Thread 106267003

Fortinet edition

previous: >>106241060

READ THE (temp)WIKI! & help by contributing:
https://igwiki.lyci.de/wiki/Home_server

/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.

>What software should I run?
Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.

>Why should I have a home server?
De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.

>Links & resources
Cool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhosted
https://reddit.com/r/datahoarder
https://www.reddit.com/r/homelab/wiki/index
https://wiki.debian.org/FreedomBox/Features
ARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQ
Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
SFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/
Cheap disks: https://shucks.top/ https://diskprices.com/
PCIE info: https://files.catbox.moe/id6o0n.pdf
>i226-V NICs are bad for servers
>For more SATA ports, use PCIe SAS HBAs in IT mode
WiFi fixing: pastebin.com/raw/vXJ2PZxn
Cockpit is nice for remote administration

Remember:
RAID protects you from DOWNTIME
BACKUPS protect you from DATA LOSS

I get similar slices from Spain or Germany some times. Kinda shit more often than not.

>spent an hour setting up komga
>finally a decent interface to read my doujins from
>turns out it doesn't support loose files
end me

>ran bcachefs since 6.7
>kernel drama flares up
>linus wont pull bcachefs patches
>give up
>learn that ZFS with top level mirrors can expand/shrink like bcachefs
>try truenas, hate it
>now running arch-lts-zfs-dkms

anyone here moved from portainer/docker compose to podman quadlet for full systemd integration?

Finally made some real progress migrating from ESXi to RHEL yesterday
Matrix server successfully moved
Portable ZFSBootMenu installed (you guys gotta try it https://docs.zfsbootmenu.org/en/latest/general/portable.html )
Exported/reimported ZFS pools

Got stuck on SMB with permissions issues, will try to fix over the weekend

What's the best way to get tailscale up and running?
>Docker
>Bare metal
From reading the documentation it seems all of their applications are open source, except for their servers.
I have small mini pc that I'm using as NAS(NFS)/SSH Box but I'm behined cgnat.
I want to keep accessing the NAS while I'm away and if possible run some scripts that would use my home connection.
Would that do it?

my server runs windows 10 and will never need anything else

Is there a way to self-host a DNS server (not just for adblocking purposes) and use it remotely without a VPN? It seems that all VPN software drains the battery a lot on mobile devices and that's not a tradeoff I'm willing to take. IP whitelists are also out of the question because I travel a lot and use a 4G modem. Can a DNS server somehow be exposed to the whole internet but only respond to authenticated requests in some way?

>>106268509
>and use it remotely without a VPN?
You could rent a VPS and setup BIND9 to require authentication to access it.

>>106268070
any way you prefer really. The docker way might be a little challenging networking wise if you don't do host network, also if they're are other machines/IPs that you want to expose through this same tailscale connection.
I personally use a headscale server hosted in a VPS and access my machines through that. Although I haven't used the main tailscale server ever, this setup doesn't seem to have any performance issues, streaming works too.

Do you know of any SBC that can be powered with PoE natively?
I want to do something like this
https://www.youtube.com/watch?v=1lZ3FQSv-wI
SBC pre-configured to give access to any network remotly, that I can just drop it anywhere.
Also Is twingate my only option?

>>106268617
The only thing I know of with onboard PoE is the Orange Pi Zero and a few (technically) compute modules. I don't think there really are many options outside of using a hat.

>>106267621
>>try truenas, hate it
what was wrong with it? Did you try the core or the scale version?

Anyone knows how to backup and restore a router firmware? I will be wiping my D-Link M30 to install openwrt but if something goes wrong I want a path back.
I managed to backup thr odm, ubi*, etc partitions but not sure if that would be enough since odm is supposed to have an encryption key for the firmware whose length they keep on changing.
Has anyone done a pure backup+restore before or can guide me with some steps/links to do it safely?

Stupid question for sure, but it does relate to my first ever homeserver. I'm using qBitorrent and files download to C:\Documents\Torrents\Downloading, once finished they are automatically moved to C:\Documents\Torrents. I check this and then manually move the files to a new home on a different drive depending on what they are, such as movies, music, TV shows, books etc. How can I point qBitorrent to the files new home on a different drive once completed in order to seed correctly?

>create vlan
>set rule that blocks it from connecting to any of my private networks so that it can no longer ping the main network or anything in the private network including other servers
Anything else I should do with this thing, I think it's separated enough

Other

>>106267003 (OP)
Posted this in the last thread too but got no replies.

My work was looking at a network upgrade (on a budget, we're a non-profit), and ubiquiti was strongly being considered, but recently a Cisco employee reached out to offer a private donation with Cisco matching the employees' donation value in Cisco products.

Not sure if we (the organization) want to get into the Cisco/Meraki hardware ecosystem when normally without the donation we wouldn't have the funding for Cisco hardware.

How is Cisco shit long term? Im worried Cisco hardware will tie the organization into a long term subscription that costs more $$ long term than Ubiquiti hardware would.
We don't have a full time IT/network person so the gear would need to run for months without anyone regularly checking on things.

Our original budget for a new router/switch/NAS and 5 APs was $2500-3000. But that would barely afford 5 Meraki APs, let alone the rest of the needed hardware. But with the Cisco hardware donation would it be worth spending the time/effort getting the Meraki shit set up and how much would the subscription fee cost us in the long term.

I'm tempted to just jump at free Cisco hardware, but hesitate due to assumed long term subscription fees. I'll probably need to get in touch with Cisco and see if their donation will include a 5/7/10 year subscription, if it's 5 years (or less) I just don't think it'll be worth it in the long run.


At this point I'm still leaning ubiquiti.

>>106269021
Whyy not just choose the proper destination when adding each torrent? There's no benefit to having a separate "Downloading" folder unless you have some other software constantly scanning your library (which you don't, or you wouldn't be manually doing the moving).

>>106269055
Have you taken a look at cheaper brands like Mikrotik?

>>106269090
The downloading folder is for incomplete downloads so I can tell them apart. I wonder if this is what I need?

>>106269598
Yes, but they're nowhere near as easy to configure/setup and manage remotely, and since we don't have in-house IT/networking people, mikrotik just doesn't make much sense.

>>106268070
Podman

I reinstalled my homeserver with Alma instead Ubongo and everything is so much better. Why do people fall for the debian trap?

>>106269749
>udindu = debian
My brother in BSD there is a very good reason why even Mint decided to ditch udindu as a base and return to debian and just modify that.

>>106269055
I don't know shit about shit so take it with a grain of salt, but I would do what you said and call them and see if it comes with a subscription and also if they'll give you a reduced rate in the future for being a non-profit (I'm sure there's some tax incentives for them, whether or not it's worth it for them who knows). worst case scenario so long as the hardware isn't subscription locked and they don't make you sign any bullshit terms you could use it for the time being and then sell it when it's up to help fund ubiquiti equipment. As far as a nas depending on what functionality and capacity you're looking for you can probably build one using truenas and ebay hardware and drives for much less than buying synology or whatever and still be able to have remote access and management via wireguard / tailscale or some other vpn service without directly exposing it to the internet.

>>106269598
I just bought one a few days ago and promptly put in a return and bought a netgear instead. The documentation and UI is absolute shit tier and makes basic shit way harder for some retarded reason

>>106268608
My issue is I'm behind cg-nat.
And I don't want to pay for anything.
I manged things so far with telegram bots.
But I just need my files and ssh back home, and I'm wondering about what it can do.
For example if I can enable SSH, does it mean I can expose SOCKS5 proxy?

