Thread #108610550
HomeIndexCatalogAll ThreadsNew ThreadReply
H
File: nmap.png (1.1 MB)
1.1 MB
1.1 MB PNG
nmap edition

previous: >>108567405

READ THE (temp)WIKI! & help by contributing:
https://igwiki.lyci.de/wiki/Home_server

/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.

>What software should I run?
Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.

>Why should I have a home server?
De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.

>Links & resources
Cool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhosted
https://reddit.com/r/datahoarder
https://www.reddit.com/r/homelab/wiki/index
https://wiki.debian.org/FreedomBox/Features
ARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQ
Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
SFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/
Cheap disks: https://shucks.top/ https://diskprices.com/
PCIE info: https://files.catbox.moe/id6o0n.pdf
>i226-V NICs are bad for servers
>For more SATA ports, use PCIe SAS HBAs in IT mode
WiFi fixing: pastebin.com/raw/vXJ2PZxn
Cockpit is nice for remote administration

Remember:
RAID protects you from DOWNTIME
BACKUPS protect you from DATA LOSS
+Showing all 75 replies.
>>
>>108610550
why do people even post in these threads again?
>>
>>108610565
Why do people even post on 4chan anymore with 30-60 second long hangs / timeouts every time you hit the post button?
>>108610392
There's a fork of it that's actively maintained:
https://hub.docker.com/r/nickfedor/watchtower
>>
Wendell here. I'm fat as shit. Come to my forum so we can gate keep expensive hardware. Also watch me and my dysgenic coworkers on our video cast. Fuck you.
>>
>>108610575
>answering my question with a question
oh okay this thread is for clueless bumblefucks. got it.
>>
>>108610550
Yummy mama
>>
>>108610614
Yeah, I've got nothing. Why are we here?
>>
>>108608826
yes

>>108609147
>parity drive
oh i dont raid i just keep everything on one drive
>>
>>108610550
Based OP.
>>
Imma post here and hope for answers otherwise I'll do a thread. I'm pissed off

I got an openwrt one router, reflashed everything, connected it, access the webui and my wan interfaces are red. It's switching from present to absent.

I have a modem from my ISP, nad just got this router to fuck the ISP router. But it won't get an up address.

I tried changing the brlan ip address in case the modem has the same one, not working

I tried spoofing the Mac from the wan device , mac of my old router it still won't work

I let it power cycle for like 4 or 5 mins it still doesn't fuckkng connect. My ISP does not have a Vlan id and it uses DHCP so this should work. Idk what to do anymore
>>
>>108610745
is your wan and bridge-wan enabled?
>>
>>108610745
>>108610762
you can also connect the wan to another router to see if dhcp works. if it doesn't then you know it's your config.
>>
>>108610762
Do you mean if the interface is started or not? I restarted it it jumps between the state of present and absent yet the color stays red

>>108610772
Shortly before I had my original router in it and working, do u mean putting the wan in my original router and putting it on bridge mode to the openwrt one?
And if it works, I'd like to only use my openwrt router
>>
>>108610745
I would investigate this properly with a mac-spoofed linux box connected to wan and wireshark/tcpdump to see exactly what happens.
Also what model is your old router? Are you sure it takes just plain dhcp to connect further to wan and not some pppoe link or some weird mtu setup and so on?
Any way to confirm the mac was spoofed correctly?
>>
anyone here using ceph with a single node setup?
>>
>>108610799
just connect the wan to a dhcp server and see if it grabs an IP.
if it does you know it's an upstream problem.
the bpi openwrt support is shit.
>>
>>108610799
Do this:
>>108610954

This is literally all you need in /etc/config/network for a nice ISP (like I have) that does standard DHCP with no VLAN tags or PPPoE fuckery, etc:

config interface 'wan'
option proto 'dhcp'
option device 'eth0'

config interface 'wan6'
option proto 'dhcpv6'
option device 'eth0'
option reqaddress 'try'
option reqprefix '56'
option norelease '1'


Also if you can SSH into it from the LAN then check the logs:

logread -e netifd
logread -e network
logread -e dhcp

Etc.
>>
>>108610954
>>108610984
Actual fucking hero, i wish I could try it out rn but Im not home until later
Thx
>>
>>108605058
use cli or SwOS then you homo
>>
>>108610565
I have questions and a delusional hope that someone here will know more than a free tier AI model with web search, but they never do.
>>
You know what grinds my gears? Having unlimited bandwidth but not being able to host anything because my ISP doesn't have any sort of port forwarding in the router they gave me, and because it's 5G Internet I'm locked to their router (though I have considered finding a PCIe WWAN card and seeing if I can talk my ISP into moving my SIM from eSIM to a physical module and slap it in my old home built 10Gbps router)

Maybe I'll try to find someone in customer care that's too stupid to know that the router ban doesn't apply to ones you already own, and convince them that I have a government job that requires me to be compliant with the ban so I HAVE to use my own modem/router that was assembled in the USA by me so there's no risks to national security?

It's either that or pay for a VPS so I can run a reverse proxy.
>>
>>108611058
Also one more thing. Leave your router disconnected for a bit before you do this.

