Hyperion … I tried the other ones listed here and didn’t like them for one reason or another, but, this one has been alright.
Well, someone had opinions about that, lol … sorry that you don’t like Hyperion and feel strongly enough about it to downvote someone who does, random internet asshole!
Updated mine, but, realistically, I don’t think most of us are directly exposing our VaultWarden instances to the internet … I can’t imagine I’m all that weird by only exposing it over VPN for remote use.
Sorry, not 100% sure what you mean “converting its spec”
If you mean take an existing docker and move it to a standard installation, that would depend on what all is needed. Some installations include a ton of other dockers with databases and such and you’d basically need to move them all independently and ensure the programs talk to each other properly.
For others, it’s be as simple as making sure the contents of your original docker data folder is in the right place when you launch the app and you’re done.
Unless you’re downloading a prebuilt LXC, you’d still have to do all the manual install yourself.
If you do download a prebuilt one, then you’ll need to do the updating yourself, like you would a normal application, including ensuring you keep dependencies up to date and all that.
Both have their pros and cons and I use each depending on what I’m doing (and basically all of my dockers are running in their own LXC containers, which I find to be the best of both worlds).
FWIW, I don’t download any prebuilt LXC anymore other than the base ‘Ubuntu’ or ‘Debian’ ones … the ones in ProxMox that have the prebuilt apps were a pain to update for me, especially since I had no idea how they were actually installed and most of the times they didn’t have package manager installations or curl installed and it was just way more trouble than it was worth.
ProxMox does now have a built in containerized docker implementation that will use an LXC and you can just provide it the docker package details, but, it’s still in beta and I don’t know that it’s ready to be depended on yet.
Yeah, I had a overall bad experience with everything being buggy and then even devices that weren’t connected to tailscale would start trying to ping the tailnet address instead of the local (wasn’t using their funky bridge subnets feature or whatever it’s called, so I don’t know why it would happen).
Their magicDNS is cool in theory but caused me nothing but problems. Once I turned off their DNS and set up my own DNS server for it though, it’s gotten to basically be as seamless as they claim it’s supposed to be from the start. I’m no longer having any issues with it at all.
You’ve got to save something for the next release!
I use Weechat with Glowing Bear as a webui frontend for it, which is pretty convenient.
I just followed their instructions and on 2 of the nodes in my cluster, I migrated all VMs/LXCs off and then did the upgrade and they went through without a hitch. For the last one, I just YOLO’d it and powered off the VMs/LXCs and upgraded it and it also went through without a hitch.
One thing I did find interesting was the systemd-boot packages needed to be removed and were on 2/3 of the machines. I basically intentionally keep their config as close to identical as possible, so I have no clue why it was only needed on 2 of them.
One of the nice things about ProxMox is that you can also set up a cluster. When OP outgrows it, they can just add a new machine to the cluster and just migrate some VMs over to it.
Agreed, I disable sleep on all laptops other than my MacBook and my work laptop which manages to drain its battery and overheat itself on my bag semi frequently.
The MB has never had negative issues with sleep.
The security here is the WiFi password anything that connects to LAN gets a LAN vlan tag. but it’s not like anything that connects to any of the SSIDs can get the DHCP lease of some random device on any vlan cuz it got tagged before. Or am I missing something?
That sounds accurate. I have all my devices assigned a specific IP address, based on their MAC address, but that’s only per-interface. The other interfaces aren’t aware of my assignments for each other.
If I connect my phone to my LAN SSID, it’ll get its assigned IP, but if I connect it to the NOT [network of things, no internet access] SSID, it’ll get assigned a new address out of the DHCP pool because I haven’t assigned it an IP on that interface, until I assign it an IP. But, which VLAN it’s connected to will determine which IP its getting, and it still requires me to know the passwords for each SSID.
I believe where you’re getting confused is that a some businesses (or homelabs) might use a RADIUS server which will be more like this: ONE_SINGLE_SSID-Broadcast -> Device connects -> RADIUS Server detects account/certificate/MAC -> RADIUS Server assigns interface -> Device connects to VLAN the RADIUS server granted it access to
So, in that scenario, if the ONLY thing that’s being used to validate the access is the devices MAC address, just changing the MAC address will effectively grant a completely different level of access with nothing else changing. Most people in a homelab (and even plenty of larger businesses) aren’t running the infrastructure to do this though, they’re just effectively connecting a VLAN to a port and then that port can only be used to connect to that VLAN. They’re doing the same with the WiFi SSIDs where each SSID connects directly to the VLAN.
Usually though, for places that are implementing the RADIUS server, they’ll also install a certificate on their devices and the certificate needs to be in place in order to get certain access otherwise the RADIUS server will authorize less permissive access or just won’t allow access at all. Or, it’ll also need a user to log in to gain additional access.
For wired, the company may also implement port locking where the port will only allow a certain amount of MAC addresses to connect (presumably one unless there is also a VOICE VLAN with a phone being used, in which case it’d be two) where if you change your MAC address (or connect a different device), the port will lock and won’t power POE devices and won’t allow connectivity until an admin clears the lock. It’s possible that they may have multiple VLANs allowed on the port and client side you can change VLANs, but, this isn’t typically done on all ports, usually only on trusted ports or ports that need the multiple VLANs (my VM server for instance has access to a port that’ll allow multiple VLANs and I just enter the tag I need when I create the VM). This would be similar to your WiFi scenario, the port with the WAP connected to it will have access to multiple VLANs and then those WLANs just connect to the VLAN that they’re assigned to.
