DeltaTangoLima

joined 1 year ago
[–] DeltaTangoLima@reddrefuge.com 12 points 1 week ago* (last edited 1 week ago) (1 children)

Hmmm - interesting. I hadn't bothered to check before now, but I'm seeing something similar on one of the two PBS CTs I run.

Comparing the output of netstat -lantop on both CTs, I can see that the one with more outbound traffic has more waiting connections from localhost on port 82, the port Proxmox Backup Servers provides its API over:

tcp        0      0 127.0.0.1:51562         127.0.0.1:82            TIME_WAIT   -                    timewait (40.38/0/0)
tcp        0      0 127.0.0.1:56342         127.0.0.1:82            TIME_WAIT   -                    timewait (29.92/0/0)
tcp        0      0 127.0.0.1:44864         127.0.0.1:82            TIME_WAIT   -                    timewait (58.94/0/0)
tcp        0      0 127.0.0.1:45028         127.0.0.1:82            TIME_WAIT   -                    timewait (11.88/0/0)
tcp        0      0 127.0.0.1:44026         127.0.0.1:82            TIME_WAIT   -                    timewait (48.66/0/0)
tcp        0      0 127.0.0.1:44852         127.0.0.1:82            TIME_WAIT   -                    timewait (58.80/0/0)
tcp        0      0 127.0.0.1:59620         127.0.0.1:82            TIME_WAIT   -                    timewait (0.00/0/0)
tcp        0      0 127.0.0.1:56374         127.0.0.1:82            TIME_WAIT   -                    timewait (30.98/0/0)
tcp        0      0 127.0.0.1:51544         127.0.0.1:82            TIME_WAIT   -                    timewait (39.98/0/0)
tcp        0      0 127.0.0.1:59642         127.0.0.1:82            TIME_WAIT   -                    timewait (0.00/0/0)
tcp        0      0 127.0.0.1:45008         127.0.0.1:82            TIME_WAIT   -                    timewait (10.92/0/0)
tcp        0      0 127.0.0.1:45016         127.0.0.1:82            TIME_WAIT   -                    timewait (11.76/0/0)

I'm wondering if the graph is pulling aggregated network data, including the loopback interface. If so, and it's all just port 82 stuff on 127.0.0.1, then it's probably nothing to worry about.

Edit: found this forum post that seems to indicate it's aggregating all the byte values from /proc/dev/net, so this is probably nothing to worry about if your netstat output, like mine, only shows API conections to/from 127.0.0.1 on port 82.

[–] DeltaTangoLima@reddrefuge.com 2 points 1 week ago (1 children)

Seriously - the whole thing is such a befuddling mess to us non-Americans.

How exactly can one win the popular vote but not the actual election? From the outside, the reporting I've seen always talks about the faithless elector problem (not in those words - just in describing the problems). Is it more to do with how many votes (electors) each state gets, based on population size?

[–] DeltaTangoLima@reddrefuge.com 1 points 1 week ago (3 children)
[–] DeltaTangoLima@reddrefuge.com -2 points 1 week ago (6 children)

I believe the states responsible for those silly outcomes have since passed laws to prevent it happening again.

Could be wrong, but I listened to a podcast last week with an American professor who's pretty much written the book, explaining the history of the Electoral College and how it really works. I'm sure he said those states since fixed those loopholes.

Either way, the damage is done today. Another four years of stupidity in charge.

Maybe a small piece of personalised luggage for the holiday. Does she wear makeup? Maybe a nice makeup case with her initials on it.

If that's not her thing, what about something for your home (assuming you live together)? My wife and I tend to buy ourselves the "bigger" things for Christmas, as our gift to each other - some furniture we've been wanting, or similar.

If that doesn't sounds like you guys, there's the tried and true jewelry option. Or maybe just cruise Etsy for the sorts of things she likes (does she like knick knacks, or ornamental stuff?) that might be customisable.

Failing that, have a think about what makes you special as a couple. Is there a shared interest or experience that got you together or you always talk about? Is there something in that?

Finally, I've been holding on to some ideas for future inspiration should I need them:

  • Waveform art: record yourself saying you love her, have the waveform turned into a print, or a piece of jewelry, or similar
  • Anamorphic art: a skewed picture that reveals itself when a specifically shaped mirror is put behind it
  • A glass lamp base filled with something meaningful: I always thought of filling one with origami love hearts
  • Ambigrams: maybe you can figure out an ambigram with both your names, and have it made into something - a print or a wood carving (this will probably take a lot longer than the time you have before Christmas)
  • Birth stones, star signs, birth flowers, birth fruit: admittedly these are probably better suited to birthdays
[–] DeltaTangoLima@reddrefuge.com 22 points 2 weeks ago

Jesus - they don't even name the report so interested people can search for it. Lame.

