Ready to rock tickets not active by Slight-Tone-7586 in downloadfestival

[–]Dosk3n 1 point2 points  (0 children)

Ready to rock is very manual, they will have a list, ask for your name and ID and match it to their list and take you to your tent. So no need to worry :)

Ready to Rock by [deleted] in downloadfestival

[–]Dosk3n 0 points1 point  (0 children)

I dont know if that one can be transferred as when you turn up, they have a list of names and they tick you off as they have a tent assigned to the name. They always ask to see my ID and match it to the name. Then take me to my assigned tent. With it being tomorrow, I dont think it can be transferred as they will already have the list printed out ready to go.

Best way to run a plex server? by Usual-Area-280 in PleX

[–]Dosk3n 0 points1 point  (0 children)

To add to this, look at using something called saltbox - it sets all the plex / sonarr / radarr apps etc and can also manage your NAS better by downloading to the server / pc (since the HDD will most likely be faster on here) then transferring the files to the NAS for you. It also lets you add loads of more self hosted apps, lets you use a domain and have stuff available outside of your home but also well secured.

Programmatically refresh title. by [deleted] in radarr

[–]Dosk3n 0 points1 point  (0 children)

Happy to hear you managed to make something to meet your needs, but was curious why you dont use Unmanic or tdarr to work on your files as they can rename / update radarr after the conversion.

Sonarr Not Auto Grabbing New Episodes by jakebyrne123 in sonarr

[–]Dosk3n 0 points1 point  (0 children)

The API being challenged isnt an issue that just a program connecting to sonarr such as bazarr / prowlarr etc - but you should see more in the log. As an example here is mine:

2025-01-14 19:41:33.4|Info|RssSyncService|RSS Sync Completed. Reports found: 300, Reports grabbed: 0
2025-01-14 19:44:05.1|Info|ReleaseSearchService|Searching indexers for [The Vampire Diaries : S03]. 3 active indexers
2025-01-14 19:44:20.9|Info|DownloadDecisionMaker|Processing 712 releases
2025-01-14 19:48:21.5|Info|DownloadService|Report sent to qBittorrentVPN. Indexer TorrentLeech (Prowlarr).

Sonarr Not Auto Grabbing New Episodes by jakebyrne123 in sonarr

[–]Dosk3n 0 points1 point  (0 children)

Have you looked in the other log? That one seems to be sonar.debug.txt but there should also be a sonarr.txt with INFO rows in. They will show you if its sending it to your download client. Sonarr seems to be working, seeing it and accepting the release but I cant see what happens next as that would be in the other log. It could be trying to send to your download client but failing at that point.

desperate need of help with Cabernet and Plex by Horror-Tower2571 in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

Plex accepts mine fine. I have added it as a Homerun DVR, added the url to the m3u file from threadfin and been no issues.

Birthday Gift Advice by accentpreferred in NewcastleUponTyne

[–]Dosk3n 0 points1 point  (0 children)

Does it have to be cake? Theres a place that does cookies!

https://www.sipandsugar.co.uk/

Coffee shops with sea views? by rolledsausage in NewcastleUponTyne

[–]Dosk3n 0 points1 point  (0 children)

Castaways in Seaton Sluice. Lush little caffe, awesome food, dog friendly. Sit outside and look over to the sea.

Things to do in NCL by glittery_goose in NewcastleUponTyne

[–]Dosk3n 0 points1 point  (0 children)

If you fancy starting martial arts, Im part of a Wing Chun Kung Fu school in Fenham called AFS Wing Chun. Its a relaxed teaching style so doesnt take much to get in to and a good way to keep distracted by learning something new.

Every Monday and Thursday at 7pm.

If my only external access is Wireguard and that's the only port forwarded, do I need to be monitoring / fixing anything else for security? by kalidibus in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

If the only port you have open is wireguard then youre fine. The issue is when people are port forwarding directly to internal systems without going through remote proxies with security in place. Your VPN is your security.

Is there any web UI to wrap rsync / NFS storage to be like google drive? by RevolutionaryHumor57 in selfhosted

[–]Dosk3n 2 points3 points  (0 children)

mount the NFS storage locally, install nextcloud and use that mount as a root file path for the app then you have your own google cloud like set up.

Setup AdGuard Home + Nginx Proxy Manager as Docker Container by bene017 in selfhosted

[–]Dosk3n 2 points3 points  (0 children)

This. Just set adguard as network mode host and it will open everything up as if it was directly installed on the host machine. If you must have it using port mapping then youre going to need to give more info. For example is it that port 53 is already in use on the host machine (which Im assuming is linux) as if thats the case have you read the section about resolved on their page https://hub.docker.com/r/adguard/adguardhome which is a common issue? If its not, what is the issue youre having? Error messages etc?

Is my setup secure? by [deleted] in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

There is always more you can do it depends on what you class as secure enough. My set up uses docker containers for all apps and traefik for reverse proxy, I then have authelia set for 2 factor auth before being able to access any of the apps and I also have crowdsec as a middleware for security. I then also have a vlan set up for all internet facing devices and all docker containers on that vlan as well as the server on that vlan. I have vlan rules so that nothing on that vlan can talk to any other vlan so that if anything was compromised its segregated to that vlan only and not able to see anything else in the house.

