Mama told me not to come.

She said, that ain’t the way to have fun.

  • 12 Posts
  • 980 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle
  • Never point your DNS at two different IP addresses like this. It will only cause you pain and unexpected behaviour.

    Why?

    I have a similar setup, but to add to the problem, I’m also behind CGNAT. Here’s my setup:

    • LAN - 192.168… addresses
    • WAN - 10… address from ISP
    • VPS - public address

    To access my LAN from outside, I have a WireGuard tunnel to my VPS.

    The address my DNS resolves to is absolutely unrelated to any addresses my router understands. So to prevent traffic to my locally hosted resources from leaving my LAN, I need my DNS to resolve to local addresses. So I configured static DNS entries on my router to point to local addresses, and I have DHCP provide my router as the primary DNS source and something else as a backup.

    This works really well, and TLS works as expected both on my LAN and from outside my LAN. The issue OP is seeing is probably with a non-configured device somewhere that’s not querying the local DNS server.




  • I think it’s a chicken and egg problem. A FOSS Roku-replacement needs apps to make get popular, and manufacturers won’t port their apps until it’s popular. Basically, manufacturers need someone with a big marketing budget to help them feel comfortable investing in a platform, but that’s not going to happen with a nice FOSS platform.

    Maybe if we collectively raise like $100M or something, we could put together a big enough marketing budget to convince some of the bigger names (Netflix, HBO, etc) to take the risk, and the rest will follow if it’s popular enough. Maybe.




  • Check out the POSIX driver in OCIS/OpenCloud. It should keep the responsiveness of Seafile, while having a sane disk format.

    Or you can try out the Seafile FUSE layer.

    I’m in a similar boat, and I’ve been testing out Seafile and ownCloud OCIS, and I think I prefer OCIS. I’ll probably switch to OpenCloud though, since it seems a lot of the OCIS devs went there due to issues w/ management.

    Some things I didn’t like about Seafile:

    • complicated to set up - I wanted to throw it in a container, and that made it a lot more complex
    • weird codebase - a lot of it’s in C, and some is in Go - not sure if they’re switching to Go eventually, or if it’s a one-off thing
    • they only support MariaDB/MySQL, and I really want to avoid that - OCIS lets me just use the filesystem, which is really nice

    But hey, if it works, it works, so don’t mess w/ it.




  • Here’s my opinion:

    • get 1G WAN - it’s a huge upgrade, and you probably won’t notice going much faster unless you’re downloading/uploading a lot of stuff over the internet; it’s probably substantially cheaper
    • consider 2.5G LAN, if it’s not much more expensive than 1G - fast transfers over your LAN are much more likely to be noticed than transfers over the internet
    • put in CAT 6 cables at least, since that’s capable of 10G in case you decide you want it; it’s not much more expensive than 5E (1G capable), and then you won’t need to redo it later; or better yet, run fiber everywhere, though that’s more of a pain

    Then upgrade anything that’s <1G on your LAN, and leave the rest as-is until you actually need it. Chances are, you won’t, and it’s not worth spending the money. Prices for 2.5G and 10G (and higher) will eventually come down, so put it off until you actually need it and you’ll probably save money in the long run.

    In terms of what It takes, I think others gave good insight. Here’s my basic summary:

    • expensive router and switch - copper can do 8G, but you’d probably want fiber if there’s a chance your ISP will offer upgrades
    • start converting to SFP+, since that’s likely what you’ll want when upgrading things in the long run
    • some kind of mesh WiFi network - higher bitrates tend to be at higher frequencies, which have poor penetration; starting out w/ a mesh means it’ll be easier to swap out APs as you increase bitrates/solve signal issues in various rooms
    • run lots of cable - the best mesh is one that’s backed by cable

    It’s going to be expensive supporting anything over 2.5G in an entire network. Honestly, 1G is probably fine, and you can upgrade things more incrementally as you decide to improve speeds between endpoints (big ones are anything that handles high bitrate video).








  • Makes sense.

    I’m more interested in cutting off-site backup costs, so my NAS has RAID mirror to reduce chance of total failure, and offsite backup only stores important data. I don’t even backup the bulk of it (ripped movies and whatnot), just the important data.

    Restore from backup looks like this for my NAS:

    1. Install OS + podman
    2. Restore data from backup
    3. Build and deploy containers from config

    Personal devices are similar, but installing packages is manual (perhaps I’ll backup my explicitly stored package list or something to speed it up a little). Setup takes longer than your method, but I think it’s worth the reduced storage costs since I’ve never actually needed to do it and a few hours of downtime is totally fine for me.


  • Your options are only as limited as your imagination and complexity of your requirements.

    If you’re only using it on your network, just use HTTP with mdns (or have static routes from your router or something, but you said you don’t want that) so you don’t have to remember IP addresses. If you want TLS, you can borrow someone else’s domain with a service like FreeDNS.afraid.org (5 free subdomains). Or if you control the devices completely, you can make a root CA and add that to each device’s trusted CA list, and then sign your own certs and eliminate MITM attacks.

    You have options, and most are overkill. The simplest, secure solution is HTTP on your local network or over a VPN you trust (if you have a publicly accessible IP, just host your own WireGuard server on/via your router).



  • What do you mean by “separately be able to clear completed tasks”?

    I just mean keep the list of completed tasks until I manually push clear, just like Google Keep does (cross them out), and only clear the completed tasks when I push a button.

    Basically, I sometimes mark tasks done on accident, and sometimes I’ll carry the extra tasks on to the next trip.

    Basically it’s the same things as text notes, just with a bit more formatting options.

    It has a lot more formatting options:

    • positionable images, w/ text flow options
    • drawings
    • tables and charts
    • print settings, like margins, header/footer, etc

    You could get something pretty useful by just making a collaborative Markdown editor, but then it’s not really a Docs replacement, but more of an Etherpad replacement.

    That’s fine, I guess I’m more concerned about scope creep ultimately killing the project.

    there must always be a protocol behind it

    Sure. I guess my point is that Matrix is targeting text, audio, and video chat with hundreds if not thousands of simultaneous users in one room, all with E2EE enabled.

    A Google Keep replacement doesn’t even need to be real time collaborative, and it certainly doesn’t need to support hundreds of simultaneous users on a given document. It’s like using a chainsaw to trim a bush, it’s way overkill, and there’s a decent chance of changes to the protocol breaking stuff for you since you don’t need most of the features.

    The backend for this just needs to notify other clients of a change, real time isn’t necessary or even particularly helpful.

    And you’d still need an application server to handle the storage and retrieval of the data, no? So all Matrix is buying you is synchronization, which is just a simple pub/sub.

    What’s the difference between chat and data?

    You don’t really need a list of changes for a shared TODO app. The data is going to be small and going back in time isn’t that useful.

    Maybe it makes sense for something with revision history, like a DIY git. But TODO lists are ephemeral, and I really don’t care about them after I’m done with my shopping trip.

    the user X is currently typing

    Seems like overkill to me.

    Maybe it makes sense for something more fancy like an Etherpad or Confluence replacement, but not for a shopping list.

    Build it however you like and prove me wrong, I’ll check it out if it solves my problem.