nsfwpls

joined 2 years ago
[–] nsfwpls 3 points 4 months ago

UniFi doesn't need a license, you just buy the switch and install the network app. Meraki will totally turn off your network if you ever stop paying for a license.

You're just renting their hardware until you stop paying for the license, then it's an expensive paperweight.

[–] nsfwpls 3 points 7 months ago

I use Resilio to constantly back up everything to my NAS, then I run a backup nightly to iDrive e2 from there.

Resilio monitors the folder(s) you pick for new files and instantly uploads them. I have it set to the root at /emulated/0 so it just grabs everything.

[–] nsfwpls 8 points 8 months ago

Did you read the COVID report released by the oversight committee earlier this month? Part of the overview basically says: "Trump saved us at Warp Speed™ with his vaccines!!", about a paragraph apart from "Biden bad for rushing vaccines".

[–] nsfwpls 2 points 8 months ago (1 children)

This sounds like it would work. As you said it seems a little over engineered, but I'm not sure how else you would go about only isolating Firefox without a local split tunnel VPN that has a fail-safe switch controlling your network adapter. Would Firefox rely solely on the proxy configuration, or will it make any attempts at using another route if the proxy fails (or it's just programmed to for specific features/extensions/etc)?

If you want a fully isolated browser, you can install Firefox (or Mullvad browser) as a container behind Gluetun. You would then just enter the IP and HTTPS port of your Firefox container in your local instance of Firefox and connect via (web) VNC over Tailscale. All traffic to the container uses HTTPS, goes over Tailscale, and through your Gluetun. Then Firefox has no possibility of using anything but Gluetun, and your browsing (clipboard, audio, hardware info, etc) isn't connected to your laptop at all by default.

This may not be ideal if you're trying to watch a lot of high resolution or high framerate videos though, depending on how high your VNC quality is set and your network capabilities.

https://github.com/linuxserver/docker-firefox

[–] nsfwpls 8 points 8 months ago

The tracking number is on the label. There's a tracking number as soon as the label is created, before it's ever printed or slapped on a box. Whether or not a customer is given the tracking number when the label is created is a different story.

I've had plenty of tracking numbers that just take me to a page that says "label created - USPS/UPS/FedEx awaiting item" until the carrier receives it. Some won't give me tracking until it's been picked up by the carrier, because there's no point tracking an item that hasn't shipped, but the number still exists.

[–] nsfwpls 4 points 9 months ago

His best work so far is selling all that olive oil too.

[–] nsfwpls 5 points 9 months ago

Old arcade machines. Giant capacitors + little knowledge on the subject = a very bad time.

As with anything it can be done safely if you know how. People still play those and they obviously need repairs/maintenance sometimes.

[–] nsfwpls 2 points 10 months ago (1 children)

I'm pretty sure OP is asking about forcing containers to use the VPN through gluetun.

"If I set up qBittorrent and the Arrs as Docker containers, can I use Gluetun to bind just them to the VPN?"

[–] nsfwpls 17 points 10 months ago (5 children)

Yes, that's what Gluetun is for. You create a Gluetun container and specify which containers should use it as the gateway in the compose file with:

network_mode: "service:gluetun"

Then you can open a shell in the container and run this to see if the container's IP is different from your own:

curl ifconfig.io

Make sure to try stopping the gluetun container and confirm your other containers lose network access.

There are plenty of guides about this if you search for "gluetun arr stack", like this random one I picked: https://www.smarthomebeginner.com/gluetun-docker-guide/

That has some steps outlining the basic gluetun configuration, how to put specific containers behind it, and test it.

[–] nsfwpls 2 points 11 months ago* (last edited 11 months ago)

Are you using a *.duckdns.com domain or is that only for Dynamic DNS pointed to something like jelly.domain.com? I'm not sure if you'll be able to get a cert in the former scenario.

Your router won't let you access it because you're trying to connect from your internal network to your external network, so you're just connecting in a loop and not getting routed properly. This could work if you had a firewall that would let you set up a loopback NAT, but my guess is your router won't let you setup NAT rules like that.

You won't be able to get a certificate using a local domain from a public certificate authority (like Let's Encrypt). You would want to define the FQDN you want to use, like jelly.domain.com, and generate the certificate for this domain. You can do this manually with certbot and import the certificate to jellyfin, or put jellyfin behind a reverse proxy like Caddy or Nginx and let it handle automatic renewal for you.

The local DNS entries would then redirect internal requests for jelly.domain.com to your local server, which presents the same certificate for jelly.domain.com regardless of whether you're accessing it via the private or public IP.

A bonus of using something like Caddy is being able to open a single port on your router for every service. I have multiple services all accessed via the same port, and Caddy just reads the requested subdomain (jelly.domain.com, nextcloud.domain.com, etc) to route the traffic to the corresponding local server. This lets it handle every cert for all services with no manual steps needed for any of them after the initial setup, and reduces your attack surface by only having one port open.

[–] nsfwpls 4 points 11 months ago

You can even buy your own and do this at home, but I'm not sure how it compares to the strains mentioned in the article.

https://northspore.com/collections/liquid-cultures/products/polyurethane-degrading-liquid-culture-syringe

[–] nsfwpls 3 points 1 year ago

She has her own show too, The Mindy Project, and it's further evidence that she just plays herself in everything.

view more: next ›