Also, least-intrusive doesn't mean most-trustworthy. Just don't use any of them or, if you do, be sure to take all steps at your disposal to not give any personal information to them.

[–] DeltaTangoLima@reddrefuge.com 27 points 2 weeks ago (1 children)

Lol @ "some 20 years ago ... ADSL from 2002". Thanks for making me feel old!

[–] DeltaTangoLima@reddrefuge.com 1 points 3 weeks ago (1 children)

Great suggestion! Thank you. Have you had any luck accessing it on iOS yourself?

No dramas if not - just that I tried using Orbot and the Tor Browser (the one developed by Mike Tigas, in the App Store), but no joy. I'm reasonably new back on iOS, so I'm not (yet) across the best way to use Tor sites on the platform.

[–] DeltaTangoLima@reddrefuge.com 2 points 3 weeks ago* (last edited 3 weeks ago)

Honestly, I'm using an old gag FB account I created back in 2011. I guess that was well before they started asking people to verify with selfies and phone numbers.

Hmmm - DDG's browser might be a good alternative, if I only use it for this one purpose. Thanks for the suggestion.

[–] DeltaTangoLima@reddrefuge.com 2 points 3 weeks ago (1 children)

Someone else mentioned PWA. I think I'll investigate that angle next. If a PWA doesn't share any data from my device, it means I can use my Mullvad VPN whenever I choose to access it, and get pretty darn close to what I'm trying to achieve.

You are the product and they have a long history of being extremely eager to sell the product.

Yeah, exactly what I said in my OP. I'm aware of the reality of what it is I'm asking for. I only recently moved back to iOS after over a decade using Android, so asking around in the vain hope someone has figured this out.

 

First and foremost, I'll get this out of the way: I abhor all commercial social media. I don't trust them, I know users are the product, and - ultimately, I feel they're nothing but a cancer on society.

But, I also have to acknowledge that, for one or two use cases at least, they seem pretty unavoidable.

For me, that one use case is Facebook Marketplace. Here in Australia, there's simply no better alternative if you want to reach a large number of potentially interested buyers (or even buy some stuff yourself). The supermarket noticeboard is no more; the Trading Post was bought long ago and died on the vine; and Gumtree has devolved into a cesspool of nothing but scammers and fuckwits.

So, I use FB Marketplace. My FB account isn't in my name, uses a throwaway email address, and has no followers or friends. It's only a member of the local buy/sell groups that I'm interested in, and it performs no "social" activities (posts, likes, etc) at all.

Until now, I generally only use FB marketplace with a "clean", dedicated browser on my computer, running in private mode and via a VPN. But, it means I frequently miss messages from interested parties when I'm away from my computer.

I also sometimes use the mbasic.facebook.com site from a private Firefox tab on my iPhone, but FB has just started telling me I need to use Chrome (no. fucking. way.) or Safari (maaaaaybeeeee?) after October 28th.

When I was on Android, there were a few wrapper apps that I was able to use but, so far, my searches for an equivalent on iOS have turned up nothing.

So, knowing full well this may lead to nowhere, I thought I'd ask this community: does anyone have a good, privacy-friendly way to use FB on iOS?

Thanks in advance for any useful tips or suggestions.

 

Does anyone know if the 2024.5 Companion App update for iOS removed the ability to control entities from the widget? I've read the release notes but there's no mention of any features being removed.

I could absolutely swear that I had a working widget with most of my lights on it, a solitary button for each light, that I could single tap to toggle said light.

Then, a few months or so back, I noticed the widget didn't seem to be working. The entity icons had change to black, round shadows, and tapping them did nothing.

I deleted the widget, thinking it got corrupted somehow and have never been able to get it back exactly as described above.

Now, it seems that only thing I can do with widgets is use Actions. Some Actions have been auto-created by the Companion App for each scene on my server, and I can obviously create my own Actions, to trigger automations.

But, I don't want to have to frig around with Actions (using input_booleans and automations) to do something as simple as turning a light on or off.

Am I dreaming? Did the iOS widgets never have this ability? Or am I missing something really obvious to configure entities onto a widget?

Thanks in advance for any useful advice.

2
submitted 3 months ago* (last edited 3 months ago) by DeltaTangoLima@reddrefuge.com to c/homeassistant@lemmy.world
 

UPDATE: well, I've belatedly realised I've left out a key piece of information. I need to buy a pair of locks - one for a regular wooden entrance door, and one for a security screen door in front of it.

Turns out hardly anyone (reputable) makes a decent smart lock for screen doors, except the Yale Unity range, but those aren't Z-Wave compatible.

Guess we're sticking with keys for a while longer...


Hey folks - the time's come for me to consider diving into smart locks.

I've been running HA for many years now, and have resisted the urge so far, but a few recent incidents have me thinking smart locks are the next upgrade I need to think of.