>>106268658
>Orange Pi Zero
Thanks man.
What about the pre-config services?
Would you suggest something other than twingate that can be just plug and play?

>>106269685
Based but why?

>>106269658
>>106269937
> +2 brainlets filtered
Based mikrotik doing gods work

>>106270083
Lmao it's not for my home network lab you dumb faggot, it's for my work.

Why the fuck would you ever deploy Mikrotik for a small business unless you've got full-time staff to manage it?

If that "filters" me, then thank fucking god.

>>106270083
Nice cope, I don't need single service devices to be managed like shit at the price point they are asking. Having to do redundant stupid shit that gets in the user's way is a dis qualifier on a simple network switch especially when the documentation for the device leads to dead links

>>106268658
>100M Ethernet
why is this still a thing?

>>106269090
You would want this function due to how files are written on disk when tortenting. They're fragmented to shit if not preallocated, so copying them to another filesystem would defragment them. Copying them to the same filesystem though wouldn't do shit.

>>106270161
because it uses the usb hub

>>106270037
>My issue is I'm behind cg-nat.
that's the exact use case tailscale is set out to solve
>I manged things so far with telegram bots.
damn son
>But I just need my files and ssh back home, and I'm wondering about what it can do.
>For example if I can enable SSH, does it mean I can expose SOCKS5 proxy?
if you know how to set these services up, yes you can access them for that.
there's also a feature there to make a node act as an exit node so it acts like a vpn but you may specifically want a proxy so ymmv.

>>106270530
>exit node so it acts like a vpn but you may specifically want a proxy so ymmv.
Yeah, but I'm not tech savvy, I mostly just read the docs and change things.
To my understanding tailscale doesn't offer any split tunneling options, and if i want to run a script locally but use the resources (ISP IPTV e.g) from the remote machine I need to use proxy with proxychains, or am I thinking this in a roundabout way?
>damn son
Pretty handy though.
It would fetch the resource and then send it over telegram.
My complain is there's no longer cli client for telegram anymore.

>>106268703
bumper for router experts

>>106270599
>To my understanding tailscale doesn't offer any split tunneling options, and if i want to run a script locally but use the resources (ISP IPTV e.g) from the remote machine I need to use proxy with proxychains, or am I thinking this in a roundabout way?
it does doe, at least in the android client there's an option. About linux I'm not exactly sure.
you mean access the local network and the iptv from remote? So tailscale is a VPN so you are already in a network where or remote device is on the tailnet (tailscale network), usually 100.64.0.0/24 and the local devices are in the LAN, say 192.168.0.0/24. The remote device can be on an IP 100.64.0.3 with a dns name myiptv.tail and the iptv/any service can be accessed from the local device using myiptv.tail:8080.
I would recommend to watch some networking videos, there are some about tailscale as well on YT.

>>106270689
>you mean access the local network and the iptv from remote
Yes.
Or to be more accurate I've wrote a simple bash script that parse the IPTV link and pass the video to mpv.
So I want to do that.
For example when I'm at home I can access my ISP's IPTV by parsing isp.iptv.com
When I'm not on my home internet that link doesn't work.
I understand I can setup an exit node, but linux clients don't have split tunneling options.
So if I can SSH to the machine at home with tailscale and setup some proxy with it, won't I be able to use that with proxychains to run the script?
>I would recommend to watch some networking videos, there are some about tailscale as well on YT.
I looked a few but couldn't find something that pertain to my interests.

>>106270037
>My issue is I'm behind cg-nat.
>And I don't want to pay for anything.

>>106271164
He's not to blame though.
He's paying for his ISP for an internet connection, but most of the ISPs now expect you to use internet as social media service.
Few years back you could just port forward and that was it.
Now not only they put you behind CG-NAT or give you changing IP address and change yours when they detect high traffic.
Now they even charge you premium for static IP address.
Heck my ISP has a monopoly where I live and They explicitly forbid anyone from running and self hosted services with risk of termination.
Unless I use their own VPS.

>>106271496
>and They explicitly forbid anyone from running and self hosted services with risk of termination
Still spreading that lie? How many threads is it now? And still no source...

>>106271651
>lies
Look up the previous threads.
My ISP silently switched to cgnat and fucked up my selfhosting.

>>106271751
Just means you need to use a VPS and tailscale or similar.

>>106252535
based. what you got cooking with that server idling at 400w?

>>106252471
Lol. To clear up what I meant, was that the Chinese steal the N100 integration tech but never realize what is the whole fucking point of the N100 chip in the first place. Low power use AV1 Nas encoding SFF pc's. Typical Chinks: They learn HOW before they learn why, AND never even consider asking WHY.

>>106254862
Based HP competent engineers. Never understood the HP hate. Everything I've ever had from them from work has been rock solid. My old IPS LP2475tw monitor is still working and looks fantastic still!

>>106270037
>My issue is I'm behind cg-nat.
Just call your provider and ask them to remove you from CG-NAT and with how few IPv4 addresses are out there you'll probably be on the same IP, I did that with my previous provider 7 years ago and I had the same IP address the whole time.

>>106272138
Most ISPs aren't using CGNAT because it's funny, they're using it because they don't have enough IPv4 addresses to go around, if they'll even allow you to get off CGNAT they'll often charge you extra for the privilege.

>>106271751
>They explicitly forbid anyone from running and self hosted services with risk of termination
>My ISP silently switched to cgnat and fucked up my selfhosting.
do you not see the difference?

>>106271496
Where I'm at, the ISP market is fairly healthy, so it boils down to knowing what you want and doing your research. I guess in some places CG-NAT is pretty much unavoidable. The horror.

>>106268666
not him, but i also moved my pools from truenas to red hat. main reasons: freebsd base was a pain to do anything with, the WebGUI is unintuitive and you need the console for most things anyway, so what's the point.

>>106271751
I've seen you post this and whenever I ask you to name the ISP you don't say shit
Fuck off

>>106272162
>if they'll even allow you to get off CGNAT they'll often charge you extra for the privilege.
Well I switched ISP's recently and first thing I did when I switched was goto dynamic IP, didn't even have to call just asked them via Chat support and it was free.

>>106272436
some ppl love freebsd with a passion, doesn't feel too shabby to me
can you name some examples what was the issue? I use the core version and all things seem straightforward except permissions on shares and filesystems, can't figure that out for the life of me. SMB is good.
what do you mean by "red hat", RHEL?

>>106272510
Great, the vast majority of ISPs don't give you a choice.

>>106271946
>pay more to selfhost
>>106272138
idiot
>>106272162
My old ISP did this.
200$ for static IP address and had to offer justification for it too.

>>106272482
I'm not that anon.
He posted the contract in the previous threads, look it up.
You do archive 4chan threads right?

>>106272574
>>pay more to selfhost
I'd rather pay $3-10 for a VPS that can be used for other things too over paying my ISP for a static IP (if they even offer it).

>>106272591
How many threads back?
I'm not doing a wild goose chase without a key word or filename I can search

>>106272541
i like the idea of freebsd, in practice i find it really hard to justify using it over linux. look up how to install some software or execute some system command, you'll find 5+ ways to do it in linux, 4 of them won't work at all and the 5th will only work in some awkward way like the software hasn't been updated since the 70s. long story short, almost everything is several times more difficult than linux for no real gain.