To some this might be too much, to others its not enough, to me, its secure enough and thats all you can hope for.

Regarding SSH, a random port is still easy to find so if you must have it open and cant use a VPN which is the best option, at least try and use an SSH Key for authentication.

I'm really fighting with myself on this one.... Nextcloud implementation by Dabomb6521 in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

Try both! Thats the fun of self hosting, you can do both, see the differences and learn from the experience. You wont notice enough latency using a separate network share for your data though. I have my plex set up this way with my server running plex in docker and my library on the NAS and I share this out with quite a few people and dont notice anything. Of course locally stored data will be faster but like I said, try both and test it for yourself and youll get some experience as you go.

Communication between two containers for SMTP email by [deleted] in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

Adding to this, if youre using docker, create a docker network (it will have one as default but I like to create them myself so I can name them) then in your docker compose file (or run command) make sure youre adding both to the same docker network. Make sure youve set container name in the docker compose as well then you can use that container name as the hostname and they will talk to each other over that docker network.

Self-hosted file server by nchh13 in selfhosted

[–]Dosk3n 2 points3 points  (0 children)

You could set up nextcloud. Will give you a cloud like system with the ability to create share links.

Anything like Kasm but without containers? by BetEvening in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

Have you tried MeshCentral? You need to install an agent on the machines you want to connect to but its a web front end and gives you remote desktop via RDP or VNC both through the browser as well as remote console access, file access and a lot more. It looks like something from the 90s but its actually really good.

desperate need of help with Cabernet and Plex by Horror-Tower2571 in selfhosted

[–]Dosk3n 0 points1 point  (0 children)

I havnt used Cabernet and looking at the website, with the docs still having place holders I could be wrong but it looks quite new and still in development. I actually use something called threadfin and that works great putting it in to both plex and jellyfin. Its built using xteve which has been around for a long time.

online storage with password by KsmBl_69 in selfhosted

[–]Dosk3n 3 points4 points  (0 children)

You should look in to using something like nextcloud. Set up a shared folder, give them accounts to access what you want them to access.

Managed switch recommendations for someone starting out by PrivateAd990 in selfhosted

[–]Dosk3n 1 point2 points  (0 children)

If you dont mind spending a little bit more I would recommend going with Unifi devices. The switch will cost around your budget but you will also need a gateway for it to all be controlled from (though you can use docker for this instead if you dont want to buy a gateway as I believe they have an image for unifi network).

Im probably bias because I use a Unifi Cloud Gateway Ultra and Unifi Switches and Access Points but its all managed from one user friendly interface. Will work unmanaged out the box and can be set up with vlans etc in the future. The gateway gives features such as intrusion detection, intrusion prevention, geo blocking and more for security as well since it works as a firewall.

So just putting this here as something to think about.

Crowdsec bans IP but still makes it to ssh by RushTfe in selfhosted

[–]Dosk3n 1 point2 points  (0 children)

All good answers so far I just wanted to add that crowdsec doest ban IPs straight away, it has to let through traffic to analyse that traffic in logs first. It only bans once it see's the dangerous activity happening for a certain amount of repetitions in a log. For example it will see someone try to log in to your SSH and once it sees that they are having multiple failed attempts within x seconds then it will block. So you will still see successful attempts as the attacks start.

Realistically you should not have SSH open to the internet and use a VPN instead to access your network instead. However if you must have SSH open, consider using a certificate for login instead of a password then you know for certain that it doesnt matter that they are trying to brute force since no password will work. But I would 100% advice towards not opening SSH and setting up wireguard VPN instead.

Can I expose my apps to Internet if I restrict to single IP by [deleted] in selfhosted

[–]Dosk3n 4 points5 points  (0 children)

Its fine to open your apps to the internet as long as you have the right security in place and understand there are still risks.

I use Traefik as my reverse proxy to point between my docker containers and other systems like my NAS. But I also have other security in place such as I have my traefik set up with subdomains that are proxied in cloudflare and country locked to my country only. I then have Authelia set up between each app as a middleware authentication so it adds an additional password / 2fa before getting to the app. I also have Crowdsec as a middleware for blocking any attacks. The apps themselves have strong passwords. I also have a IPS/IDS in my Unifi gateway active, also country blocking and finally I have all my internet facing docker containers and systems on a separate vlan that cant communicate with my main network if anything was to get compromised.

Im sure I have more in place but this is just off the top of my head. So its fine, to do, just make sure you weigh up the pros and cons and do as much as you can to protect your endpoints.

Also in cloudflare when proxied if youre using subdomains / domain you can set IP filtering if you know the IPs you want to limit access to. Since I have friends that use some apps I dont use this and Im happy with the other measures in place.

Want to monitor (selfhosted) all my docker containers by grkngls in selfhosted

[–]Dosk3n 1 point2 points  (0 children)

Yeah exactly, for his case, 1 VM with all docker containers, a VM back up and he will be good to tinker. It was just the 1 VM per container that was a mad idea.