• 2 Posts
  • 12 Comments
Joined 1Y ago
cake
Cake day: Jun 20, 2023

help-circle
rss

I’m curious what issues you had with TrueNAS? I’ve been using it for about a year now and the only issue I have had has been with one of my pools deleting itself after a reboot, but that was user error because I put the wrong SED password in the settings.


On iOS, I tap on my profile in the upper right, and the VPN-on-demand setting is right below my account.


I’ve been using Tailscale for about 2 months now. It has a VPN-on-demand setting that I keep enabled. That way, anytime I am not on my local WiFi, it automatically connects the VPN. According to my battery health settings, Tailscale has used 5% of my battery in the last 10 days. And I am even using a Mullvad exit node, which would use even more battery.


As much as I hate to send anyone to Reddit, the wiki on the Usenet subreddit is great. They explain the concepts and components and have a list of good indexers and providers.

If you have any other questions or need help setting anything up, feel free to send me a PM.


I would really recommend looking into Usenet. I was in your position a few months ago (starting to look for private trackers), but ended up hearing about Usenet and going that route instead. It has been amazing so far. It has everything I am looking for, I don’t need to worry about a VPN, and I can download as fast as my ISP can go, so I get my content in minutes instead of hours. I also don’t have to worry about my VPN disconnecting for some reason and my ISP sending me a nasty letter. The only downside is, if you want the best, you’ll have to pay for an indexer and a downloader, but it’s not that expensive and is certainly worth it for the benefits over torrents.



That is what I ended up doing temporarily, but I think I will just make it temporarily permanent. I could likely set up another Docker container to run a DNS server connected to a DoH resolver, and use that container as the DNS server for Traefik, but that’s a lot of work.


I own 3 different domains and just today set up SSL services for them using Traefik (made another post for an issue I’m having with that).

I ended up doing a subnet router and that got me what I was looking for.


Did some more testing to get some details. The error I am getting from Traefik is that Cloudflare cannot create the record because it already exists (PiHole already has the entries). If I delete the records from PiHole, Traefik can then create the TXT records in Cloudflare.


Issue with Traefik SSL and PiHole
I set up SSL certificates for my internal services behind Traefik, but I was having some issues obtaining the certificates. I ended up having to add this line in my Docker compose file to bypass PiHole which is controlling the internal hostnames for my domain: `- --certificatesresolvers.letsencrypt.acme.dnschallenge.resolvers=1.1.1.1:53,1.0.0.1:53` After adding that, I was able to successfully pull a cert. The issue is, I have a firewall set up that blocks DNS requests from everywhere except my DNS servers (PiHole), so I had to pause that rule temporarily to get the request to go through. Wondering what I can do here (if anything) to resolve this without having to disable my firewall rules regularly.
fedilink

That is almost the exact same thing I am doing. I have 2 Pi’s running PiHole in HA and I just made one of them the subnet router to allow this access. Since I will be the only one using this, I don’t care to use Funnel right now, but thanks for showing that to me. I am (obviously) new to using Tailscale, and that looks like a very neat feature.


I set that up, but the issue now is that my DNS server is replying back with the private IP, which is not accessible from tailscale.

EDIT: Figured this one out. Need to advertise the routes from one of my machines. Set that up and I am good to go now. Thanks!


How to access traefik hostnames from tailscale clients
I finally decided that I wanted to be able to externally access some of my Docker containers from outside of my local network. I don’t want to deal with the security hassle of exposing ports on my router, so I decided to go with Tailscale. All of my container web services are run through traefik and are accessed using hostnames I set up on my DNS server. How would I go about accessing the different web services externally since the hostnames don’t resolve?
fedilink

Do they not still intermingle their stock? Last I remember, if a 3rd party seller lists a product that Amazon also sells, the stock is all put together in the Amazon warehouse. I’ve gotten counterfeit electronics even when it says “ships and sold by Amazon”. I’ve started buying from B&H.