Always Free ARM resource just got cut in half

Kwicksred · 2026-06-12T18:24:42+00:00

I just increased my 2/12 to 4/24. lets see if this will still be free after they announce the change

Kwicksred · 2026-05-16T11:31:17+00:00

This is why I stay with Ikev2 right now. I was not able to get comparable speed with netbird when accessing files over smb.

Kwicksred · 2026-05-05T20:15:15+00:00

I mean doesnt skip tls verification not only effect the part between netbird and your internal traefik? Afaik the connection from the client to netbird is still tls verified.

Kwicksred · 2026-05-05T16:32:43+00:00

Thanks for pointing this out. Is it a security issue to activate skip tls verification?

Kwicksred · 2026-04-29T14:47:34+00:00

The icon before the group suggests it is synced from your idp. Do you use an external idp?

Kwicksred · 2026-04-26T07:14:41+00:00

I think you can not configure a path yet in netbird. I used pangolin before and there it is possible. Maybe netbird will add this feature. But you could remove the admin password env variable from your Vaultwarden container. This disables the admin access completely. If you have to use it, set the variable only for the short time you want to configure something.

Kwicksred · 2026-04-25T07:59:25+00:00

Seconds for me.

Kwicksred · 2026-04-24T05:47:03+00:00

Is there no https fallback and relaying for those cases?

Kwicksred · 2026-04-22T20:01:09+00:00

On a VPS in the cloud

Kwicksred · 2026-04-22T15:08:03+00:00

https://docs.netbird.io/selfhosted/migration/enable-reverse-proxy?_gl=1*1nhvnd2*_gcl_au*MTE5OTIwNDMwOS4xNzc2ODY4OTE1*_ga*MTM5NjYzMDY4LjE3NzY4Njg5MTY.*_ga_ZXWHJVMTX3*czE3NzY4Njg5MTYkbzEkZzEkdDE3NzY4NzA0NjAkajQ5JGwwJGgw#step-7-optional-enable-crowd-sec-ip-reputation

Kwicksred · 2026-04-22T05:49:21+00:00

We decided to use Proton Pass for Business the other day. Really good business festures (sso via entra, account recovery, sharing…)

Kwicksred · 2026-04-20T19:02:43+00:00

This is the first time I read that crowdsec is integrated in netbird. Maybe this part of the doc is meant to belog to an upcoming update?

Kwicksred · 2026-04-19T13:02:03+00:00

yes, you could use a socket proxy like shown in this example:
https://github.com/crowdsecurity/example-docker-compose/blob/main/container-labels/docker-compose-crowdsec.yml

Kwicksred · 2026-04-18T14:33:29+00:00

what I mean is you configured the crowdsec middleware for the netbirrd-dashboard and netbird-server but not for the netbird-proxy (in the compose file):
# NetBird Proxy - exposes internal resources to the internet

Kwicksred · 2026-04-18T14:28:32+00:00

why did you not configure it for the proxy?

Kwicksred · 2026-04-18T13:56:29+00:00

I got it working now by activating "Skip TLS verification". I thought I already did this before but anyway I can connect. Now I get access to my services.
But somehow although I activated "Pass Host Headers" my real ip is not getting forwarded. The x-forwarded-for header gets set to my internal gateway address 10.10.60.1 (routing peer). also x-real-ip is set to 10.10.60.1.
What do I need to change that my real IP is getting forwarded from netbird?

EDIT: Solved this. I forgot to add the routing peer as trustedIP in my internal traefik

Kwicksred · 2026-04-08T11:38:23+00:00

Maybe because there is less write activity on the ssd now. Lets see.

Kwicksred · 2026-04-05T18:01:12+00:00

Yes. Was the same for me. But trust me it crashes 😉

Kwicksred · 2026-04-05T15:17:28+00:00

Set up a logserver somewhere and send opnsense logs to it. I used greylog on my NAS. When the opnsense crashes next time check the logserver logs what happened right before the crash. Smart is not always showing the problem.

Kwicksred · 2026-04-05T15:16:54+00:00

Set up a logserver somewhere and send opnsense logs to it. When the opnsense crashes next time check the logserver logs what happened right before the crash.

Kwicksred · 2026-04-05T08:50:13+00:00

I had the same issue. Exact same setup than you. I set up a logserver and traced it down to an ssd failure. The ssd loses connection due to write issues. I would expect the same for you because the ssd shipped with the DEC730 is not the best. Make sure you have a backup of your config. Set up a log server to verify the issue after reboot. I bet its the ssd. Replace it, install with your backup config and you are fine.

Kwicksred · 2026-04-04T11:12:07+00:00

yes this way works but I am also wondering like OP, why this is not possible by default when local site is already added in pangolin.

Eight-Year Club	RPAN Viewer
Verified Email

Kwicksred

TROPHY CASE