If your ISP is paranoid they may be tying auth to the old DHCP lease on your old router and then send a bunch of DHCP NACKS preventing you from connecting. If this is the situation (I encountered this before after doing a fresh OpenWRT install because the DUID that the DHCP client was sending was different) then it will fix itself eventually when the lease expires.
>>
>>108610611
I once added this nigga to my pinchflat and forgot about for a year and that resulted in accidentally downloading 3tb of video podcasts
>>
>>108610550
I don't know if I'm just missing something obvious but after moving to Proxmox I cannot seem to get port forwarding working for the life of me. I've been troubleshooting this for hours.
VMs show up in OPNsense and the rules worked fine on bare metal, but after putting them on Proxmox everything is getting hit with a Default deny / state violation.
>>
>>108610550
SAUCE
>>
>>108610575
>Why do people even post on 4chan anymore with 30-60 second long hangs / timeouts every time you hit the post button?
It's more than here, cyber war is ongoing.
>>
>>108611392
Reverse Image Search is your friend. But that is Dakoda Brooks.
>>
>>108611251
Is OPNsense a VM on the Proxmox host?
>>
>>108610575
>Why do people even post on 4chan anymore with 30-60 second long hangs / timeouts every time you hit the post button?

It's is not just here. Lot's of systems are being effected. You are just oblivious, it is a mix of cyber war and this

"The exploits it constructs are not just run-of-the-mill stack-smashing exploits (though as we’ll show, it can do those too). In one case, Mythos Preview wrote a web browser exploit that chained together four vulnerabilities, writing a complex JIT heap spray that escaped both renderer and OS sandboxes. It autonomously obtained local privilege escalation exploits on Linux and other operating systems by exploiting subtle race conditions and KASLR-bypasses. And it autonomously wrote a remote code execution exploit on FreeBSD’s NFS server that granted full root access to unauthenticated users by splitting a 20-gadget ROP chain over multiple packets."

If you don't have your offline LAN you are too late. I told you all there were race condition exploits in the linux kernel checked in by bad actors and you just would not listen. In two years the internets will be a smoking radioactive wasteland.
>>
>>108611416
This would never happen if 4chan deployed IPv6 already.

Reminder that Iran has no IPv6.
>>
>>108611135
cloudflare tunnels is one popular solution. tailscale may have something.
great. now i'm getting cloudflare error pages inside the tiny little captcha box. what the hell. it'd be nice if the admins of this place talked to the users.
>>
>>108611565
>it'd be nice if the admins of this place talked to the users.
Whenever they have the majority of users just wig out and start acting fools.
I would also like to know what is happening though.
>>
>>108610575
thanks for this
I’ve been wondering about the flakiness and evidently it’s not just my computers with the 4chan pass
>>
>>108611538
>has no IPv6
use case?
>>
>>108612085
>Cuts off all bot attacks from the Middle East free of charge
>*Can't attack your site if they can't route traffic to ::/0*
>>
>>108610550
sauce
>>
I love you, /hsg/ anons.
>>
File: 0330_02.png (980.6 KB)
980.6 KB
980.6 KB PNG
>>108610550
I find convertx to be a very useful service, purely for converting gifs that my phone has saved as mp4's back to gifs. There're a lot of websites that do this obviously, but this is much faster and it's nice to keep my media on my systems if I can.
>>
It's the Tp-link Tl-sg2218p
A good switch for baby's first home server
>>
is coffee good for you?
>>
>>108612564
Probably. I have a T1700G-28TQ. TP-links software is shit hot garbage but it is cheap and good enough.

If I did things over today I'd probably buy Mikrotik, but this was the cheapest switch that let me build out a 10-gigabit network at the time.
>>
>>108611445
No, it's on its own computer
>>
>>108612564
yeah it works fine. No problems here
>>
>>108610575
I post funny stuff the for the agent filtering the posts to look at
>>
Can anyone recommend a good transparent tls termination thingy? For my use case i have a server with a /112 prefix dedicated to podman containers. I want each container to have its own ip. Most of this stuff is http, so currently i am using haproxy in front with the x-forwarded-for bullshit, but ideally i want the tls termination to happen transparent to the container. My goal is really to make the entire connection chain as simple and end-to-end as possible, thats why each container gets its own ip. No SNI snooping or reading http headers.
>>
File: 움짤320.gif (105.5 KB)
105.5 KB
105.5 KB GIF
What's a good option for a 2.5G PCIe Ethernet card?
It needs to be reliable and have working power management under Linux.
>>
>>108611251
Never mind, I'm an idiot. It's been so long since I changed anything that I forgot that port forwarding and firewall rules are different things.
>>
>>108613380
Intel X550 and force it to run at 2.5G with
ethtool -s eth0 speed 2500 duplex full
>>
>>108610550
I'll scan her ports if you know what I mean
>>
>>108610550
I have a dedi server that I use to host what I want.
So far I've replace my gmail and dropbox with local linux services.
What else can I replace? I checked out that "Awesome Self-Hosted" github page, but there's so much on there that it's difficult to find worthy projects.

