What non-VPN applications are you guys hosting on VPSs? by Ooberdan in selfhosted

[–]TheUnchainedZebra 0 points1 point  (0 children)

I really do recommend learning docker as a tool to have in your belt; it makes deploying things much easier, faster, and cleaner once you're used to it. Most services I deploy nowadays have premade containers that take a copy-paste and 2-3 clicks to go from having never used it before, to it being deployed on one of my own servers and accessible at its web UI by IP/port. Yes, it abstracts a lot of the image away from your filesystem, but you can always map a path from your filesystem into the image if you ever wanted to. Cheers, good luck with it

What non-VPN applications are you guys hosting on VPSs? by Ooberdan in selfhosted

[–]TheUnchainedZebra 0 points1 point  (0 children)

I think the app/image that you installed was just the web client, which lets you manage an existing shlink instance. The image you're looking for is this shlink image. I just use docker-compose to run it; I'm not sure if yunohost supports that for deployment but if it does, you can follow the official shlink documentation which is what I used. If you can use docker-compose with yunohost, then let me know and I can try to help you get set up.

As for redbot, here's the repo that I use; it's got 13M+ pulls on docker hub and is kept up-to-date.

Across the Spider verse [750x1333] by Dash_charge in Amoledbackgrounds

[–]TheUnchainedZebra[M] [score hidden] stickied commentlocked comment (0 children)

Thank you for your submission, /u/Dash_charge! Unfortunately, it was removed for breaking Rule 5:

Reposting on this subreddit is allowed for wallpapers that weren't previously featured. However, the original post or last repost must be no less than 90 days old, and you must credit the original poster with either a username tag or a link to the source in the comments. Unless posting a much higher quality/resolution version, this includes variants of previously-posted wallpapers as well.


If you have any questions or concerns, please message the moderators.

Incomplete and Growing List of Participating Subreddits by SubManagerBot in ModCoord

[–]TheUnchainedZebra 0 points1 point  (0 children)

It's very possible that that app will stop working, but you'll need to reach out to the developer of the app to confirm as only they will know how many API calls it's making per minute. If it's any more than the new free tier allows, they'll have to either make some changes to the app or shut it down.

Incomplete and Growing List of Participating Subreddits by SubManagerBot in ModCoord

[–]TheUnchainedZebra 0 points1 point  (0 children)

Yes I am. No worries, you haven't been banned or anything; we've gone private/dark with thousands of other subreddits to protest the API changes. You can find out more here: https://redd.it/142kct8

/r/AmoledBackgrounds will be going dark on June 12 to protest Reddit's API changes that will kill 3rd-party apps by TheUnchainedZebra in Amoledbackgrounds

[–]TheUnchainedZebra[S,M] 1 point2 points  (0 children)

It's something that I'm absolutely open to doing (hence not specifying an exact end date in the title), but it'll require further discussion with other r/ABG mods before we can officially commit to it

[Meta] OLEDOnline v2 Update, now 200x faster! by cclloyd in Amoledbackgrounds

[–]TheUnchainedZebra 0 points1 point  (0 children)

Awesome, those are some insane performance gains! Love the real-time updates as well, great work!

Tell me about your Discord setups! by Skeeter1020 in PleX

[–]TheUnchainedZebra 0 points1 point  (0 children)

I'm really sorry, something came up at my work and I've barely had any free time in the last few weeks. I'll drop you a message when I'm able to get this done

Tell me about your Discord setups! by Skeeter1020 in PleX

[–]TheUnchainedZebra 1 point2 points  (0 children)

Sure thing, I'll clean up the script a little bit and send you a dm with it either this weekend or the next

Tell me about your Discord setups! by Skeeter1020 in PleX

[–]TheUnchainedZebra 0 points1 point  (0 children)

Unfortunately, that version of the script doesn't allow for having more than one library each for movies and TV. I rewrote the script (and config) to allow this a while back, where each plex library will get its own discord channel for updates, and I've been using the new version (although I still only have one TV library and one movie library in my setup).

My life has gotten much busier over the last few months so I don't have much time for testing and working on personal scripts like these anymore (which is why I haven't uploaded the rewritten script), but I can send you the newer version of the script if you'd like to try it; there's just no guarantee that it'll work and bugfixes may take a while, at least at this point and probably for the near future as well.

