The exact same thing is happening to my wife’s phone. We’re both on Pixel 8s, have the same VPN settings, but for some magic reason Tailscale breaks only her phone. She has to turn off Tailscale and reboot her phone to regain connectivity.

    These shenanigans is why I’m considering just exposing things to the public internet. I’m using Tailscale on several device types and Tailscale adds friction to all of my devices (except Arch where everything always works).

    I understand the friction is there for a good reason, but my family doesn’t. They just see that Jellyfin doesn’t work and that all of this is buggy and maybe they just should sign up for Netflix instead of dealing with all of these bugs.

  • paequ2@lemmy.todayOPtoSelfhosted@lemmy.world•Using Fail2ban to protect exposed servicesEnglish
    1·
    11 months ago

    “roaming” device is always connected to their “home” network by VPN

    Ah, right. Well, currently I do have my wife’s and my phone on the Tailscale VPN. The issue I’m trying to solve is that the VPN app on Android (and other environments) isn’t 100% bug-free. For some unknown reason, my wife frequently has issues with Tailscale. It’ll break her entire networking on her phone. The only way to fix it is by rebooting her phone. I have no idea why because we have the same phone and the same settings and it works fine on my phone. I’ve tried turning off Tailscale, logging out, and back in, and the network won’t recover. Sometimes the Tailscale app won’t even trigger the SSO page to sign in. So it just stays permanently logged off.

    The Nvidia Shield also has similar issues where I have to fuss around with the VPN.

    So at this point, I feel like I’m done debugging VPN apps and maybe it would be easier for users if I expose stuff to the public internet. Obviously, it makes management for me harder, but that’s ok if everything Just Works for everyone without extra steps or without having to reboot your phone every week.

  • paequ2@lemmy.todayOPtoSelfhosted@lemmy.world•Using Fail2ban to protect exposed servicesEnglish
    3·
    11 months ago

    site-to-site VPN configurations between routers at each location … the router itself handle routing of specific traffic over the VPN connection, instead of needing each device to connect to the VPN individually.

    Interesting. This could help with my home network and my parent’s, but I also need to handle cases where I don’t control the network. I have clients that are phones. My family would expect that the services keep working even if they’re in a different city on cellular or at a friend’s house.

  • paequ2@lemmy.todayOPtoSelfhosted@lemmy.world•Using Fail2ban to protect exposed servicesEnglish
    7·
    11 months ago

    I am kinda interested in WireGuard, but how does it work with multiple non-PC devices on different networks? Tailscale runs seamlessly on my Arch laptop, but Android, TVs, and streaming sticks have hiccups from time to time.

    I have services that I want to share with my non-techie family. If a service stops working, they suck at debugging and fixing the issue on their own.

  • paequ2@lemmy.todayOPtohomeassistant@lemmy.world•How to handle events firing on reboot?English
    1·
    11 months ago

    Uh, don’t think so. Here’s what the whole automation looks like.

    alias: Inovelli switch 
description: ""
triggers:
  - trigger: state
    entity_id:
      - event.inovelli_on_off_switch_config
conditions:
  - condition: state
    entity_id: switch.inovelli_on_off_switch_load_control
    state:
      - "on"
      - "off"
    for:
      hours: 0
      minutes: 3
      seconds: 0
actions:
  - choose:
      - conditions:
          - condition: state
            entity_id: event.inovelli_on_off_switch_config
            attribute: event_type
            state: multi_press_1
        sequence:
          - action: script.inovelli_switch_turn_on
            metadata: {}
            data: {}
mode: single
    • Wait for a Config button press (different than on/off rocker button)
    • Check if main rocker button has been in “on” or “off” state for at least 3 minutes
    • If yes, then run script

    The main on/off switch is unaffected by this automation. (Double checked to make sure I could turn on and off the fan quickly.)

  • paequ2@lemmy.todayOPtohomeassistant@lemmy.world•How to handle events firing on reboot?English
    2·
    11 months ago

    Aaaah, ok! Here’s what I added based on your uptime idea.

    conditions:
  - condition: state
    entity_id: switch.inovelli_on_off_switch_load_control
    state:
      - "on"
      - "off"
    for:
      hours: 0
      minutes: 3
      seconds: 0

    I’m using if the switch has been in the “on” or “off” state for 3 minutes or more as my gate. (Since during the reboot the state is either “unavailable” or “unknown”.)

    Seems to be working so far! Thanks!