I'm basically trying to replace all my online services with local services.
>>
>>108613887
Looks nice but it costs more than my CPU+Motherboard
>>
Would having x2 LSI 9300-16i (second PCI slot and the other Chipset), with a 6900xt in the first PCI slot create any issues on a Crosshair VIII Dark Hero motherboard? I currently have one LSI HBA and my GPU still runs at x16, because of the controller on the HBA. So I'm just wondering what would happen were I to get another HBA and put it on south bridge.
>>
>>108614054
>I've replace my gmail
how
>>
>>108614071
If you want cheap then your only option is one of the various rebranded Realtek chipsets.
>>
>>108614054
>I've replace my dropbox
how
>>
>>108611392
https://yandex.com/images/touch/search?tmpl_version=releases-frontend-images-v1.1756.0__02c46b34d70f38da062024cf7148364895cdae28&lr=87&crop=0%3B0.016%3B1%3B1&redircnt=1776347064.1&rpt=imageview&url=https%3A%2F%2Favatars.mds.yandex.net%2Fget-images-cbir%2F1607195%2FalU_JO9lZl0EuCVb58KOJg7090%2Forig&cbir_id=1607195%2FalU_JO9lZl0EuCVb58KOJg7090&cbir_page=similar&img_url=https%3A%2F%2Fsasisa.org%2Ffoto%2Ffoto%2Fa881356%2F67bc83e08abb81.676864671740407776_67bc83e08abbd2.26355699.jpg&pos=52
>>
>>108611392
https://yandex.com/images/touch/search?rpt=imageview&cbird=178&url=%2F%2Favatars.mds.yandex.net%2Fi%3Fid%3D45b7da8038006321af63a9b1dc6ca781_l-4504894-images-thumbs%26ref%3Drim%26n%3D13%26w%3D670%26h%3D1006&cbir_page=similar&cbir_id=9510176%2FYeMsfzR6op90Oshtvd23TA8123
>>
>>108614054
>I'm basically trying to replace all my online services with local services.
Step 1: find online services you use
Step 2: if a self-hosted alternative exists, install it and stop using the online service

Email and storage are big ones, if you have family or friends you could set up a private XMPP server for them and maybe calendar sync. A lot of people host media libraries and you can do a ton of stuff with that, I don't watch TV so I've never tried it but I heard you can auto-scrape torrent trackers to auto-download new show releases and have them available in a TV-like library to watch across any device you connect to your server, shit like that. Same for music streaming to yourself.
>>
https://newsroom.intel.com/client-computing/intel-launches-intel-core-series-3-processors-changing-the-game-for-everyday-computing
>>
>>108614949
>Ctrl+F
>AI
>Only 37 matches
It's going to flop
>>
hello /hsg/
here's the shit i host
recommend me some more services
>>
>>108612284
Love u too
>>
>i226-V NICs are bad for servers
Why?
>>
so I have another weird truenas thing I'm trying to optimize
I have a truenas SCALE box running an SMB share
if I move a file using qbittorrent, it moves nearly instantaneously, regardless of filesize (presumably just updating the file location without actually moving any data)
if I move a file with windows explorer, it reads and rewrites the file, at a rate of ~400MB/s
is explorer just retarded or is there some setting I can change to fix this? would NFS shares be handled any different?
>>
There is a bunch of Apple Xserve at the local thrift store, bewteen 20€ and 70€
>>
>>108610550
I let my lust overtake me and reverse image searched and now I am hiding your thread and putting on a filter
>>
>>108616380
>ransacked gpus and sfp cards
lol
>>
>>108616258
is that the one that was buggy?
>>
>>108617115
I don't know man, I'm just asking because I found an interesting chink mobo with a n100 and it has this NIC
>>
>>108617135
i think that the early versions of that chipset were buggy and a later rev fixed it, but you had to confirm which rev was being used. you'd think by now all the chips being sold were the fixed rev, but there's no guarantee. i think realtek STILL sells buggy 2.5Gbe chips despite having a fixed version. the i226-V stuff is all from memory though.
>>
>>108617156
I will pass this board because it's a used one from a local seller and the nic will be probably the old version. I don't want to start with problems. Thanks for the info.
>>
>>108617273
>a used one from a local seller
look for Supermicro or Huananzhi boards, they dont have meme network cards
>>
>>108616380
>local thrift store, bewteen 20€ and 70€
these are australian ebay prices
>>
>>108610550
Need this wallpaper, source?
>>
File: syncthing.png (45.1 KB)
45.1 KB
45.1 KB PNG
>>108614234
mailcow

>>108614611
i run syncthing as a service on my windows machine and linux machine, i use an addon to manage it through a web interface on both instances

The hidden folder is my website's folder. I edit/save my html/php/js files locally and syncthing auto syncs it to my webserver so I don't have to fuck with sftp/ssh for simple uploads

Also I have my data folder set to pull only instead of push/pull. This way if something happens to my server, the files will remain on my pc. There's also other settings to prevent mass data loss etc.

Really neat service
>>
How many of you bother with a secure vault on your server like Vera or Cryptomator? Is it even worth it?

Reply to Thread #108610550


Supported: JPG, PNG, GIF, WebP, WebM, MP4, MP3 (max 4MB)