• 7 Posts
  • 80 Comments
Joined 1Y ago
cake
Cake day: Jun 12, 2023

help-circle
rss

Yeah I love it. Also if you are stuck with outlook. Use Caldav synchronizer it is a add-on you can use with outlook to sync calendars with nextcloud.


What I use is Borg. I use Borg to backup the server to a local NAS. Then I have a NAS at my grand parents house which I use to store the backups of the NAS it self.


Raid is not only for if a drive fails. But can also be used against slow corruption of files. If you love your data use raid.


Any storage shut be raid or a form their of in a ideal world. The storage where backups are stored a defiantly yes raid shut be a very high priority.


Personally I prefer Rocky linux. Default to using SElinux which I also like. not a big fan of debian though as things are quite old and sometimes outdated for my needs.


Ports below 1024 are by default reserved for root. So unless you use sudo or change this you wont be able to use port 80 and 53 without root



Be aware! The dell R730 most likely comes with a raid controller which is not suited for ZFS. You need a true HBA instead. Some raid controllers do let you set them up in JBOD mode but it still is not suited for ZFS as you need a proper HBA and or a raid controller where you can flash the firmware to IT mode.

For ZFS storage and many apps and more Truenas scale might be interesting to you.




About 500W. 1 self build server 1 Dell R510 and one dell R710. This also includes a bit of network gear like a 48 port switch.



it is improving a load. Also you can ask on the wishlist of postman. Many folks are happy to reseed it for you or make it available on I2P.



I in fact run a AD domain controller *and *a rhel IDM controller. For me other then it is fun to play with, makes it a load more simple to manage the user accounts of my famalie. Also auto mounting network shares and setting a few policys for updates and security is great to from a central location. having SSO for many if my services also makes it more easy to use for the fam. The rhel IDM controller I use to manage a few user accounts. I also use it to manage the ssh keys and set sudo rules on all my servers.


From my understanding is that Proxmox is one of the more easy platforms to learn. I must say iI never used it personally.




Alright thank you! good to hear


Joining a QNAP to a AD Domain.
Hello all! I have recently started in building up a AD domain and it is coming along well. I also like to join my existing QNAP TS H886 to this domain. I have one concern how ever. their are some local usernames that are the same as the usernames in the domain. Will this cause any conflicts? can the NAS still be accessed with a local account even when it is joined to the domain? if yes can i transfer files from the local users to the folder of the domain users? So migrating from the local user accounts of the QNAP to the user accounts in the domain.
fedilink

My man, You need a NAS. I can highly recommend TrueNAS scale if you want to go the self building route.


I agree that the web UI looks a bit outdated. But it is more then functional and imo not that complicated. Personally I use the container version with podman so idk about the windows version.


Personally i get the highest quality i can. Often 4K REMUX . If a device is not capable of showing 4K i just transcode the stream at the server.


Fail2ban might not be a good thing. You can flood the blacklist.

You just have to run a continous attack with spoofed source addresses. use IPv6 addresses and just wait until the whole ipv6 space is in the blacklist. by then that file will be huge. might even crash some servers


https://geti2p.net

Fully anonymouse and FREE P2P network great for torrenting and somewhat encouraged even.



Unifi is simple to use but you can hit its limitation. A other brand I can highly recomend is Mikrotik. They have some small and cheap devices to some fairly high end gear 100gb gear. No licensing cost or anything.



A few actually.

Rocky Linux 9, XCP-NG, Windows server 2022 datacenter

Different usecasses.


Letting users in too your entire device and potently your LAN is worse then giving access to a single service.


Its not that it wont “work” but it is anything but secure your better of port forwarding and open it straight to the internet.





Spytify but it is for windows only. You can use a vm for it. You got to have a premium acc to acces higher quality though.

Personally i rip straight from tidal. Been thinking of making a few tb available on I2P soon.


Actually you can block vpns using port 443 and 80. Using a methode callesd deep packet inspection. Not something you find in a typical coffie shop. But it being practically unblockable is false. My school used to do this. So i used shadowsocks or tor with snowflake.


