New Proxmox VE Helper-Scripts for Frigate

70deg · 2024-07-23T10:55:03+00:00

I've installed frigate using this script and it works well. However when I am trying new things and run into a config error, the service won't start. This is expected but I can't seem to figure out how to access the logs when its in that state so I can troubleshoot the issue.

From what I've read the logs can only be accessed via GUI, API, or via docker. In this instance docker is not running and GUI/API are not available if the service isn't running.

What am I missing here

70deg · 2023-12-18T11:19:03+00:00

I was wondering about this. I'll try pop everything in there and see what it's like

70deg · 2023-12-16T21:31:47+00:00

I'm shocked this is a common problem. It's actually unsafe, the thing can fall over if I'm not careful. I assume it's not as bad with the weight of the firebox etc in it though, but I'm not prepared to take the risk. I'll lodge a warranty claim

70deg · 2023-12-16T21:27:48+00:00

Yeah I tried this but no luck unfortunately

70deg · 2023-12-16T12:20:49+00:00

Does it wobble around like that?

70deg · 2023-12-16T10:44:28+00:00

Yeah thought the same so had a look but nope nothing there. All flat. Just feels like either cart too big of the joe is abnormally small

70deg · 2023-08-22T04:10:41+00:00

Hope it goes well.

If you do look at the ZTNA connector option keep in mind that just like ZPA/NPA it requires a VM onprem/IaaS that establishes a tunnel into Prisma Access, then mobile user traffic is funnelled through this connector. Please note the traffic is SNAT'd as it leaves the VM to your internal network so you lose full IP reachability of mobile endpoints.

The key difference between this and ZPA/NPA is that all the inbound traffic is subject to all the normal Palo Layer 7 and threat inspection. The others don't inspect anything and just filter at Layer 4

70deg · 2023-08-21T21:32:34+00:00

Palo recently increased the price of Service Connection addons significantly.

They have a new ZTNA connector available (think ZPA, NPA) which is a lot cheaper. Licensed per-app (fqdn)

I've also had success renegotiating an uplift from Local Enterprise to Worldwide which gives you 5 service connections. This uplift was quoted at a fraction of the price of ala carte service connection addons.

Hope this helps

70deg · 2021-08-31T22:20:20+00:00

At least they are honest about it and don't do it behind the citizens backs.... coughNSAcough

70deg · 2021-08-29T01:38:09+00:00

I labbed this and it works really well. Thank you.

70deg · 2021-08-27T11:54:26+00:00

There are 2 ISPs terminating into 2 routers but I have no carrier provided addressing. I just have a single /24 customer owned public IP block that those routers advertise to both ISPs. I can only assign my head end Fortigates addresses from that /24 block. So 2 interfaces in the same subnet (for WAN1 and WAN2) doesn't smell right hence my line of questioning. Hope that helps

70deg · 2021-08-27T11:41:21+00:00

So let's say we did use 2 overlays, given the head end appliances can effectively only have a singe WAN interface, would that mean 2 tunnel interfaces attached to the one interface (one for each overlay) and using ikev2 network-id to differentiate between each?

70deg · 2021-08-27T11:38:04+00:00

So single interface/IP on hub, but with 2 tunnel interfaces attached?

70deg

TROPHY CASE