>what do you mean by "red hat", RHEL?
yes

>>106272593
>vps
that's not selfhosting anymore

>New to opnsense
>Setup vlan
>it can ping non vlan devices on my network
>setup firewall rules to prevent anyone on that network from accessing anything other than the web itself
This is enough right?
It can't ping anything else on the network or even see it from what I can tell

>>106272722
You're just using the VPS as your public facing IP to host, you can still host the actual hardware and data locally, you're just tunneling your traffic through to the VPS to get a non-shared public IP.

How reliable are the decibel values listed for different drives in their spec sheets?

Trying to decide between 3x 16tb EXOS ST16000NM001G drives vs Ironwolf pro T16000NE000, the latter are notably more expensive but I have heard that EXOS have a reputation for being louder then Ironwolves, but both have mostly identical decibel values for at rest/seek, of like 20-32 db (I also have 3x non-pro 12tb ironwolf ST12000VN0007 's, which I haven't opened yet and would be exchanging for those, unless I decide to stick with them)

I'd have the NAS in my room and I'm a bit worried about the noise, and I've heard mixed things about if 20-30db is really that much worse then the lidle hum of multiple laptops and cooling pads (which I don't mind) or not.

Also, what should I be looking for in a network switch? Can I buy pretty much whatever that has the amount of ports I need rated for the speeds I want, or should I be avoiding or looking for specific brands or considering other specs? I only have two ethernet cables running from my office to my room, so I just want a switch to act as a splitter to give me extra ports/cables

>>106272920
I just bought 3 16tb iron wolf pros a few weeks ago and one was DOA
Take that as you will

>>106272972
I'm not so worried about that because I could just get the drive replaced then, but presumbly the sound levels would be consistent from drive to drive of the same model, so that is info I'm wanting to know

>>106273006
I have a node 304 nas with them right next to my face. I'm not bothered by them but I have high tolerance

>>106272851
still doesn't count

>>106273193
lol

lmao even

>>106273193
quit gatekeeping

szurubooru is great

>>106273211
ISP are the one doing gatekeeping

>>106273319
No that'd be you, since no one besides you is considers using an IP tunnel to mean you're NOT self-hosting.

i wanna selfhost email and a web server but im behind cgnat, whats a good cheap vps in europe i could use just to have a static ip address and how would i set it up so all data from that vps is tunneled to my machine?

>>106273657
sending email from a vps isn't going to work, but you can receive email just fine. you basically set up a vpn and use the vps as a router/firewall that forwards the ports you want to forward.

>>106273761
why does sending not work? what can i do for sending if in behind cgnat?

>>106273657
>selfhost email
Would not recommend.

Getting your emails to properly send is next to impossible.

>>106273783
big tech cartel says you aren't good enough, even if you do everything they say to do, including spf and dkim and encryption

>>106273858
so basically self hosting email in general is a pain in the ass, not just specifically with a vps?

>>106273841
Postfix is ez dawg, just need to make sure either your ISP or VPS host isn't blocking port 25 outbound which they usually are.

>>106267601
I think lanraragi does but I haven't used it to confirm

>>106274080
yes, everything goes to spam no matter what.

>>106267601
Kogma these nuts lmao

Reminder to check your domains, their expiry dates and set reminders because you don't let websites save your CC details to auto-renew because of the inevitable breach.

>>106275460
credit card fraud is baked into the system, if they lose your details and buy shit you just claim fraud and get a new card.

>>106274098
>gets blocked by Spamhaus
If I need to pay for a static IP or VPS, I might as well pay for an Email service.

>half a thread of complaints about CG-NAT
>no mention of IPv6
We are fucked. We'll start using triple NAT before IPv6 at this rate.

>>106275968
My ISP doesn't have IPv6 for their multi-gig speeds.

Though they also don't have CGNAT on their IPv4 addresses, so not a big deal overall.

>>106271979
Those N100s might be repurposed from industrial PC designs where power isn't a concern at all and they only picked the N100 because it's cheap and is passively cooled by default.
The hobbyist market is tiny compared to industrial/commercial.

>get two esp8285 IR receiver/transmitters and a usb ttl cable in the mail
>flash with esphome builder, setup wifi and copy paste IR blocks from esphome website
>record codes from remote and copy paste into button entries
>reflash OTA
>shit just works
I spent months combing through frigidaire IR code discussions online before I said fuck it I'll do it myself. Now I just need to go down the esp32 poe rabbithole and build a more powerful centralized remote for everything.

Been thinking about settuping a homeserver for minecraft/videostreaming along with the usual homelabbing shit like nextcloud. Should I consider N100/N150 chink mini-pc shitboxes like Soyo/Firebat, or better to stick with some cheapo used thinkcenters and optiplexes? Heard latter tend to sound like a jet.

Been thinking about setting up a homeserver for minecraft/videostreaming along with the usual homelabbing shit like nextcloud. Should I consider N100/N150 chink mini-pcs like Soyo/Firebat, or better to stick with some cheapo used thinkcenters and optiplexes? Heard latter tend to sound like a jet.

>>106276950
any minipc sounds like a jet

>>106270161
Fast Ethernet is still fine for a ton of stuff. Sure it'd be nice to have more but it's unnecessary for a lot.

>>106273761
>>106273841
>glow

>>106277603
I have all my cameras on fast Ethernet.
It's effectively half the price of full gigabit stuff.

>>106268617
>poe
>that I can just drop it anywhere
ughh

>>106278389
Look man, even my cockmail gets complained about by sites, you really think a selfhost is gonna pass anything that is even the slightest bit paranoid?

what's the best ebook library selfhosted thingy?

>>106279232
>he doesn't know

>>106279426
no, I'm meaning the benefit of self hosting is to actually have all your data with ISP being the only one that can compromise you.
adding VPS is just stupid idea.
You can't make sure that vps is safe from MiTM attacks.
SSL can be decrypted and several ISPs already do it to push ads to you.

>>106279829
Yes, and getting your ISP to allow self hosting email is next to impossible, along with all the other headaches that come with self hosting email.

Can I run a NAS, jellyfin, and opnsense on one mini puter?

>>106279844
So how can this be anything other than glowies trying to control the data?
Look at any chat service now.
You used to be able to go to any website and make a nickname and chat right away.
Now you need to have a dedicated spyware with phone number that can be tied back to you.
And now apparently ID verification will be mandatory in someplaces to even use the internet.
You might not remember but back then the first advice on the internet was to never give your real name, now you MUST give your real name.
>>106279889
Yes

>>106279893
>Yes
OK cool. Do I have to use those gay container things though?

>>106279932
Containers are gay now?
It will make things easier for you.
Some schizoids here would use VMs but whatever you want anon.

>>106279943
Yeah I always see windows fags on youtube talking about how gay docker is or how much more gay proxmox is. I'll just get two computers

>>106279893
>So how can this be anything other than glowies trying to control the data
Because it's mainly to prevent spam, you may not remember but back when anyone could set up an email server and spam millions of people with little to no barrier to entry, email spam was getting bad. So most established mail providers got together and started automatically blocking emails from unknown hosts.

To become an established mail host requires money, time, and headaches, and even then most bigger email services will still automatically filter your mail to spam, making your self hosted mail server effectively worthless.

