What's up? - Sunday weekly

[email protected]

I set up Affine and Kanboard to help with various projects. I got fed up of Notion, Trello, and/or a git repository full of documents.

[email protected]

I am finally in a position to have hardware running at home without it bothering anyone, so I cobbled together the hardware peaces I thrifted for over the years.

I played around with Proxmox and lxc containers, which are awesome, but not really useful for my usecase. I currently needed the essentials to get started and to finally have some kind of backups.

So TrueNAS scale it is. I got the ACLs down quickly, so the built in apps are no problem. But some things are not suited to be run as a built in app, I found. To avoid these headaches, I created an ubuntu server vm and a network bridge to allow for host access, and spun up those containers there.

I went for too little storage on the vm in the begiining (10G) so of course it filled up to the brim in a day. So I had to learn how to extend an lvm. Which worked only after I made some space available. It was so full, even mkdir failed.

[email protected]

I like this thread

I have just checked off a long standing item in my backlog: implementing OIDC on at least two apps. I've used a remote keycloak instance for authention for my household and so far so good. Now I'll try to understand the configurations a little better before take on other items on my backlog.

[email protected]

Using PfBlockerNG?

It's a great piece of software, but I had a hell of a time blocking some countries for torrents.

A single IP in China was repeatedly downloading an Ubunto ISO, I think due to the various methods of peers finding each other, so in the end I had to create an additional alias to block outgoing traffic even though only I was only allowing specific other countries in.

[email protected]

Updated my NAS recently and Immich's database stopped working due to some PostgreSQL update that needs something changed manually, so I need to get my head around that.

Also trying to get a tablet to run as a 2nd satellite for HomeAssistant voice commands and no matter what I do, only the 1st one responds to wakeword... but I tend to give up after everyone's gone to bed as I'm literally in a room on my own talking to myself...

[email protected]

Interesting, I think I should do the same for the services that are only used to people real close.

[email protected]

PostgreSQL Updates AFAIK require manual Backup / Restore of the Database. But better look that up. I think the last one I did was:

Stop the Application Containers (here the Immich ones, so only PostgreSQL runs)
Backup the Database
Stop the PostgreSQL Container
Change to the new PostgreSQL Version
Start the PostgreSQL Container
Restore the Database
Start the Application Containers

As I said, better look it up first, this is just how I remember the process (but not the backup / restore commands).

[email protected]

I spent half a day trying to get acme-dns + Cert Warden up and running and failed miserably. And I think I will give up on it. That does not happen usually, but during my debugging sessions I have seen that the acme-dns project is not maintained regularly since quite a while. The current maintainer just has not enough time, but tries to prepare the project for a move to a new GitHub organization, so more people can help with the project. Until then, Issues and PRs accumulate, so I am not sure anymore if I should stick to acme-dns or just do it differently.

Why did I pick this scenario? Because of Let's Encrypt certificates and my DNS provider does not allow fine-grained API Keys for DNS management. This means, that currently the processes that request certificates in my Network need the API Key for the dns-challenge for Let's Encrypt.

Ways around that are by either using Let's Encrypt alternate (I think it is called DNS alias mode) method where you can request Certificates for your main domain, but put the TXT records for the DNS challenge on another Domain. One way is to just use a 2nd Domain for that if you have one.

I tried to do it with a Subdomain of my Main Domain that I delegate to acme-dns. The whole acme-dns, Domain delegation stuff etc. works fine, but I am not able to get this hooked up to Cert Warden properly and end up with error messages that make no sense to me and since I do not find any further information in the logs, as I said, I just gave up yesterday evening... for now

Another thing I am struggling sometimes is my Pi-Hole + Unbound setup where Unbound for no reason just returns a NXDOMAIN for some queries and I can not figure out why, under which circumstances and when that happens. It just seems to be random and a restart / cache clearing etc. does not fix it.

