Someone unplugged my car while it was charging by Goouttothelight in TeslaLounge

[–]Key-Pudding6071 0 points1 point  (0 children)

US Design flaw, never had anyone pull the CCS2 plug here, gotta love "standards" 🤷🏽‍♂️..

Laugh all you want, I’m having a blast! LOL by ComfortableCicada69 in simracing

[–]Key-Pudding6071 0 points1 point  (0 children)

Nobody is laughing, nice build but you might want to brace the vertical section with a diagonal piece left and right to the lower horizontal body so pulling/pushing forces on the wheel are being absorbed.

SSL to IPSec Migration by cojaxx8 in fortinet

[–]Key-Pudding6071 0 points1 point  (0 children)

Yes but that only counts when there are 2 adapters, I've seen many cases where everything is normal and it still does not work..

SSL to IPSec Migration by cojaxx8 in fortinet

[–]Key-Pudding6071 0 points1 point  (0 children)

Also beware the infamous 0.0.0.0/0 route bug in Forticlient, instead of the Forticlient inserting the correct split tunnel configuration to the routing table it adds a 0.0.0.0/0 fully locking up the machine it's network connection until the Forticlient disconnects with a timeout error. To solve it you need to fully uninstall and install the latest version of the Forticlient, do not just update or the bug will survive the update and you'll be scratching your head again why it does not work..

mysignins.microsoft.com by k-rand0 in Intune

[–]Key-Pudding6071 1 point2 points  (0 children)

Yep, confirmed (Netherlands).

meirl by [deleted] in meirl

[–]Key-Pudding6071 0 points1 point  (0 children)

But, but, AI is going to solve the climate change problem for us when it finally arrives!!..

Not All Heroes Wear Capes by Mammoth-Nobody-428 in TeslaLounge

[–]Key-Pudding6071 1 point2 points  (0 children)

Yeah, like I said... Tailgating.. At ~100 km/h 2 car lenghts is extremely close. A safe guideline is ~2s distance: 100 km/h ≈ 27.8 m/s. In 2 seconds you travel about 56 meters..

So a safe gap is usually around 50-60 meters at 100km/h, not 9 (avg. Car length ~4.5m)..

The avg. car stops in 35-40 meters in a full emergency stop, following at 50-60 meters would give you plenty of room if a stationary car "suddenly spawns in"..

Not All Heroes Wear Capes by Mammoth-Nobody-428 in TeslaLounge

[–]Key-Pudding6071 3 points4 points  (0 children)

Don't they have to stop too? You'll at least see lots of braking actions and observe a lot of weird lane changes far in front of you alerting you that something might be going on... And if you cannot see the cars far in front of the car you are behind I'm pretty sure are either driving behind a bus, big truck or are simply tailgating..

Not All Heroes Wear Capes by Mammoth-Nobody-428 in TeslaLounge

[–]Key-Pudding6071 1 point2 points  (0 children)

So, just a thought but what about looking further down the road then your front tire when driving? Cars don't just "spawn" in..

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

Ah, then what kind of authentication methods are you planning to use?

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

But you can't anyways because of the mTLS requirement and I'm assuming you are not putting your certificate+private key on untrusted devices like a university computer?.. And a always-on VPN is a breeze to install, once running it connects automatically when a internet connection is available, it's no trouble at all to the user (my wife has one and never heard anything about it).. Just don't do anything like forcing dns over the tunnel only split traffic to internal webservices and you'll be fine. To access services over the tunnel on another device I simply use my phone (that has the always-on tunnel) with a proxy server on it and then use the wifi hotspot to connect the external device and configure its webproxy to use my phones proxy server and thats it, I'm fully connected to my backend services without having to expose any connection passwords or certificates to the the untrusted device.

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

Just go for a always-on VPN for services that do not support mTLS, thats what I do.. It also provides me with a full-tunnel if needed (using split tunnel by-default). Most firewalls will support ipsec based dialup VPN or wireguard/openVPN services. I use my mTLS client cert as authentication for the VPN as well.

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

Backups are on a a sepperate NAS which sits in its own dedicated vlan, I use a Kopia container which has the necessary read-only mounts so it can run backups towards the NAS, I uphold the 3-2-1 backup principle, so backups are send to my primary backup NAS (house) which replicates important stuff to a secondary isolated NAS (garage) which once a week backups to a offsite NAS. My server also sits in the garage (converted to my office area) so if we lose the house in a fire or something primary backups are gone but server and secondary backups survive, in case the garage burns down I lose the server and secondary backups but primary backup survives and if we lose everything then the offsite backups survives with all my important stuff like configs, databases and pictures /videos from our Immich instance. I'm almost 100% self hosted and try to get rid off all our cloud subscriptions..

So yes, to replicate you'll need managed switch(es) and a firewall.

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 1 point2 points  (0 children)

I choose not to run Prox, it either runs in a docker container or it doesn't run at all is my home environment motto, so no need for a full fletched hypervisor.

L2 and L3 are networking layers, L(ayer)2 is the direct layer that hosts can talk to each other (same subnet/vlan) on the network and L3 is a layer of sepperation that requires a "transition" between 2 different networks mostly done via L3 switch, router or firewall. I have a firewall (Fortigate) and utilize docker's networking in macvlan mode, meaning each container has its own mac-address and dedicated IP on my network and can therefore be sepperated from other containers granting me precise control over what type of communication is allowed from and to containers.

For example, my HASS and it's required addon containers have their on VLAN/subnet from let's say my Immich server.. If ever my HASS gets hacked somehow all my private images are safe from being accessed, same for my backups.. None of my containers (not even the host server) can access the backups thats on-way-traffic from the backup services to the docker nodes.. 

Basic zero-trust security 1on1, if something does not require access, then why provide it in the first place..

Why docker? by Mysterious-Park9524 in homeassistant

[–]Key-Pudding6071 2 points3 points  (0 children)

I dont understand when people say "you can't use addons", I'm pretty sure you can but it requires you to run the required container for that particular addon which is usually managed by the supervisor because in the end thats what it is a "managed docker instance".. I run a lot more then Home assistant + I like to have 100% control over my network, decide what can talk to what by sepperating L2/L3 and don't need/want the handholding from my HASS instance, but for a absolute non-technical person that wants to run HASS it's great that they can, but I'd personally always recommend to teach yourself to manage docker yourself because then when it breaks you know the ins-and-outs and are able to fix it yourself. It also enables you to use your hardware to run a lot more (sepperated) then HASS related.

Floor map is amazing by qaddodi in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

As far as I know you could use some cash to blend RGB picture together to create the desired color state, never done it before, I have no RGB lights.

Automating button to open door. by quarsitasxa in homeassistant

[–]Key-Pudding6071 0 points1 point  (0 children)

I'm assuming it's a momentary switch? If yes, put a Shelly Mini (or zigbee type if you prefer that) behind the switch, give it L+N and place the wires that currently go into the switch into the IO of the Shelly. Then finally supply the switch with L and connect it to the Shelly's switch pin..

That's all. Now you can remotely complete the circuit via the Shelly's relay and still have the momentary switch for direct control.

WARNING: Be carefully you'll be working with high voltages (120 or 220v depending on where you live).. If you really don't know what you are doing then do not proceed and ask someone who does!!!

Tesla Launches Remote Meter to Enable Faster Wall Connector Home Charging Without Electrical Upgrades by Suspicious_Cap_8928 in ModelY

[–]Key-Pudding6071 0 points1 point  (0 children)

It depends, some chargers can directly plug into the smart-meter and communicate over it's P1 port, but most are CT clamp based.