And again, this mostly had to do with spam reduction, not glowies trying to spy on you.

>>106279951
Proxmox is low T docker is the same.
podman is the true answer

>>106269055
Jesus Christ, is this how these CISCO ticks embed themselves?

Avoid CISCO at all costs, unless you have a mountain of money and would prefer dealing with incompetent street shitters all day when your network gets fucked.

>>106279957
>And again, this mostly had to do with spam reduction, not glowies trying to spy on you.
This is what they want you to think

>>106280000
Checked
>Manage containers, pods, and images with Podman. Seamlessly work with containers and Kubernetes from your local environment.
Sounds like a homosexual orgy of gayness

I guess I don't hate the idea of gaytainers. Maybe I'll give it a try to see if I like it or not

>>106280017
Yea that's where I'm leaning, nothing we do requires an advanced networking setup. We're currently using the ISP provided router and a basic patch panel for the ethernet runs in the building.

We're looking at adding 5-6 access points across 3 buildings (all 3 buildings are within 40 feet of the network closet. ), a new router, and a new switch with PoE for the APs (and potential future security cameras).

And I have to imagine the subscription fees for 5-6 Meraki APs + a router and switch are going to run me $1000+/year even if their hardware and software is better, I just don't think it's worth it for us, even with the hardware being donated.

>>106267601
set your doujin directory as one for oneshots under scanner options

what's a doujin

>>106280444
unofficial fanwork made by an indie group.

What's the current way to download spotify playlists/albums? Tons of websites that let you download the individual song but it's a PITA.
Tried https://github.com/makuguren/Spotify-Playlist-Downloader
It works, but for some reason converts every single file using ffmpeg which makes it kind of slow.

>>106280580
just noticed it uses youtube hence the conversion

>>106280580
what kind of toaster you have that audio conversion is slow for you?

>>106280685
even if it "only" takes 3s each it adds up if the list is long enough
just thought there might be a way to skip that step but i realised in hindsight it pulls it from youtube anyway hence the conversion

>>106280769
>3s
What toaster?

I love szurubooru
Fuck hydrus

Would it be a good idea to take my 4-bay NAS with me on the plane?

>work sending me to the US for 3 years from the UK
>have a diplomatic visa
>want to take my NAS which has about 30TB of media on it

No point encrypting as they'll make you unencrypt it or kick you out. Don't want to use cloud storage to re-download when I get there. Don't think I have enough buffer to re-download everything from PTs. Figured it's better to keep it with me on my carry-on rather than ship it.

>>106280312
too late i nuked it

>>106280916
Wow that's cool
Does it work with e621?

>>106280916
>didn't change his booru name
ngmi

>>106281039
>to the US
They'll probably think it's a bomb

>>106280916
>118 posts
>only two are visible
I know what you are

>understand how to use nginx proxy manager
>Can now have all my connections secure only on my network
>APIs between applications now work
>Vault warden now works
What's next, I have a machine for pure utility I want to make my life as easy as possible, I can't justify self hosting a office solution but I can make other little useful things
I need ideas
I'm unhinged
I'm depressed
My best friend died and I need to not think about.

>>106281588
write up a complete idiot's guide to nginx proxy manager
set up a booru
set up local music streaming
set up as many things that you have "always open" on your main machine on your server

>>106281335
Unfortunately it doesn't currently
I hope it will be fixed soon

>>106281810
I'm guessing it scrapes the webpage instead of using the api?
e621 has been changing its interface a lot lately, that probably affected scrapers.

>>106281820
that's where the name comes from

>>106281820
>I'm guessing it scrapes the webpage instead of using the api?
yep
I wish there was another scrapper that supports szurubooru. I've tried imgbrd-grabber but it works like shit

>>106281335
Another thing I hope it will support is saving and displaying the notes on a post.
Lots of translations out there are stuck as notes on a booru.

>>106281865
So the scraper and the booru are completely separate components? Doesn't that mean the booru is just a normal booru? Why not just focus on the scraper then have it upload to a local danbooru instance?

>>106281903
Scrapper is a completely different project to booru. And it currently don't work with e621

>>106274505
This looks really nice but:
It's still unclear whether it supports loose image files or not (docs only mention archives), and
There's no SSO support.

What's the point of having a firewall hardware?
Don't most router offer this?

>>106282189
Alright found confirmation of it not supporting loose images

>>106282193
That brand targets midwits the truth is any of those ports could do any of those jobs.
Unifi is for quick professional setups or people that lack curiosity if being used in a single home, and like paying more, there was a thread of some faggot in full cope mode trying to justify his purchase and was seething for multiple days in the tread.

>restart server
>nginx suddenly broken again
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

>>106282193
yes your router is a firewall in that the default is that no ports are open on WAN unless you open them, but not all firewall software is the same. theres probably more features in the software of the "security gateway" that people probably would never use anyway.

>>106282453
>cope

>>106267003 (OP)
>Fortinet edition
based
>t. uses a fortigate 60f as a home router
>picrel

>>106282453
I think Unifi does a good job with firewall rules overall and I wish the open source providers would do a better job with that, while I get people will learn naturally with the way things are going on in Europe I'm sure a easy approachable solution would be appreciated.

>>106282193
Firewall appliances can do thinks like url/dns filtering, packet inspection, ddos and other attack prevention, etc.
I used to use a TP-Link ER605 router which is okay for normie use and I even made use of vlan networking but its capabilities werent enough

This past year I swapped the er605 out for a fortigate 60f (in >>106282520) and its great. I haden't touched a fortinet appliance since 2018 and it was nice seeing how far they've come in terms of features as well as automation tooling

>>106267003 (OP)
Only use for a Fortinet shit box (backdoored btw).

>>106282534
I have no idea what features the "security gateway" has on them, what exactly do you mean? and when you refer to open source, I assume you're not talking about opnsense?
>>106282459
care to elaborate?

is there a trick to get pihole/adguard working on podman?
I keep getting errors with port 53

>>106282844
why not run it through your router?

warning noob alert... so speaking of firewalls my ISP buddy game me pic related and this entire time I thought it was just for a firewall. didn't know it was a router too...
I've been struggling with my google home and pihole setup since google home doesn't let me edit DNS/DHCP via their app
tldr I'm retarded. going to fw VLANs and shit now

>>106283509
>Google home
You need to trash it

>>106283509
Damn nice, that thing is like $500

>>106283552
He must give amazing head and rimjobs

>>106283504
This wasn't the question.

>>106283552
my friend does enterprise fiber setups. clients don't want the extra equipment and he just gives it to me.
he's given me a $3K UPS (APC 3000VA), several desktop UPS, some omada POE switches, and a rucus AP.
>>106283547
was the best option when I moved into my 3.5K sqft home since we had 4.

>>106283716
wwweeeeeeew I wish I had a friend like that.

>>106282223
>if I just keep lying that means it actually happened
More like you're a frretard moron willing to use literal chinkshit over ubiquiti because it's popular, wow you're SoOO000oo based.

>>106267003 (OP)
Does anyone have a iptables guide / tutorial for absolute fucking retarded monkey like me?
I've been struggling for days with firewalls. ufw doesn't work, nftables doesn't work, and even iptables is just twiddling thumbs when I'm trying to set up rules (rules don't show up when I insert them).
Also where the fuck does debian 12 get its default iptables from? /etc/iptables does not exist, yet there's a standard set of tables when my VPS launches and another set that pops up as soon as Incus starts the containers.