[email protected]

I used to host kanboard for a while, maybe I should set it up again for my homelab

[email protected]

I replaced my tabbyml code assistant this week with ollama+continue.dev. But I'm having issues with speed. I think this is because I switched from code qwen 2.5B or something to Deepeek Coder 9B (or something) and I think I'm pushing the limits of my GPU or something. Maybe I'll spend today sorting out which models I want to use and which computers I want to use them on so I dont run into this issue (I've got ollama on 2 computers with 3 GPUs shared between them, for a total of 24GB VRAM)

[email protected]

Needed more ports for core switch so decided to mess with Cisco. Not because I like or respect that company or need their features but rather to get real world experience with it. This has only reinforced my hatred of them, but it's currently functional

Also needed to get 10G up, so went with microtik. This is also a curious little system, but at least it wasn't $10,000 MSRP (Cisco came from eBay). Still need to configure vlans here: thinking I'll just keep RouterOS but make it not route.

[email protected]

2012 macbook pro in the cupboard as server. Put nixos on it and it flies now, only wish the Magsafe connection was a bit more stable.

Its got gigabit so should be good.

[email protected]

Thought of a problem: I only pulled 300MB/s in initial test of 10G to my NAS (direct from PC) . Theoretical is 1.2GB/s right? NAS is 5 disk RAID5 spinning rust which interfaces to NAS expansion through USB3. so, this has to be the issue right?

Fix: cut out the USB for slight gain, add SSD cache for medium gain, or switch to all SSD to hit theoretical... Right?

[email protected]

So, slightly tangential, but I have a failed home automation project this past week.

I have been using an unofficial integration for my mini-splits for a few years. The guy who wrote it likes to disappear for 6 months at a time and it seems like it may be abandoned. It finally stopped working after a home assistant update.

I had bought some ESP based replacement dongles about a year ago and decided to finally use them. Well, not all of the features worked, so I set about writing my own firmware.

That ended up working even less well. I wasted a lot of time and effort trying to get my firmware to work before giving up and just moving to the fork of the original Home Assistant integration for the official dongles.

I hate being beholden to third party stuff like this because I have robust automation setup for my mini-splits and updates can completely break them and be a massive pain to fix.

I'm not sad I tried and failed so much as I'm just sad it didn't work. I may try again sometime in the future.

[email protected]

I have been trying to get my own mastodon instance up and running this weekend

I maneged to get it up and running yesterday, but I get some permission errors when trying to upload like a profile image etc.

I found a few issues that sort of mentioned permission errors, but they suggested running chown in the container, which is not possible, and running chown on the linked volume, which looks like an empty folder, and it didn't solve the issue.

Hoping to fix it when I get back home later.

It's nice to have something to fiddle with as the world is falling apart around you.

[email protected]

Yup! PFBlockerNG. I thought the GeoIP thing from Maxmind was paid, since the setup asked for a license key. Nope, free. Just had to register.

[email protected]

I've had similar problems with some other Fedi service once and it was indeed a permission problem. Good luck!

[email protected]

Ok, thanks. Yeah, I don't use PostgreSQL much, so I have to get my head into it.

That said, it's only for Immich, so I could just wipe it and start again which might be quicker... it only took 3 days to scan the photos, it might take me longer to update the database

[email protected]

I do like Trello, but Kanboard is a pretty good replacement. Lacking some polish, but it's a trade-off I'm willing to make.

[email protected]

I moved my Home Assistant from Proxmox VM to a older Lenovo Laptop we had stored as we thought the charger wasn't working. We are preparing to move so it was my job to check that laptop as well as 2 others. 2 I am not going to use and e-scrap those later this week after yanking the drives out (I don't trust anyone with my old drives). It turned out, the charger works just fine! I just installed it early in the morning (Midnight) and so far, it seems just as responsive if maybe more than what I had on the Proxmox host so that's a win on my end. Plus, I was able to give it the full 8gb of RAM it has instead of the 4gb I gave it in Promxox and somehow it's showing lighter use than what I had in the VM. 2.8gb vs. 4-5gb it reported from the Home Assistant Hardware details when in the VM.

agnos.is Forums

What's up? - Sunday weekly