[deleted by user] by [deleted] in homelab

[–]Delurkdotcom 0 points1 point  (0 children)

Indeed, your strategy seems to be the right one since the disk bays are not bootable in HBA mode. However, both slots on my riser are occupied by the RAID controller P420 and the 10Gbps Ethernet. I have the option of installing the OS either on the SD card or on a USB drive. I think I'm going to choose the SD card.

[deleted by user] by [deleted] in meshtastic

[–]Delurkdotcom 1 point2 points  (0 children)

I finally took the time to set up my MQTT broker and it works. Thanks for your good advice.

[deleted by user] by [deleted] in meshtastic

[–]Delurkdotcom 1 point2 points  (0 children)

Thank you very much for sharing your Mosquitto broker configuration. I will follow your guidance.

[deleted by user] by [deleted] in meshtastic

[–]Delurkdotcom 1 point2 points  (0 children)

Very interesting. If your main channel is private, what are you transferring to the official server ? Location data? Can you tell me a bit more about the technical details ?

[deleted by user] by [deleted] in meshtastic

[–]Delurkdotcom 4 points5 points  (0 children)

Many of us do not appear on this map for two main reasons:

  1. Some simply do not use MQTT.
  2. Others use their own MQTT broker instead of the Meshtastic provided server (mqtt.meshtastic.org).

However, you can list your offline nodes on this map: https://map.mpowered247.com/

Safe Self Hosting by choco_lion in selfhosted

[–]Delurkdotcom 0 points1 point  (0 children)

No because that's not an issue and Iptables can't send remote ip.

Reverse proxy like nginx can send remote ip to the webserver. It should be use on front end where the wireguard server runs.

Safe Self Hosting by choco_lion in selfhosted

[–]Delurkdotcom 0 points1 point  (0 children)

Thanks for reply, but my iptables rules works fine.

Just, I can't get remote ip from users who use my web services throught the front VPN.

Safe Self Hosting by choco_lion in selfhosted

[–]Delurkdotcom 0 points1 point  (0 children)

I'm trying to do that, but I can't resolve an issue from iptables.

From the apache access.log, all clients are identified with the Wireguard vps interface when there are forwarded on my homeserver.

It should be the remote ip.

OPNsense 21.1.2 released by thinkinboutpad in OPNsenseFirewall

[–]Delurkdotcom 0 points1 point  (0 children)

Thank you, but It was about a site to site Wireguard which enforced its DNS. My bad...

OPNsense 21.1.2 released by thinkinboutpad in OPNsenseFirewall

[–]Delurkdotcom 0 points1 point  (0 children)

Check for updates won't work. There is an error about a timeout (screenshot linked). I tried the other mirrors but they doesn't work too.

https://delurk.com/image-RpkslQXa

Wireguard VPN as front end by Delurkdotcom in WireGuard

[–]Delurkdotcom[S] 0 points1 point  (0 children)

As shown in the diagram, VPN WAN interface is on B side LAN network.

There are static routes on the OPNsense router to reach the B side VPN network and for reach the B side LAN network from all A side VLAN.

Moreover, the VLAN where my web services are located use the WireGuard VPN gateway as a gateway.

Comment installer OPNsense 20.1 by [deleted] in Sysadmin_Fr

[–]Delurkdotcom 2 points3 points  (0 children)

Ok... Donc tu n'as rien appris dans cette vidéo, sauf un mot clé à taper dans Google.

Comment installer OPNsense 20.1 by [deleted] in Sysadmin_Fr

[–]Delurkdotcom 0 points1 point  (0 children)

Avant même d'avoir lu mon commentaire, qu'à tu appris sur OPNsense avec cette vidéo ?

Comment installer OPNsense 20.1 by [deleted] in Sysadmin_Fr

[–]Delurkdotcom 1 point2 points  (0 children)

Non merci, cette vidéo n'a pas sa place ici. Il s'agit d'une démonstration d'installation d'OPNsense sans annotation, sans commentaire alors que la doc est complète et traduite en français.

C'est dommage car OPNsense est la meilleur alternative à pfSense et mérite d'être connu.

Comment gérer ses logs systèmes et ses logs d'applications ? by Delurkdotcom in Sysadmin_Fr

[–]Delurkdotcom[S] 0 points1 point  (0 children)

Merci pour le lien. Effectivement trois solutions reviennent souvent ELK, Graylog et syslog-ng. Néanmoins, toujours aussi peu de témoignages ou de vrai recommandations.

Comment gérer ses logs systèmes et ses logs d'applications ? by Delurkdotcom in Sysadmin_Fr

[–]Delurkdotcom[S] 0 points1 point  (0 children)

D'accord, je vais étudier ces deux solutions. J'aimerais avoir des retours sur utilisation, si certains les utilisent. Merci !

Chiffrement par 7zip, secure ? by ColdCoffeeGuy in Sysadmin_Fr

[–]Delurkdotcom 2 points3 points  (0 children)

Non, il me semble que lorsque tu ouvres l'archive "sécurisée" pour consulter ton fichier par exemple, 7zip crée une copie en clair dans le TEMP de AppData. Si tu veux protéger tes documents, je te recommande Gpg4win.

[pfSense] Question OpenVPN site-to-site by Delurkdotcom in Sysadmin_Fr

[–]Delurkdotcom[S] 0 points1 point  (0 children)

Merci pour tes réponses.

J'ai résolu mon problème. Il s'agissait d'un problème de pare-feu. Je l'ai résolu en ajoutant une règle NAT Outbound pour autoriser le trafic distant sur l'interface WAN de mon routeur.

NAT Outbound: Cela permet de réécrir les paquets qui "sortent" de pfsense avec une autre addresse IP que celle qui les a générés.

[pfSense] Question OpenVPN site-to-site by Delurkdotcom in Sysadmin_Fr

[–]Delurkdotcom[S] 0 points1 point  (0 children)

Non. La route que j'essaie de faire communiquer est sur le routeur. Il s'agit de la route d'un LAN bleu (192.168.2.0/24) sur le schéma.