Been driving me mad for days now.

>>106284121
Drink cum faggot I built my own router by hand

Maybe I should just ask here. How much overhead and resources does something like proxmox take up vs running Ubuntu straight? It's an 8GB thin client so...

>>106284449
Overhead compared to what? Proxmox is a hypervisor managing LXC containers and vms while running on top of a Debian install.
LXC containers are pretty lean because they share their kernel with the host OS (Debian in this case) with barely any noticeable overhead.
If you install Ubuntu to manage containers, you'll probably use Incus (goated btw) which is a little leaner than Proxmox, but lacks A LOT of the features that make Proxmox really good, basically DIY Proxmox.
Is it worth it? Depends on your use case, which is ... ? (tell me)

>>106284449
33% more

>>106284313
don't use nftables
they glow in the dark

>>106284567
Running docker containers straight. A couple will be vpns, and then file storage and organization, and then seeding/downloading stuff like movies and music.
The plan so far.

Anyone manged to get gluetun working with protonvpn free tier?
I need to expose a proxy to use with mpv

>>106284659
Oh fug. So what to use instead?
>>106284748
>Running docker containers straight
Why would you even want to run docker containers on proxmox? There's no native interface for them, you'd either run them inside another container (fucking retarded) or vm (gay as fuck), or you'd try run them baremetal and run portainer or something next to it which is when you'd realize they fucking hate LXC containers and fuck with their networking all the time (i.e. incompatible).

t. spent two fucking days tearing the teamspeak docker container to shreds to move it to an lxc container because you cannot run both next to each other.
I still have issues with file transfers and iptables. Docker is the gayest gayop ever conceived by humans that have access to computers. Use Proxmox and LXC Containers, roll everything yourself, learn things, be happy.

>>106285289
I never had that problem and all my stuff is being supplemented with docker containers for segmentation even my truenas VM uses a container.

>>106285289
That sounds terrible I don't want to spend days making personalized LCX containers for every docker container I want to use.

>>106285447
Oh the glance guy
I want to do this too.

I think I'll go with Ubuntu after all.

>>106285518
I ran it in my Debian container using docker compose going to migrate this to a weaker device to give paperless NGX some more headroom.
The more I learn about this the more I realize how many useful things I can run with even weaker hardware. I'm really pleased with taking this hobby and going the low power device route

How bad would my idle go up with a pair of 16 core Broadwell CPUs and this board?

>>106285687
This seems a little too conservative considering I'm already at 180W with 13 HDDs w/HBA with only a 8 core skylake
Hell when I only had one HDD and no HBA it was 70W

Hoe can I use my OPNSense's Unbound DNS resolver from outside my network?

>>106285740
Setup a VPN to your home network

>>106285754
Not obvious how to do this with Tailscale. I guess I could setup a Wireguard connection to the router and set custom DNS in ProtonVPN to the Wireguard IP? Although I'm not sure ProtonVPN would support that since the Wireguard IP would be in the private IP ranges. Also, my phone would be fugged in this setup (can only do one VPN at a time, and it's mostly Tailscale).

got this ups for free from a coworker. just needed a new battery for $56. it will power the nas I'm building.
r8 my buy

>>106285867
A free UPS is always a good deal, I got one for $40 at a thrift store and battery was still good
Also, check the warranty.
APC will honor warranties with just your word of mouth if you tell them error code F06 or F09 even if your not the original buyer and send you a new UPS.
They will ask for the old one back but you didn't give them any credit card.
Do what you will with this info

On an unrelated note, I have two of the same UPS units.

I wrote a guide for setting up Nginx proxy manager and using it to resolve your self hosted certificates like anon suggested
https://rentry.org/q8v4oxze
Will take feedback

>>106285447
>even my truenas VM uses a container.
As in it runs inside a truenas vm or truenas runs inside a vm?
If it's the latter, how do you handle ZFS?
>>106285518
Setting up from scratch would have been easier, but docker containers are such bullshit internally that I needed to literally dig deep until I could do an sql-dump.
I needed to clone everything, otherwise I wouldn't have bothered to do all that work.

>>106286534
Truenas is in a VM and I launched the docker container on that machine and I did pcie passthrough for my sata drives, it was all in one for my odroid h4 ultra.

>>106282587
>>106282520
where do i get a similar Fortinet like that? my budget is $30

I just spent the last 20 minutes? looking for a file
How the fuck do I sort my stuff?

Even if I can't go through the backlog, how do I sort stuff going into the future?

Of course I forgot the image

>>106287247
>>106287253
why do you need to sort it? just dump it all in one place and use software to sort it depending on the type of files. for example: if it's images then use image cataloging software

>>106287228
>my budget is $30
i got the 60f for $95 but a retard bricked it so i had to start an ftp server to get bios to pull firmware

Alright is there a SINGLE comic/doujin library manager out there that works with simple ass folders with pictures in them? Why do they all insist on arcane formats?

>>106287253
are you canadian?

>>106288340
when i did that it wouldnt work because the ftp server must be 32 bit

>>106285447
>my truenas VM uses a container
people like you need to see a psychiatrist

>>106288475
lanraragi
I have an unholy mix of zips, rars, 7zs, pretty sure some tgz's too, loose files (jpg, png, gif, whatever), unholy structures of subfolders ten levels deep, so on and so forth. I really don't know why people use anything else.

>>106286360
btw I am trans. Not sure if that matters

>>106284313
how retarded do you have to be to get lost in iptables? caveman insert rules, caveman init rules at system start

>>106286360
can i have one

>>106289956
That's why I posted the baloonhead, it's full of hot air and nothing else.

>>106289610
Hey it works and easy to reproduce with snapshots

>>106289610
This is how programing and optimization died.
Laziness
And yout home network can take downtime.
and show me how you can't replicate your containers with simple compose file?
Also just use BTRFS

I don't get the hate these get around here. I've been using them for years with zero problems.

>>106290670
This thread is mostly pozzers and sysadmin cosplayers.
The real problem with these is heat, the little sink doesn't do much unless you add a fan.
the bad reps comes from tinkers using it in mini PCs

>>106290707
>The real problem with these is heat
yeah, I rarely put it under any considerable stress. all I use my NAS for is running an occasional backup (<1TB) or copying a movie.

>>106290707
>the bad reps comes from tinkers using it in mini PCs
No the bad rep comes from the fact that some of those NVMe to SATA adapters are actual ewaste.
>but I have a working one!
Great so do I, I also have a few still lying around that died within weeks or in one case hours after installation even with good airflow.

>>106281039
Carry on the hdds (with esd bags and maybe a layer of easily removable bubble wrap for when you get randomly selected) so they won't get rekt by the baggage boys and check in the nas (also in bubble wrap or just in the center of your clothes) since it should be much hardier. Also,
>No point encrypting as they'll make you unencrypt it or kick you out.
Who, the US? TSA? Or the United 1984dom?

>>106290947
share the good one name?

>>106281039
>UK cuck laws prevent remote access.