My requirements, equal in priority, are:

  • Must be usable via HA (automating my locks is the primary reason I'm considering this move)
  • Key lock backup (I'm petrified of flat batteries stopping me from entering)
  • Ability for HA to report on battery level (see above)
  • Local network only (prefer IP, but will consider Z-Wave - anything that calls home in the cloud is a hard no)
  • Code and/or fingerprint entry (unique code per person, at least 6 codes)

I say "consider Z-Wave" as I don't currently utilise any Z-Wave devices. The main reason for this is that I run HA (Home Assistant) on a (heh!) HA (high availability) Proxmox setup, and I hadn't sat down to think through how that would work with a Z-Wave USB hub across two nodes.

But, after some cursory research, it seems there's enough options out there that will let me control Z-Wave remotely via MQTT, so I can use one of my RasPis to host a Z-Wave hub just fine.

There's been plenty of positive comments on other posts regarding Schlage's locks, so I'll probably start my research there. But I'm very keen to hear of anyone's experiences with any smart lock brands - good or bad - to help guide my research.

While I'm at it, I'm open to recommendations on a Z-Wave hub. I have zero Z-Wave experience, but I gather it's reasonably straightforward to use. Simple enough requirements:

  • Usable on a RasPi running Rasbian
  • Decent enough range - has to reach the smart locks through a couple of internal walls, from the garage to the front door (about 6m/20ft)

Cheers in advance for any advice offered!

12
submitted 5 months ago* (last edited 5 months ago) by DeltaTangoLima@reddrefuge.com to c/plex@lemmy.ca
 

I host a Plex server for our household, which includes a couple of teenagers. All members of the household (myself included) have a PIN protected managed user profile on our Plex server.

The problem is, if I let the teenagers have my Plex account password to login to our Plex server, it automatically logs them in with the Home Admin profile, whereas I'd much rather it force them to select from the list of profiles on our server (eg. just like Netflix does).

This means that, every now and then, I have to manually go to whichever new device they want to run Plex on (such as a Playstation) and handle the login process myself, so I can be certain they're logged in with their own user profile - not the Home Admin profile.

I've set a PIN on the Home Admin profile, but that doesn't help unless you've already logged in first, then go to use fast user switching to select a different profile. On very first login, Plex will always auto-select the Home Admin profile.

I've searched high and low, but can't find any info or settings that help me change this behaviour.

So, my question is simple: is it possible to prevent auto-login as the Home Admin profile, and force selection from the list of managed users instead?

Thanks in advance.


EDIT: I should have provided more details about what I've tried so far. We have tested out using a separate Plex user account for the oldest kid, as all the reading I did suggested she would "inherit" my server's Plex Pass rights when streaming from it.

But, we found that the iPhone app could still stop playback after a minute. Plus we couldn't log her account onto the shared Chromecast TV, so she could watch her shows on the house TV. So we ended up moving her back to a managed user profile on our server.


EDIT 2: after some more reading, it now seems the mobile app must either be logged in with a Plex Pass account (mine, in our case) or the user has to pay a once-off fee to unlock it.

I could've sworn it was different when I first read about it a year or two back, where the app would "inherit" the server's rights, but I guess that's either faulty memory or they changed the rules. The once off unlock fee isn't a big problem, so that's one hurdle overcome.

The second problem is how to use multiple Plex accounts on the Plex app for Chromecast, so the kids can enjoy their content on the big screen when they want to. Has anyone cracked the code on how to achieve that?

 

Can't even take a short break from 3D designing stuff. Glad I'm switching over to FreeCAD. All I wanted was to grab some dimensions from an old model.

75
submitted 9 months ago* (last edited 9 months ago) by DeltaTangoLima@reddrefuge.com to c/foss@beehaw.org
 

cross-posted from: https://reddrefuge.com/post/189022

Obligatory note for those that haven't read/retained the news: Simple Mobile Tools was sold to ZipoApps - an Israeli company that specialises in buying and monetising popular apps.

Fossify is the fork of the Simple Mobile Tools repos, and they're gradually getting through each app and re-releasing them under the new name.

77
submitted 9 months ago* (last edited 9 months ago) by DeltaTangoLima@reddrefuge.com to c/android@lemmy.world
 

cross-posted from: https://reddrefuge.com/post/189022

Obligatory note for those that haven't read/retained the news: Simple Mobile Tools was sold to ZipoApps - an Israeli company that specialises in buying and monetising popular apps.

Fossify is the fork of the Simple Mobile Tools repos, and they're gradually getting through each app and re-releasing them under the new name.

74
submitted 10 months ago* (last edited 10 months ago) by DeltaTangoLima@reddrefuge.com to c/selfhosted@lemmy.world
 

I just spent a good chunk of today migrating some services onto new docker containers in Proxmox LXCs.

As I was updating my network diagram, I was struck by just how many services, hosts, and LXCs I'm running, so counted everything up.