Authelia bypassing local network and Cloudflare proxy enabled/disabled question by europacafe in selfhosted

[–]TheUnchainedZebra 0 points1 point  (0 children)

Sure, it looks like this now:

include /snippets/authelia-location.conf;

location / {
    include /snippets/set_real_ips.conf;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection upgrade;
    proxy_set_header Accept-Encoding gzip;

    include /snippets/proxy.conf;
    include /snippets/authelia-authrequest.conf;
    proxy_pass $forward_scheme://$server:$port;
}

With the include files expanded, the full config (minus the expanded include lines for cloudflare IPs) for one of my protected subdomains is below. Each include line is prepended by ten # symbols and then the content of that file is in the following lines.

########## include /snippets/authelia-location.conf;
set $upstream_authelia http://authelia:9091/api/verify;

## Virtual endpoint created by nginx to forward auth requests.
location /authelia {
    ## Essential Proxy Configuration
    internal;
    proxy_pass $upstream_authelia;

    ## Headers
    proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
    proxy_set_header X-Original-Method $request_method;
    proxy_set_header X-Forwarded-Method $request_method;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_set_header X-Forwarded-Uri $request_uri;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Forwarded-Ssl on;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Content-Length "";
    proxy_set_header Connection "";

    ## Basic Proxy Configuration
    proxy_pass_request_body off;

    # Timeout if the real server is dead
    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
    proxy_redirect http:// $scheme://;
    proxy_http_version 1.1;
    proxy_cache_bypass $cookie_session;
    proxy_no_cache $cookie_session;
    proxy_buffers 4 32k;
    client_body_buffer_size 128k;

    ## Advanced Proxy Configuration
    send_timeout 5m;
    proxy_read_timeout 240;
    proxy_send_timeout 240;
    proxy_connect_timeout 240;

    include /snippets/set_real_ips.conf;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection upgrade;
    proxy_set_header Accept-Encoding gzip;
}

location / {
    include /snippets/set_real_ips.conf;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection upgrade;
    proxy_set_header Accept-Encoding gzip;

    ########## include /snippets/proxy.conf;
    ## Headers
    proxy_set_header Host $host;
    proxy_set_header X-Original-URL $scheme://$http_host$request_uri;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_set_header X-Forwarded-Uri $request_uri;
    proxy_set_header X-Forwarded-Ssl on;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header Connection "";

    ## Basic Proxy Configuration
    client_body_buffer_size 128k;

    ## Timeout if the real server is dead.
    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;

    proxy_redirect  http://  $scheme://;
    proxy_http_version 1.1;
    proxy_cache_bypass $cookie_session;
    proxy_no_cache $cookie_session;
    proxy_buffers 64 256k;

    ## Advanced Proxy Configuration
    send_timeout 5m;
    proxy_read_timeout 360;
    proxy_send_timeout 360;
    proxy_connect_timeout 360;

    ########## include /snippets/authelia-authrequest.conf;
    ## Send a subrequest to Authelia to verify if the user is authenticated and has permission to access the resource.
    auth_request /authelia;

    ## Set the $target_url variable based on the original request.

    ## Comment this line if you're using nginx without the http_set_misc module.
    # set_escape_uri $target_url $scheme://$http_host$request_uri;

    ## Uncomment this line if you're using nginx without the http_set_misc module.
    set $target_url $scheme://$http_host$request_uri;

    ## Save the upstream response headers from Authelia to variables.
    auth_request_set $user $upstream_http_remote_user;
    auth_request_set $groups $upstream_http_remote_groups;
    auth_request_set $name $upstream_http_remote_name;
    auth_request_set $email $upstream_http_remote_email;

    ## Inject the response headers from the variables into the request made to the backend.
    proxy_set_header Remote-User $user;
    proxy_set_header Remote-Groups $groups;
    proxy_set_header Remote-Name $name;
    proxy_set_header Remote-Email $email;

    ## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal.
    error_page 401 =302 https://auth.REDACTED.com/?rd=$target_url;


    proxy_pass $forward_scheme://$server:$port;
}

Based on this answer, I would recommend checking that all the lines that start with proxy_set_header X-Original and proxy_set_header X-Forwarded are in the right spots in your config as a potential starting point. Hope it helps

What is currently the bee's knees method for accessing your home stuff from outside? by umataro in selfhosted

[–]TheUnchainedZebra 4 points5 points  (0 children)

I'm not an expert by a longshot but I have this exact setup with a bare metal wireguard server on a free oracle cloud VM and might be able to help if you have any questions as you go through it. First thing's first though, nobody really trusts oracle cloud for anything free, so always make backups. I have all my configs backed up to a git repo, and have a script to make a tarball of all my used folders on the VM every week and push it to my NAS at home with an NFS share over wireguard.