>>106290955
>Who, the US? TSA? Or the United 1984dom?
I don't think decrypting is the issue, and more NSA would implant something

>>106290636
I'm new to this hobby, I started right before Europe went insane with it's laws and feel justified now that it has happened.
With that said this isn't something I intend to share with the world outside my household and I built this with the intention of just restoring everything from backups and I also don't like being jailed by one operating system on my 8 core machine. The core functionality of my truenas VM is pretty much met when it maxes out my download and upload speeds on my machine's nuc and hdd locally so I don't really see a issue when that's the case.
I run my router OS on bare metal I follow good practice for other mission critical things but I don't see the need to burn all my resources on a NAS when I can put it to other things and keep it segmented.

I'm actually happy with what I accomplished as a grief response to losing someone close to me

>>106291085
NAS os in VM is like buying a Mercedes truck to drive your BMW sport car

>>106291106
What am I losing when all my functions can be done on 3 cores of my N305?
I tested it I don't even utilize all of the cores during a 3tb transfer

>>106289833
You sure it supports loose files?
Read on their github it doesn't support that, only archive/packed files.

>>106291648
>Read on their github it doesn't support that, only archive/packed files.
Are you sure you read that about lanraragi? Because yeah I'm sure it works, I just double checked a folder with loose files and it shows up on the search.

>>106269022
Block it from touching the gateway interface as well.

>>106269055
You dont deserve to admin a network if you lean toward Ubiquiti. Also dont buy Meraki anything, just Catalyst.

>>106270097
proud to be retarded

>>106291793
I saw https://github.com/Difegue/LANraragi/discussions/1042 plus there was no mention of supporting loose images elsewhere.
Maybe something has changed since, guess I'll give it a go tomorrow.

>>106291832
Do they mean actual .raw files? Because as I said .jpg, .gif, .png, etc all definitely works on my install.

>>106291811
Already done, I even verified with NMAP the network can't touch anything outside it's lane due to firewall rules

>>106291858
Well sadpanda lets you upload a variety of formats but I doubt they support raw images.
My use case actually closely matches that guy, most of my stuff was downloaded with H@H.

>>106291874
>Well sadpanda lets you upload a variety of formats but I doubt they support raw images.
I've seen html and pdf files on panda before but I don't remember ever seeing raw.

>>106291888
Just to confirm the files are seen as being from the same book as long as they're in the same folder right?

>>106291966
The one I checked was originally from sadpanda, artists fanbox, loose files all summed up as one entry with all files in named order.

Well, I learned something today, apparently fans can fail closed. My mini server was running hotter than usual and I was smelling hot electronics for a while, turns out a case fan failed. Reached in to try to manually spin start it to see if it would and the fan hub was searing hot. Bitch turned into a fucking resistor.

>>106290670
If these are anything like the PCIe SATA expander cards, then the issue is the really crappy chips they use that cause a ton of read/write failures. This does not play nicely with ZFS.

Is ubiquiti as based as the father of modern home server make it out to be?

>>106292146
No, there is so little room that to fit 5 or 6 ports you can't have port multipliers on the card (unless they're built in). Typically the 5-port ones use a recent JMicron controller that is actually kinda decent compared to their old garbage-tier ones, and the 6-port ones use ASMedia ASM1166s. So they're okay.

>>106292228
>ASMedia ASM1166s. So they're okay.
Those are the ones that gave me nothing but trouble. The moment I dumped mine and got a proper SAS HBA card, my zpool errors ceased.

>>106292188
If you're deep in this thread you will feel ripped off buying it for home use. If not you will enjoy it if the goal is just to be up and running.

How do I implement auth for a bunch of services?
They all have different support for authentication. Some support oauth, some header auth (or is it forward auth?), some only support their own internal login, and some just have no security at all.
I want to bring them all under one single login. Shouldn't be a problem for the ones that do oauth, but what do I do about the services that don't support external auth?

>>106292381
You got it from aliexpress, didn't you.

>>106292507
Amazon, so the same shit just at a markup.

ugh not sure if going MDADM was the correct call

I've added 6 devices to my md raid 5 array, 12TB total and its telling me 38-40MB/s during the grow, and I've still got like another 100TB to add

>>106292515
Anon, ASMedia literally makes AMD's chipsets, if their SATA controllers were that bad they'd have been kicked to the curb a long time ago. You got a (hopefully cheap) lemon. If you were in the EU you could have gotten it replaced or refunded within 3 years.

>>106292542
>raid 5 with a gazillion drives
You really want to try your luck, huh?

>>106292188
Best mix of hardware and ease of set up and use. But not the best value bar none, especially if you're willing to put up with random chink software interfaces. But still far better value than the big name players (Cisco, Ruckus, etc)

Anyone think it's wasteful to host things like bookmark managers and other little tools to make webrowsing easier?

>>106292583
raid 5 is a good choice for mainly a backup + torrent storage server

Recommendations for an automatic youtube downloader that can automatically periodically check channels for new videos and download them?

>>106292565
No, I ordered a second, different card with the same chip. It also had those issues.
The issues only went away when I switched to a SAS HBA.

>>106292775
yt-dlp + timer

>>106292885
What OS? Because it's sounding more like bad drivers.

>>106292565
>ASMedia literally makes AMD's chipsets
This explains alot actually
AM4 was never without trouble
>were that bad they'd have been kicked to the curb a long time ago
It's hard when you don't have a choice. AMD doesn't or chooses not to have the resources to develop their own chipsets.
Very few companies with the breadth of knowledge to make something like a fully featured mobo chipset. It doesn't make them good however, they were just a willing participant.

I don't want to hate asmedia, but they are an Asus spin off and they carry the same shitty attitude with standards that are far from acceptable.

>>106293117
Amd has made chipsets out of their io die before they'd just rather not.
They also have chipsetless platforms.

>>106293117
>AMD doesn't or chooses not to have the resources to develop their own chipsets.
X570 was all AMD because ASMedia dragged their feet on PCIe 4.0.

>>106292542
>running *ubuntu
>not using zfs for his storage pools

>>106293540
>running ubuntu
>keep my hoard on NTFS drives because I never got around to re-partition

>>106267003 (OP)
>have been a fiber technician for 6 years
>manage a campus with 235 cisco switches and their layer 1 connections
>get off work
>work out at planet fitness for 55 minutes
>sit in massage chair for 15 minutes, hydromassage bed for 10 minutes
>get home
>type my password into windows 10
>connect to my plain old TP link router with like 3 antennas.
>ERP with Ninetails through Openrouter and SIllytavern
>watch some youtube have have e621 up on the side
You guys are complicating the wrong things.

>>106292413
what kind of sad life is this?

>>106294229
First day on /g/?

>>106289833
I'm tempted to use something else because I can't figure out how to make it work properly behind a reverse proxy. Everything else *seems* to be working, but neither logging nor batch operations work.
I hate web backend stuff so much.

>>106289338
>when i did that it wouldnt work because the ftp server must be 32 bit
idk how you got to that point because i served via a 64 bit server and it worked just fine

>>106294229
Sad for being curious and enjoying a hobby?
What kind of pathetic life do you live that you treat every brand you buy as a father figure?

How good/bad are those AliExpress "router" minipcs that are usually running an Intel N1XX CPU?

>>106295033
https://www.aliexpress.com/item/1005006181672854.html
I got this chinese branded one, servethehome does reviews on a lot of mini pcs you should look at, gives you a good look at what you're gonna get.

Anyways most mini pcs like the linked one will benefit from cooling their heatfins on top, like a dual 90mm fan or something

>>106295019
what life do you live worshiping a brand?