  • 116 docker containers
    • Running on 25 docker hosts
    • 50 are the same on each docker host - Watchtower and Portainer agent
  • 38 Proxmox LXCs (19 are docker hosts)
  • 8 physical servers
  • 7 VLANs
  • 5 SSIDs
  • 2 NASes

So, it got me wondering about the size of other people's homelabs. What are your stats?

 

Just wondering what tools and techniques people are using to keep on top of updates, particularly security-related updates, for their self-hosting fleet.

I'm not talking about docker containers - that's relatively easy. I have Watchtower pull (not update) latest images once per week. My Saturday mornings are usually spent combing through Portainer and hitting the recreate button for those containers with updated images. After checking the service is good, I manually delete the old images.

But, I don't have a centralised, automated solution for all my Linux hosts. I have a few RasPis and a bunch of LXCs on a pair of Proxmox nodes, all running their respective variation of Debian.

Not a lot of this stuff is exposed direct to the internet - less than a handful of services, with the rest only accessible over Wireguard. I'm also running OPNsense with IPS enabled, so this problem isn't exactly keeping me up at night right now. But, as we all know, security is about layers.

Some time ago, on one of my RasPis, I did setup Unattended Upgrades and it works OK, but there was a little bit of work involved in getting it setup just right. I don't relish the idea of doing that another 40 or so times for the rest of my fleet.

I also don't want all of those hosts grabbing updates at around the same time, smashing my internet link (yes, I could randomise the cron job within a time range, but I'd rather not have to).

I have a fledgling Ansible setup that I'm just starting to wrap my head around. Is that the answer? Is there something better?

Would love to hear how others are dealing with this.

Cheers!

13
submitted 1 year ago* (last edited 1 year ago) by DeltaTangoLima@reddrefuge.com to c/selfhosted@lemmy.world
 

So I recently (a couple months ago) moved my fragmented docker-on-raspberry-pi architecture over to a Proxmox cluster. I'm running it on a pair of HP DL360 G6s, and I couldn't be happier.

Except, well, I could be happier with just one more thing: high availability.

In particular, I want HA for my OPNsense firewall/router, but eventually for more of the workloads my family are depending on for life in general - Home Assistant, Plex, Overseerr, Immich, etc etc.

My current storage setup is a couple ratty old ARM-based NASes - an ancient Netgear ReadyNAS and an even more ancient Qnap TS-410. They're both populated with 4 x 4TB (max raw size they can take) using RAID5, so I get about 22TB usable across the pair of them. They mostly store media for my Plex setup, but also support my 2N+C backup strategy for stuff like Immich, Paperless, and other important data.

My high-level plan is to grab another DL360, so I can have a quorum, then introduce a new storage system that:

  • provides an iSCSI target for my Proxmox cluster; and
  • can eventually grow to replace my old NASes.

The two solutions I'm pondering are:

  1. Build a TrueNAS setup from scratch - mini ITX case, board - the lot
  2. Pickup something tried, true and proven in the market, like a Synology

Up front cost is a consideration - I have a family to feed, so I can't just run out and buy an 8-bay enclosure and fully populate it with 16TB disks.

Whatever I get, I'm likely to want to start with, say, 3 disks and grow it over time.

So, I guess this is a call out to the community to share any and all successes, war stories, and other advice. The more technical, the better. I want to make a sound, data-based decision here, and anecdotes from others who think like me are the best way to set my compass.

Cheers for anything you can offer!

 

This weekend, I cutover my home network to OPNsense on Proxmox.

So far, it's been... OK. I'm having some issues with state tracking on a couple of VLANs, so need to dig into some pcaps from my switch and see what's going on there.

But one question I have is how to get the best out of my hardware, as it seems my WAN speed is a lot less than it should be.

I'm running Proxmox on a HP DL360 G6, with the pair of built-in 1Gbps NICs. One NIC is dedicated to my WAN connection, using a bridge in Proxmox, and it's plugged in directly to my 1Gbps fibre internet.

The OPNsense VM has 4 cores, 8GB of RAM, and a 40GB volume.

Using my previous hardware router/firewall (Draytek VIgor 2865), I was easily getting some decent speeds - 500Mbps to 700Mbps+. But, I'm lucky if I can get speeds any higher than about 120Mbps right now through OPNsense.

I've disabled hardware checksum offload and hardware TCP segmentation in the OPNsense firewall. Then I found this post that suggested doing the same to the NIC and bridge in Proxmox as well.

I've even tried rate limiting the interfaces on the OPNsense VM to 1000Mbps (OPNsense says they're 10Gbps), but nothing's made a difference.

So, throwing out to my newfound Lemmy network: does anyone have any suggestions on what to try, or look at, next, please? Kinda worried I might have to go back to the Draytek, which would be a real shame. OPNsense has already proven to be far superior in every other way.

view more: next ›