I am already using this for publick services i have things jellyfin.publick.com domains. Which works fine for that usecase. What I am looking for here is to make SSL work properly for services that are part of the 2 local domains. where the 2 controllers are authoritative of those 2 domains.


How to properly setup local certificate authorities for sub domains?
Hello everyone, A bit of background on how things are configured: I have many local services and am in the process of setting up two local domains, namely **local1.publick.com** and **local2.publick.com**. I own the domain name publick.com and manage it through Cloudflare. Local1 is for the Windows domain and is using Active Directory, while local2 is for the Linux domain and is using RHEL IDM. Now, as I am also exploring Single Sign-On (SSO) with Keycloak and a few other things, I would like to properly set up SSL for all these subdomains. Can I configure two local certificate authorities? One for local1.public.com and another for local2.publick.com? I would then use these to create certificates for service.local1.publick.com and service.local2.publick.com. Since the AD domain controller and RHEL IDM controller are authoritative for these two domains, can I still integrate two CAs with this setup?
fedilink

Arnt GPOs on Linux very limited? Anyway to get some form of “policys” working I was thinking of using Ansible and playbooks to manage that portion anyway. (Next project).


you can still use sudo and all the other good stuff while only having one source of truth for identity.

I am aware that linux devices can join the AD domain. The reasons i setup up FreeIPA/IDM is the linux specific rules I can make. Like the Sudo rules for example. As far as i am aware you can not do this with a windows domain controller.


question about self hosting SSO for multiple domains and services.
Hello, everyone. I am planning to set up Single Sign-On (SSO). I wonder if I can use something like Red Hat SSO with two separate domains. I have one domain for Windows AD and one for Linux IDM. My idea is to use Red Hat SSO so that both domains will be able to access the same services. For example, I have one Nextcloud instance, and I would like users from both domains to use it with SSO.
fedilink

What can also be a good option is urbackup. it supports different operating systems full image backups of windows clients. Not entirely sure if it supports image backups of a linux clients how ever.


Not the intended usecase but fogproject can be used to pull images. Then later you can just PXE boot and place a image back on to a differen system.

Still i think borg would be better for actual backups.


Can i use mailcow on a dynamic IP with DDNS-updater for my usecase?
Hello everyone, I am currently running a server with the Pterodactyl panel for various game servers, and it has been working great for several years. However, I would like to set up a system for Pterodactyl to send out password reset emails when necessary. I am considering using Mailcow on the same host specifically for this purpose. Currently, I am using an application named DDNS-Updater to automatically update all records on Cloudflare when my IP changes. While my IP doesn't change often, it can happen; it occurred once this year. Would this pose an issue for a mail server? If the emails end up in the spam folder, it is not a major concern since they are only password reset emails. However, it is crucial that the emails reach the intended recipients. Thank you.
fedilink

is a dell R710 with 2x x5690 enough for my use case?
Hello everyone! I'm looking to set up Active Directory at home along with RHEL IDM, but I only have one available Dell R710 for this purpose. My plan is to install XCP-NG on the Dell R710, accompanied by a small VM running Xen Orchestra Community Edition for management. Additionally, I intend to create two main VMs: one with Windows Server for Active Directory and a second one with Linux running RHEL IDM. My primary concern revolves around the CPU and whether it will be sufficient to run this setup. The Windows Server will also serve as the DHCP and DNS server for my network, which includes multiple VLANs.
fedilink

4 black bars with REMUX ?
Hello all. So i have setup some Arr apps and i mostly download movies in the highest quality. But i started to notice, With REMUX almost always i got black bars on all 4 sides. Is their a way to prevent Sonarr from grabbing movies that have these black bars? Also whats the point of getting REMUX if it has 4 black bars? the movie gets really small in the middle of the screen.
fedilink

is it possible to use the Arr apps with I2P?
Hello ya all! I currently setup some Arr apps like Sonarr and Radarr together with qbittorrent. I would love to know if these would work with I2P somehow. to anonymously torrent. If this is possible any guide/guidance on how to do so?
fedilink