>>106295033
Generally okay, but many of them idle at high wattage for unclear reasons. If you don't mind the risk of ending up with a "router" that burns >15W 24/7 go ahead. Goes for ITX router/"NAS" motherboards too, like pic related.

>>106294209
I'd like to complicate other people's things instead, but noone will let me.

Building a house, running fiber to all the wall ports, planning on just putting sfp+ connectors there and adding converters + unmanaged switches if devices need them. (For example, game consoles at the teevee, work pc) Is this smart or is there a better way?
The more I research the more I think this is a dumb idea, as basically every device would need to switch to rj45 anyway.

>>106295666
i mean, if you want to put a recessed box in every room with an unmanaged switch to make them rj45 then go for it.

>>106295666
I used to work with fiber. Personally would stick to twisted pair. Its just so much cheaper for almost the same result for short runs, much easier to fix if it breaks, and you don't have to ever pull out a cletop.
Make sure you follow code best you can.

>>106295666
>running fiber to all the wall ports
satan, don't be retarded, use CAT6a.

>>106295666
you need to precisely measure your run lengths and then order fiber cables to those exact lengths, or you're spending $1000+ on splicing equipment and wasting hours of time.
It's just not worth it.

>>106281588
>>106281613
>>106286388
What the fuck is there to learn about NPM? It doesn't do much. What did you not understand at first?

>>106295666
Better be running conduit.

>>106295666
I'm this anon
>>106294209
I agree with this anon
>>106296026
The only use of fiber is between switches, not switches and devices.
10 gigs of bandwidth is a tremendous amount of bandwidth, like I have hundreds of access points in a building running of a 10 gig connection.
And media converters fucking suck.
You're making things entirely too expensive for entirely zero gain.

>>106296121
conduit is like 2x as expensive as ethernet, I'd be doubling my bill.
I'm starting to think anything beyond cat 6e won't have any mainstream adoption for decades. No company wants to improve drive sizes required for files like that, no internet company wants infrastructure to handle that amount of data. I think at the point we saturate 10 gig we'll be in a tech revolution comparable to the internet itself. I may as well just rip up the fucking drywall by then. (Or just run fibers within crown moulding)

>>106296441
If you only care about internet speed, 6A is all you need. 25/40GBASE-T failed and no hardware exists for it. But for a local network, even 10gbps can be slow for some use cases.

>>106296162
FTTD is a thing in security land or when user workstations are greater than 100m from the IDF.

>>106296631
What use case can a resident possibly need over 10gbps in the year of our lord? I'm talking general switched networking, not running a fiber kvm or some shit.

>>106296666
resident? as in average user? probably nothing.
I use 25gbps in some segments of my network for working on my NAS, SAN, PXE, high quality video streams, and VM cluster networking. Average load is low, but I'm impatient and bored.

>>106296793
Half the time you're limited by file system overhead and network protocol inefficiencies, I doubt you see anywhere near 25gbps in practical use.

Maybe you can benchmark iperf or something, but that's about it

>>106296832
>benchmark iperf
That's probably the most important use case of my network. If weren't a network engineer with unlimited access to my company's ewaste bin, I'd probably be running a 1gbps network.

>>106296085
Why not make guides for anons at all levels?

>>106296922
Guides are good. It's just that NPM is extremely simple. Especially if you understand the concept of a reverse proxy (which is why you use NPM). So I'm wondering what people get stuck on.

>>106296969
Anon asked for it I made one, I still think when writing documentation you should always assume everyone is retarded. With the recent EU issue I think we could attract more people to this hobby by simply making guides.

I'm trying to setup an annoying network for my gigantic house which has two suites.
Is it better to get a L3 switch or have the vlan routing be done via my router?
I have a bunch of services on my server which I would like my siblings (other suite) to be able to access, like jellyfin and the network cameras, but there's others I don't want them to get to.
Attached a rough idea of my topology.

(I don't know a god damned thing about what I'm doing)

I got dusted off my old raspberry pi 4 and plan to use it as a NUTS option, I feel like it would be wasteful to only use it for that would it be a good idea to put other services on it and if so I need some ideas I was thinking portainer and perhaps some monitoring software?

is unraid the best move i want to start with 1 drive and later add more to my nas?
i'd use my external hdd as a backup in the mean time
the files on it would just be used for a plex server and aren't that valuable

What is the point of having a NAS if a hacker can just delete all your data easily? Why not just plug hard drives directly into your PC? Buy an SSD external if you need to move data.

>>106297408
If they can get into your NAS they can get into your PC, retard. I have 64 terabytes in my NAS, find me a removable SSD with that much storage.

>>106297408
Hmmm maybe you're right, this is giving me some pause.

>>106297518
> they can get into your PC, retard
A hacker cannot get into your PC if you don’t allow outside access of any kind

> find me a removable SSD with that much storage

Just buy a cheap 20tb. External . Takes longer but you have it transfer while sleeping. 3 days max

>>106297546
>he's letting his NAS touch the internet
ngmi

>>106297546
You don't connect your PC to the internet?

>>106292583
Why is raid 5 not a good idea for a bunch of drives and what should anon have used otherwise in your opinion?

I want to be able to access my home pc from my uni pc, I'm a techlet and can't find good resources to just use moonlight for this. Any tips?

>>106295033
>>106295057
>>106295453
I bought into one of those about 7 or 8 years ago. It has been running pfsense continuously since then and I haven't had any issues with it. The performance was certainly better than my old Netgear router AP combo and I could run a DNS black hole on it with pfblockerng.

>>106297635
VPN on the router then use RDP.

>>106297606
I use wireguard

>>106297546
lol wut no idea what the f you're talking about
>>106297730
to connect your PC to the Internet?

>>106297694
Thank you anon, any guides on how to do it securely? I found people going through radmin vpn but I'm guessing that will add latency over doing it on the router?

>>106298072
>any guides on how to do it securely
wireguard

>>106268666
i tried the scale version.
im a simple man and i like simple setups, but truenas felt overly complex for what i actually need.
it also did not like that it did not support encrypted passphrase when creating the pools, only key-based, that it force stores on the unencrypted root device (probably for some enterprise reason etc etc).
the root device is also immutable and resets on updates, so if i install command line tools on root its gone the next update.
another thing is apps, i dont need a full kubernetes system to run 8 containers, its just stupid for my needs.

arch-lts-zfs-dkms is a much simpler solution for me.

>>106291966
>>106292019
Welp I just installed it and nothing showed up
Maybe you are using a fork, or have some kinda plugin installed?

>>106299388
Found another one saying it doesn't support loose files https://github.com/Difegue/LANraragi/discussions/629

>>106297220
Navidrome is nice

>>106295033
they're shit

>>106296853
So your entire use case is watching iperf give big numbers?

Lol

Lmao even

>>106297635
install tailscale on your home pc + uni pc, it will automatically take care of networking between the two. in moonlight connect to the home pc's tailscale IP (100.x.x.x) instead of its local ip.

run the first test setup with both pcs on the same network. when you get that working, try connecting your uni PC via an external network e.g. your phone's hotspot.
also you might need a hdmi/DP dummy plug for your home PC if you're not going to leave the monitor turned on.

I never realized how little the average person really needs on a home server. I really wish n100 class boards came with sata ports and had more boards. 1 n305 board and I realize it does everything I actually need and I don't understand why single user setups waste money on xeon shit and other high power system.

