CumBroth

joined 2 years ago
[–] CumBroth@discuss.tchncs.de 2 points 11 months ago* (last edited 11 months ago) (3 children)

Gluetun likely doesn't have the proper firewall rules in place to enable this sort of traffic routing, simply because it's made for another use case (using the container's network stack directly with network_mode: "service:gluetun").

Try to first get this setup working with two vanilla Wireguard containers (instead of Wireguard + gluetun). If it does, you'll know that your Wireguard "server" container is properly set up. Then replace the second container that's acting as a VPN client with gluetun and run tcpdump again. You likely need to add a postrouting masquerade rule on the NAT table.

Here's my own working setup for reference.

Wireguard "server" container:

[Interface]
Address = <address>
ListenPort = 51820
PrivateKey = <privateKey>
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostUp = wg set wg0 fwmark 51820
PostUp = ip -4 route add 0.0.0.0/0 via 172.22.0.101 table 51820
PostUp = ip -4 rule add not fwmark 51820 table 51820
PostUp = ip -4 rule add table main suppress_prefixlength 0
PostUp = ip route add 192.168.16.0/24 via 172.22.0.1
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip route del 192.168.16.0/24 via 172.22.0.1

#peer configurations (clients) go here

and the Wireguard VPN client that I route traffic through:

# Based on my VPN provider's configuration + additional firewall rules to route traffic correctly
[Interface]
PrivateKey = <key>
Address = <address>
DNS = 192.168.16.81 # local Adguard
PostUp = iptables -t nat -A POSTROUTING -o wg+ -j MASQUERADE #Route traffic coming in from outside the container (host/other container)
PreDown = iptables -t nat -D POSTROUTING -o wg+ -j MASQUERADE

[Peer]
PublicKey = <key>
AllowedIPs = 0.0.0.0/0
Endpoint = <endpoint_IP>:51820

Note the NAT MASQUERADE rule.

[–] CumBroth@discuss.tchncs.de 110 points 1 year ago

If not friend, why friend-shaped? :(

[–] CumBroth@discuss.tchncs.de 15 points 1 year ago (1 children)

Is it a bird?

Is it a plane?

I actually can't tell.

[–] CumBroth@discuss.tchncs.de 14 points 1 year ago* (last edited 1 year ago) (2 children)

Among other things: Cooking. They're really helpful in those situations where I have a bunch of ingredients lying around in my pantry but I lack concrete recipes that can make a proper meal out of them.

[–] CumBroth@discuss.tchncs.de 3 points 1 year ago (1 children)

Not since I've started working from home.

[–] CumBroth@discuss.tchncs.de 5 points 1 year ago* (last edited 1 year ago) (4 children)

test, spoiler testeueaouaoeuaoeuaoe

The syntax is a bit confusing. You need to leave the first "spoiler" untouched. You can delete the second "spoiler" to set the title, and then replace the three underscores ___ with your text:

"

my-title

my-text

"

Edit: Looks like most apps don't support this and this spoiler markdown only works in the browser.

[–] CumBroth@discuss.tchncs.de 6 points 1 year ago (1 children)

Is... is this a Raphaël reference?

[–] CumBroth@discuss.tchncs.de 1 points 1 year ago (1 children)

I set it up manually using this as a guide. It was a lot of work because I had to adapt it to my use case (not using a VPS), so I couldn't just follow the guide, but I learned a lot in the process and it works well.

[–] CumBroth@discuss.tchncs.de 2 points 2 years ago

I've tried both this and https://github.com/jmorganca/ollama. I liked the latter a lot more; just can't remember why.

GUI for ollama is a separate project: https://github.com/ollama-webui/ollama-webui

[–] CumBroth@discuss.tchncs.de 3 points 2 years ago (2 children)

The more recent installment, Bannerlord, had caught my attention, but a lot of people were saying it was unfinished and that devs weren't updating the game to deliver things that were promised and instead were making minor hotfixes that even broke the mods attempting to address the game's inadequacies. A lot of the complaints compared it to the first installment in the series and were recommending trying it out, especially since it had had a thriving mod scene and was more fleshed-out over all. I tried it out, but it just felt too dated for my taste; couldn't get into it.

Maybe I would've gotten into it had I given it more time. I just felt pressured to quickly make a decision on whether to refund it after I had wasted more than 3 hours of my "trial" sitting in the main menu.

[–] CumBroth@discuss.tchncs.de 9 points 2 years ago (4 children)

I once got a refund after 5 hours. I opened the game, left it running at the main menu, then went to make lunch and completely forgot about it. Wasted probably about 3.5 hours in the menu. When I asked for a refund, I didn't even explain that I'd left it open in the main menu; I just pointed out why I didn't like it and why I wanted a refund. The game in question was Mount and Blade, store country was Germany, and I submitted the refund request on the same day I bought it.

view more: ‹ prev next ›