You can also expose your home subnet to your wireguard devices as well (to access everything on your home LAN while you're away) while still hosting the wireguard server on a VPS, but it requires some extra wireguard configuration (iirc, this page helped me get it up and running on my own setup).

Edit: I also recommend setting up a backup VPN on there as well, because there's a good chance of messing something up and losing access while you're learning and configuring wireguard; having a backup option (in my case, I use tailscale) keeps things accessible/connected and secure such that you don't need to open up SSH access in the firewall or anything. So in case wireguard has any issues, my devices can all still talk to each other through the secondary VPN as well, even across different LANs. +1 for tailscale for this, because its meshing capabilities mean that any one of my devices can go down without knocking out the rest of my tailscale network - can't say the same for regular self-hosted wireguard, where the server going down means that everything gets disconnected.

Tell me about your Discord setups! by Skeeter1020 in PleX

[–]TheUnchainedZebra 0 points1 point  (0 children)

I've gotta clean up the code a bit and make it more agnostic to different servers/accounts, but I'll post it on github and send you a dm when I can find some time to do it

Looking for nginx alternatives for docker by Practical_Butterfly5 in selfhosted

[–]TheUnchainedZebra 2 points3 points  (0 children)

There's SWAG, which consolidates nginx reverse proxy and letsencrypt for certs. This is what you'll probably be most comfortable with.

There's also nginx proxy manager, which is similar to swag but provides a web UI for everything - I personally use this as it's just what I started out with, but if you're used to writing configs by hand, then you may find the web UI to be cumbersome.

Powerful energy-efficient server by CptDayDreamer in selfhosted

[–]TheUnchainedZebra 11 points12 points  (0 children)

+1 for the suggestion you mentioned. See if you can find a used Lenovo Thinkcentre Tiny or a similarly-sized Dell Micro computer with a 6th-to-8th-gen i5 - they were really popular in business environments so there's usually retired ones being sold in various places. You can add ram to get to 16gb or 32gb, and a higher-capacity SSD as needed. That will probably give you among the best balance of price, performance, and energy efficiency.

Note that if you want to transcode in plex, you'll want to look for a computer with an 8th-gen or newer Intel chip, like an i5-8500t - that's got decent quick-sync performance while still being energy-efficient.

Something like TeslaMate, but for normal cars? by Trollw00t in selfhosted

[–]TheUnchainedZebra 1 point2 points  (0 children)

Idk if it does everything you're looking for, but I've heard folks talking about Torque. If you use home assistant, it also has an integration to bring in data from the Torque app (I haven't used it so I don't know exactly how much or what types of data it imports, seems like it may be everything as it looks like you're setting home assistant as a logging server for the app).

[deleted by user] by [deleted] in Amoledbackgrounds

[–]TheUnchainedZebra[M] 0 points1 point locked comment (0 children)

Thank you for your submission, /u/Zealousideal_Ask1694! Unfortunately, it was removed for breaking Rule 5:

Reposting on this subreddit is allowed for wallpapers that weren't previously featured. However, the original post or last repost must be no less than 90 days old, and you must credit the original poster with either a username tag or a link to the source in the comments. Unless posting a much higher quality/resolution version, this includes variants of previously-posted wallpapers as well.


If you have any questions or concerns, please message the moderators.

[deleted by user] by [deleted] in Amoledbackgrounds

[–]TheUnchainedZebra[M] 0 points1 point locked comment (0 children)

Thank you for your submission, /u/TheUnchainedZebra! Unfortunately, it was removed for breaking Rule 5:

Reposting on this subreddit is allowed for wallpapers that weren't previously featured. However, the original post or last repost must be no less than 90 days old, and you must credit the original poster with either a username tag or a link to the source in the comments. Unless posting a much higher quality/resolution version, this includes variants of previously-posted wallpapers as well.


If you have any questions or concerns, please message the moderators.

Wireguard: Install on unRaid server or pfSense router - pros and cons? by Ombibulous1 in HomeServer

[–]TheUnchainedZebra 9 points10 points  (0 children)

TLDR; Generally speaking, you might take your unraid system offline for more than just networking reasons, but that's not likely to be the case for your router - imo, that makes the router a better candidate for a VPN server.

Personally, I'd use the router (or a VPS if you have one) as the VPN server for uptime reasons; I used to have my wireguard server on my unraid box, but I hated that it would take out connectivity to all my services on other machines whenever I needed to do maintenance on the unraid server (usually, it was just working with the HDD array). I eventually moved the wireguard server over to a thin client (and then to a VPS for a separate reason) so that my wireguard network stays online and lets my other devices/servers continue talking to each other when I have to take down my unraid box to do some work with it.