>>106300997
>le n100 boards
the shilling of these is so unorganic and weird

>>106301025
I wish n95/n305 was more available because they are objectively better but they all have the issue of not having enough sata.
They provide near pi power draw with way more power

>>106301041
>They provide near pi power draw
wrong

the only actual reason people get these is because raspberry pis are stupidly expensive. if a pi5 was $40 nobody would care about this chinesium e-waste.

>>106301144
Oh no 10 watts more on a device running nvme and other sata devices.
But you're right why buy a pi when the x86 can cost the same or less and do the work of multiple pi at it's price bracker

>>106301144
How much if this is people running 500w+ ATX PSUs versus the actual board?

>>106301340
>a device running nvme
you mean NGFF

>>106301374
wrong again
the pic is from a clip where a N100 minipc was tested with its own power brick
I can imagine it's way worse with a ATX psu

>>106301340
>Oh no 10 watts more
you actually have to downclock it in their trash bios (which provides like 4 settings) so it doesn't melt and throttle at 98C during average day to day tasks

>>106301450
You have no idea what the fuck you are talking about fuck off jelly sperg

>>106301041
>n95
Trash. N97/N150 or bust. Some DDR5 boards have in-band ECC (IBECC) support too, so you can trade some capacity and performance for end to end ECC.

N305/N355 are often too close in price to Ryzen U series and get shitstomped by them so there's not much point to those either.

>>106301424
The idle power consumption issue is mostly in power management configuration, and some in the inclusion of onboard devices that don't support low power modes.
ATX supplies DO aggravate matters due to the efficiency curves though. 250W PSUs should be the absolute maximum anyone should use with one of these N boards.

My odroid h4 doesn't have this problem

>>106301424
I was just asking because that's literally the result you'd expect for idle of a "low power system" for any given matx board/ATX PSU made in the last 10 years.

26w is higher than my supermicro x10 LGA 1150 board with a quad core and picoPSU

>>106301551
Unfortunately it also has limited expansion and the enclosures for it are ARM-trash-heap tier.

>>106301551
I'd love an H4+, but buying one in Europe costs almost the same as buying TWO N100s. :/

>>106301629
I just used the mini itx conversion kit with a node 304, you also need a fan hub and extra fans but other than that it's good. I used that case for my router just had to slide in a 2.5 ssd and it was good to go with the network card.
I need to do some clean up but I want to post picture soon

>>106301538
>and some in the inclusion of onboard devices that don't support low power modes
my point exactly, it's garbage, you see these shills spamming "muh 6W cpu" conveniently ignoring 20W in other SOC waste

>>106301573
mine too
but should i give away 8 native sata ports + ipmi + non defective nics (see i226v most of those N100 chinkboards ship with) + usable pcie lanes + no throttling issues + superior IO , all these in exchange for... what exactly?
what would i gain with a N100 board?
$12 less electricity costs per year?

no thank you.

>>106301682
>node 304
Damn, I have an older ITX case that's like 2/3 the volume of that and I still think it's way too large.

>>106301699
>should i give away
Nobody is telling you to replace your hardware dude.

>>106301711
You don't want your HDD to choke that's a big issue with smaller cases, I can drop in the board add a good number of drives including expanding the sata drives with a expansion card if needed and I'll be good to go

>here's your 6W cpu bro
you might as well get a Elitedesk/Lenovo/Optiplex mini-micro at this point

Guys, how do I hijack fortigate licensing? I have fortiwifi laying around, but it has cool features behind a paywall

>>106301866
... that's max draw, not idle consumption.
By that notion you wouldn't get an RK3588 SBC either because it burns 25+W at full load.

>>106301866
>might as well get a Elitedesk/Lenovo/Optiplex
your second hand e-waste maxes out at like 70W kek

>>106301915
you should tell that to people like >>106301041
>They provide near pi power draw

who spam these inane comparisons every other thread.
imagine thinking these chink boxes have 'near pi power draw'. amazing.

>>106301949
You're not really intelligent please leave the thread you stupid faggot

Is hard drive storage with manual checksums and 1-2 cold backups enough for long term file integrity on windows or should I go all the way and make a nas with zfs filesystem and ecc memory? I'm mostly storing media and random cool things I find on the internet before they get taken down when censorship gets even worse so I suppose a single pixel in a video being slightly off isn't a big deal, but I'd like to avoid corrupted images/configs and crackling audio when I inevitably restore from backup in a few years.
In short, is bit rot a meme?

>>106301931
>your second hand e-waste maxes out at like 70W kek
takes 3 seconds to turn off turbo boost then i get something as efficient as your gookbox but with shit ton of support and i/o and non-defective nics on top of it

nobody cares about your chinesium garbage, Chatgptjeet. you can stop spamming now.

>>106301682
>Node 304
I wish Fractal would give this the R2 treatment already; acknowledging that the design is mostly fine as-is, I would be happy to pay more if it came with just a few extra features, eg. swap out the colour-mismatched caddies/fans so everything is either all black or all white by default, add some tie-down spots for easier cable management, and include mounting points on the faceplate so people can attach a 200mm fan. The only thing I'd be wanting for then is better accoustic treatment for HDD noise, but there's not really any fixing that issue without making a miniature version of the existing case for 2.5" SSDs.

>>106302011
Manual checksums don't provide any sort of correction, anon. It will be like single-drive btrfs, error detection won't help other than to find out your shit is fucked a tiny bit sooner.
Bit rot is not a meme, but it usually takes years or a defective drive for it to happen.

>>106302058
A update would be great the fact that it doesn't have pmw fans is crazy and should have been a easy thing to update

>>106302033
whatever lets you cope with having bought someone's power-guzzling sloppy seconds

>>106302091
Why do all spergs that say stupid shit like the anon you're talking to pretend they are only arguing with one person while saying retarded shit
>>106302033
My box is Korean

N100 owners, can the CPU reach 2900MHz on all-core loads when the power limit is raised >15W like the N97? I've seen some claims of yes and no.

>>106301629
>buying an enclosure
just make your own

>>106302073
>error detection won't help other than to find out your shit is fucked a tiny bit sooner
Hence the backups so I can restore a clean file. Surely the chances of the same file being rotted across all my drives when regularly checking all of them is miniscule enough to not be an issue?

>>106302201
If I'm paying 200€ for a mini PC it better come with something to put it in.

guys, this is really weird discussion.
just buy a normal x86 processor and limit the wattage to 35w or less. it's going to be way better performance than little shitty system on chips

>>106302440
retard

Why getting mini pc for home server is bad idea?
I've been running my home server over laptop

>>106302498
who said it is a bad idea?
>>106302466
thanks buddy good informative points being made
dead thread is dead anyway. looking forward to having useless discussions about shit chink boards and hardware in the next thread too

>>106302688
>who said it is a bad idea?
Every time someone mention it.

>>106302498
It's better than this.

>>106302440
>just buy a normal x86 processor and limit the wattage to 35w
Normal board + CPU + LGAxxxx cooler is more expensive unless you're buying someone else's e-waste.

>it's going to be way better performance than little shitty system on chips
At 35W, unless it's another embedded CPU (U/H/HX), I highly doubt it. Full-fat cores capped to 35W will downclock to nothing.

>>106302888
What happened to synology?
They used to be cool.

>>106303060
Synology was never cool.

>>106303088
new money

Anyone going to bake?