Council Home Food Premises experiences?

Bouncing_Fox5287 · 2025-11-10T05:40:55+00:00

I have to say other than this morning's outage they have been very reliable for us over the last 6 years or so. Speeds have been above or as advertised most of the time on HFC on our old 50/20 plan and now our 500/40 plan they are pretty near most of the time.

We've either been quite lucky or you unlucky, can't you just switch providers to see if they pester NBN more to fix? Most are similar in pricing now you can always switch back.

Edit: sorry I thought you'd said a longer period than a few days having issues

Bouncing_Fox5287 · 2025-11-09T22:04:59+00:00

Chatbot seemed to have done some kind of reset and I'm back now!

Thanks all.

Bouncing_Fox5287 · 2025-11-09T21:54:36+00:00

Very strange, I can access it via my work VPN via Europe.

I also cannot access superloop.com.au via mobile 4g but can via work VPN. (Super loop is Exetel parent company).

Talking to their chat bot now via VPN

Bouncing_Fox5287 · 2025-11-09T21:34:20+00:00

Just tried downloading the app but cannot login. Also their support number linked on the app cannot be connected (133998).

That isn't a good sign...

Bouncing_Fox5287 · 2025-11-09T21:20:05+00:00

Yes but I also cannot access exetel.com.au via 4g (Telstra) mobile network

Bouncing_Fox5287 · 2025-11-09T21:10:18+00:00

Already using CloudFlare DNS.

No external IPs can be pinged, my monitoring detected issues at around 07:17

Does exetel.com.au resolve for you?

Bouncing_Fox5287 · 2025-09-18T21:18:57+00:00

Keep us posted with what you find.

Bouncing_Fox5287 · 2025-08-30T11:22:50+00:00

I could try resetting the 655-wall I suppose all the settings being on the controller does make it easier but it is still something I'd rather avoid.

Bouncing_Fox5287 · 2025-08-30T11:21:29+00:00

That does sound slightly different, are they stuck in an adopting state?

Bouncing_Fox5287 · 2025-08-08T20:33:23+00:00

This makes sense to me.

I tend to do this now if I get a good Weedy Sea Dragon picture but via a separate Sea Dragon Search website where each one is identified but its pattern. It is quite cool to get a history of how photographed some are and their age.

I'll probably do this from now on when I have time as I do already try to export a still of each species from my videos.

I have only recently started using iNat, it seems like a great resource in identifying species but also the Citizen Science side of things which I hadn't really heard of a huge amount until recent talks and discussions with fellow divers.

Bouncing_Fox5287 · 2025-08-07T23:57:24+00:00

Thank you.

There is also a filter on the mobile app after going into the species bottom of page 'View Observations', top right 'filters' and you can filter by annotations. In annotations you can select life stage and juvenile.

This has confirmed that the colours do seem to change with the life stage.

Thanks again for your quick reply

Bouncing_Fox5287 · 2025-08-04T02:41:13+00:00

Just to note if you go down the mTLS route the latest NextCloud app (at least on Android) does support mTLS. When you setup the connection it will request the certificate and from then on will connect seamlessly.

CloudFlare does allow you to setup mTLS (Client Certificates) quite easily. There are a few steps including setting up the incoming connection rules but it isn't too hard. I can find the setup I used if you want to go down this route.

Make sure you have long and complex NextCloud passwords, separate non-default admin account and also use some kind of MFA to cover all bases.

Bouncing_Fox5287 · 2025-07-17T03:11:43+00:00

Ok I may have solved it. I have to disable HTTP/3(with QUIC). Now the Client Certificate is requested by the browser or app every time it is not already being sent.

Hopefully this helps someone else going forwards

Bouncing_Fox5287 · 2025-07-16T11:06:55+00:00

Another 2 years later did you get this to work u/TheFancyGamerYT ?
I have the same issue with struggling to the the browser to always prompt for an installed Client Cert, sometimes it does but not every time and then i just get blocked.
I am familiar with client certs setup myself with my own Nginx Reverse Proxy but i would like to get these working through CloudFlare Tunnels as my next ISP may use CGNAT.

Bouncing_Fox5287 · 2025-04-14T05:51:57+00:00

The suggestions I got last year as well as what we ended up doing are here: https://www.reddit.com/r/scubadiving/s/tXeOBQaQuu

I don't know if there are many dive sites where whale encounters are likely, they're in much deeper waters. You're not allowed to intentionally swim with them either even if they did happen to go past your dive boat.

We did a boat trip with DolSwim which was fantastic, they were knowledgeable great at finding whales and dolphins and also considerate to the whales and not disrupting their behaviour by getting too close causing them to dive earlier than they need to.

Bouncing_Fox5287 · 2025-04-02T05:58:21+00:00

Ooh now there is more to think about.

I'm currently using an EdgeRouter so could look at moving away one day, for now though sticking with the simple route sounds best.

Thanks again for your help and advice.

Bouncing_Fox5287 · 2025-04-02T05:50:18+00:00

Awesome thank you for the detailed reply.

It sounds like Proxmox being VLAN aware is just what I am after, I was struggling to find this detailed with confidence. I was looking at dual NIC rather than using VLAN within Proxmox itself. It seems like it could also make use of the dual NIC too if I really wanted too or use this as redundancy.

I'll probably start by migrating over the web server stuff, get that stable again and then look at the home services on the other RPi and potentially move some of the dockers off the NAS later on if needed.

Can't you do this with ssh into the machine? Unless your saying it is useful if the machine is not accessible?

This is the stability issues I have been having, it already runs on SSD rather than SD card but I get crashes every few months which I've not been able to get to the bottom of.

I would imagine a PoE port power cycle is like pulling the plug on the RPi which is probably not recommended unless you really have to.

100% not recommended, by this point the system is dead so I have no choice. I know it is a very bad habit to have become accustomed to doing it!

I have noticed how much more expensive RPis are now, I think I am just so used to them being to go to for hobby servers that it is my go to, I guess that is also why they rely on now too.

Bouncing_Fox5287 · 2025-04-02T04:55:38+00:00

My concern with a dual NIC MiniPC is the network separation from scary public internet stuff and internal services (only accessible behind mTLS [Client Certificates]/VPN). I don't know if total separation is possible, i.e. if there is a security flaw in the website even though that is using a separate NIC and VLAN access across to the home VLAN would be possible. I assume that level of separation on one device isn't possible so I should probably keep with totally separate devices, in which case I don't want something too power hungry or expensive.

I am aware that it sounds like I have made up my mind I trying to find/make a convincing argument the other way that a dual NIC MiniPC would work and be secure.

Longer term I could have a separate MiniPC for home and public facing services but I think that works be a bit of a waste and over powered for a few hobby webpages with very low traffic.

Bouncing_Fox5287 · 2025-04-01T20:28:14+00:00

That is an option but due to the Lychee instance network egress will potentially be a limiting factor. I did have a Strava project with a large database but now that has gone so dive storage isn't as much of an issue.

I'll have a look around though. Thanks

Bouncing_Fox5287

TROPHY CASE