qjkxbmwvz

joined 1 year ago
[–] qjkxbmwvz@lemmy.sdf.org 1 points 8 months ago

Do you have a bulk food store nearby? We have one where you can BYO containers, tare and label them, and then fill them up at the store. Bulk food with no bags or single-use containers, it's great.

[–] qjkxbmwvz@lemmy.sdf.org 7 points 8 months ago (1 children)

Is this useful?

https://github.com/rodlie/powerkit

Not affiliated and haven't used it, but its tagline of "Desktop Independent Power Manager" seems like it fits the bill.

[–] qjkxbmwvz@lemmy.sdf.org 2 points 8 months ago* (last edited 8 months ago)

I love my orange pi (5+, 16GB, 256GB eMMC, 2TB NVME). New, with case and eMMC (excluding NVME) was about $200.

Smart switch says it idles at about 2.9W, transcoding 1080p with Jellyfin draws about 5W (at several hundred FPS with HW transcoding


so it presumably won't draw that much for the entire duration of the media). Not sure how reliable smart switch is at those powers but I'm guessing it's ballpark accurate.

Works flawlessly for Immich of course.

The duel 2.5G NICs are underutilized by me but kinda fun to have I guess.

For me, idle power is important, so the ARM SBC route is pretty appealing. A new x64 NUC at same price might offer comparable performance I suppose, and something used could be beefier at the expense of more power usage. But to each their own!

[–] qjkxbmwvz@lemmy.sdf.org 3 points 8 months ago

Immich! It's an amazing self hosted Google Photos replacement.

Zigbee definitely fun with HomeAssistant. I have an SLZB-06M adapter which has PoE (important for me) and is a fairly "open" product (don't need to jump through hoops to flash firmware). I read somewhere that it may offer Thread support at some point but wouldn't count on that.

[–] qjkxbmwvz@lemmy.sdf.org 7 points 8 months ago (2 children)

Not a lawyer; would this likely stand up in court? Obviously I wouldn't risk it were I the dev, but just curious.

It's pathetic that I'll happily recommend my Emporia Vue2 energy monitor to folks running HA


not because it works out of the box, but because the company is aware of the community integration projects and seems ok with it, even if they don't actually support it. (ESPHome Firmware flash gives you local control


It's been pretty great!)

[–] qjkxbmwvz@lemmy.sdf.org 2 points 8 months ago

As others have said, I'd play with routing/IP forwarding such that being VPN'd to one machine gives you access to everything


basically I would set it up as a "road warrior" VPN (but possibly split tunnel on the client [yes I know, WireGuard doesn't have servers or clients but you know what I mean]).

Alternately, I think you could do some reverse proxy magic such that everything goes through the WireGuard box


a.lan goes to service A, b.lan to service B, etc., but if you have non-http services this may be a little more cumbersome.

[–] qjkxbmwvz@lemmy.sdf.org 2 points 9 months ago

...let me get this straight, you're divorcing Minnie because she's very silly?

[–] qjkxbmwvz@lemmy.sdf.org 1 points 9 months ago

Does budget include storage? Tight budget without storage, even tighter with...

If power usage not a concern then used x86/x64 gear is probably the way to go. Surplus gear (corporate, university...) possibly an option for you. That's a very tight budget though, so I don't think it really gives you the luxury of choosing specs unfortunately. That said: I might go fot the best bones/least RAM/storage if you think you might upgrade it down the road. 4GB RAM with an upgrade path to 32 is preferable to 8GB non-upgradable IMHO. Likewise, 500GB spinny disk with extra bays and an NVME slot is nicer than 500GB SSD with no upgrade path. Again... really tight budget so this may all be out of the question.

I'm a fan of low power gear, so I'd recommend something like a Raspberry Pi 5 8GB, or another SBC (I just grabbed an Orange Pi 5 Plus and I like it so far


NVME, 16GB RAM, dual NIC). However these will be out of your budget, especially once you add case, power supply, and storage.

Good luck!

[–] qjkxbmwvz@lemmy.sdf.org 2 points 9 months ago

Debian got me through grad school.

Not the latest and greatest (if you run stable), but if you need the latest e.g. Julia, it's not too bad to compile it.

[–] qjkxbmwvz@lemmy.sdf.org 1 points 9 months ago

RHEL would like a word ;)

[–] qjkxbmwvz@lemmy.sdf.org 2 points 9 months ago (1 children)

"popularity contest" is an opt-in on Debian. It's not malicious, and it's not for financial gain, but it is in a loose sense spying.

[–] qjkxbmwvz@lemmy.sdf.org 3 points 9 months ago (1 children)

Big difference for me between the RPi 5 and orange pi 5 Plus is more RAM and m.2 NVME support on board. It also has four additional efficiency cores and dual 2.5G NICs, but that's less important to me.

Downside is it has a less polished ecosystem.

Overall though I've been happy! But I also love my collection of raspberry pis, so it's a matter of taste I guess.

 

Looking for advice for self hosted networking.

Question first, details below:

Everything works fine now, but feels...hacky. My question is, what's the best way of dealing with allowing only certain services to be accessible to the world while blocking other services to everything except local (+vpn) clients? Currently, because of my vps port forwarding, all external traffic appears to come from that machine. So, what I have now in my nginx config is to allow traffic from the local & wireguard subnets, except for traffic from the vps itself.

So: looking for advice on how to better manage access, but of course, if anyone has other improvements/suggestions, I'm all ears.

My current setup is:

Machines:

  • VPS (vps) with public IP.
  • Home router (router) with no public IP or open ports.
  • Home server (srv-home).
  • Remote server (srv-remote), located with family.

Network structure, ignoring vlans and whatnot, is:

  • vps <--wireguard--> router
  • vps <--wireguard--> srv-remote
  • router <--ethernet--> srv-home

srv-remote and srv-home can communicate through vps+router.

Services & structure, broadly speaking:

vps port forwards http/s to router, which port forwards to srv-home (can optionally have it port forward directly to srv-home, doesn't really matter to me).

srv-home handles SSL, both for services on srv-home and srv-remote. This allows me to a) manage certificates locally in one place (not on vps), and b) use local DNS on my router to bypass vps for locally hosted services. Works great.

srv-home and srv-remote both host some services which I would like to be publically accessible and some that I would like to remain private.

vps also acts as my roadwarrior vpn, on the same wireguard interface that's used for the vps<-->router link. One solution would be to just have separate wireguard interfaces (or maybe just separate address spaces?) for the vps<-->router and vps<-->[roadwarrior] links? Another would be to get the vps portforwarding set up in a way that doesn't lose originating IP address, but so far I have been unsuccessful there.

Thanks in advance for any insight!

 

SOLVED: delete using web client, and mobile will re-upload.

I haven't been able to find the proper way to force a re-upload of an image from mobile


any suggestions?

The images in question are from an iOS device. They show up correctly on the iOS device (both native Photos app and Immich), and claim to be uploaded (cloud w/check mark icon). On Android and web, they do not show up. If I try to download the image on web, it fails, with an immich_server log message of

ERROR [ExceptionsHandler] ENOENT: no such file or directory, stat 'upload/library/admin/path/to/file.jpg'

I've read it's possible to fix these issues with some Postgres magic, but I've also read that that is Strongly Discouraged.

I believe the original issue of why the files got borked was I didn't have a sufficient client_max_body_size set (I'm using a reverse proxy, nginx). This is just a hunch though...

Thanks in advance


will just ask the immich.app crowd if that's a more appropriate place.

view more: next ›