TL;DR - Typically one wireless SSID connects to one VLAN and if you want to jump to the other VLAN you’d need to connect to the other SSID, so you still have the individual passwords protecting you. On wired, typically VLANs are assigned per port and you can’t jump between then, but where they aren’t, it should be in a planned way and not just every port having access to every VLAN. Bad implementations exist though, so, anything is possible.
VMs can also be live migrated to another server in the cluster with no downtime and backups don’t need to take the VM down to do their thing. If in the future you want to move to physical hardware, you can use something like Clonezilla to back it up (not needed often, but still, something to consider).
Both have their places, but those factors are the main ones that come into play of when I want to use a VM or LXC.
Sorry, I didn’t mean to insinuate you were being insulting!
“Don’t feel crazy/bad/dumb, I’ve had the same thing happen to me!” is a pretty common phrasing in my region to show sympathy and understanding and I thought that’s what you had meant (and it sounds like for your area, ‘pregnant’ serves the same general purpose!).
It’s always crazy how that happens sometimes and after weeks of banging your head, everything just ‘clicks’ when you’re exposed to the information in the way that works best for you!
Dude, don’t feel pregnant.
Context clues, I assumed this autocorrect was some variation of crazy/bad/dumb? :-D
Weirdness: My Authentik instance had a PostgreSQL upgrade prerequisite in order to update it.
I’d followed instructions 3-4 times completely unsuccessfully and had to keep reverting to backup.
So, I gave up for a couple weeks and left it be in order to get over my frustration.
Yesterday, I followed the instructions again. As far as I can tell, I did nothing different than I’d tried previously and it worked first try and then I was also able to upgrade Authentik.
NOTE: The instructions aren’t exactly difficult! So, I don’t see how I’d have gotten it wrong!
My AmazFit Bip could do a month when it was new (it’s down to ~10 days now after a few years), so I would think a month from Pebble would be feasible.
I don’t understand using a watch that you can’t use for AT LEAST a weekend without power … as it is, I’m pissed off that I’m down to 10 days (it’s stayed steady here for 6 months or so, so, I’m hoping it won’t degrade too much more before the new Pebble comes out).
No, the Steam Link couldn’t actually play games natively and could only stream them from another system, this would be able to play independently of another PC but still requires an external screen and controller.
@[email protected] already took care of what SMART means and is good for, so, I’ll address what the spirit of your message instead.
For me, _almost _nothing in my house phones back anywhere with telemetry. Sure, anything that uses WiFi needs the network to run, but almost nothing has access to the actual internet because it’s on a VLAN that specifically blocks internet access.
If you plan out the equipment you buy, you can ensure it’s safe (the absolute easiest way to do that would be to only buy z-wave or zigbee equipment since by design that’s a completely offline ecosystem, unless you buy a controller for it that requires the internet). With WiFi, I basically only buy stuff that can be flashed to ESPHOME, which removes its online requirements and puts a completely different firmware on the devices … this is more work than most people would want to do though, but you can always buy devices that were already flashed by someone else. IIRC, there are even some devices that come that way from the factory and use ESPHOME as an option. Or, they’re devices where I bought the sensors and microcontrollers and wired them up myself and put ESPHOME on the microcontroller.
For me, I love walking into a room and the lights turning on. If it’s night, the lights are red to not jolt me awake. Later in the night, they’re dim and a bit more orangey rather than bright white. These are QOL improvements that I would not want to go back to not having.
My garage doesn’t have any of the standard RF “clickers”/4-digit-code-panels connected because they’re garbage, but I have a relay sitting on it that I can remotely trigger and open the garage. I have motion sensors so that if no one has been in the garage for the last 5 minutes and the door is open, it’ll close the garage door (this was because people kept forgetting it was open.) I have sensors to let me know when the windows are open at the same time as the heating/air conditioning to try and prevent burning money. None of this is internet enabled, but it is controllable over my network and my network is accessible over my VPN.
If the humidity is high in the bathrooms, it assumes someone is taking a shower and turns on the exhaust fans if they’re not already on. This can help prevent mold from growing. There are some real benefits to things being smart and I do 100% agree with you that apps that send data to companies on when we’re home/away and all that are BAD, but, if you plan ahead you can have your cake and eat it too, but the number of choices for equipment you’ll have will be lower, but at least your stuff will keep working regardless of internet access and regardless of whether the company that made the equipment is still around or not.
I have my bathroom fan turn on if the lid has been open more than 45 seconds … some things you just don’t (yet) know you need to be smart :-D
For me, all of our lights are smart (some bulbs with smart switches that talk to the smart bulbs and some just smart switches), but, everything needs to be able to function like it’s dumb … nothing needs an app to function. The wall switches will function as expected … home assistant adds additional functionality, voice commands add extra functionality, but, it all works as you’d reasonably expect it to if you just go and hit the wall switch.
This issue that only I have is proof of bad programming practices being used in LubeLogger and I demand you treat me like the special snowflake I am!
The reddit post where he doesn’t get people on his side is pretty funny too!