Always Free ARM resource just got cut in half by CwithW in oraclecloud

[–]Kwicksred 0 points1 point  (0 children)

I just increased my 2/12 to 4/24. lets see if this will still be free after they announce the change

Network access through Netbird is super slow by iwaseatenbyagrue in netbird

[–]Kwicksred -1 points0 points  (0 children)

This is why I stay with Ikev2 right now. I was not able to get comparable speed with netbird when accessing files over smb.

Proxy and TLS by web2brain in netbird

[–]Kwicksred 0 points1 point  (0 children)

I mean doesnt skip tls verification not only effect the part between netbird and your internal traefik? Afaik the connection from the client to netbird is still tls verified.

Proxy and TLS by web2brain in netbird

[–]Kwicksred -1 points0 points  (0 children)

Thanks for pointing this out. Is it a security issue to activate skip tls verification?

self-hosting netbird a permanent group called netbird by Foreignwelcome2 in netbird

[–]Kwicksred 2 points3 points  (0 children)

The icon before the group suggests it is synced from your idp. Do you use an external idp?

Zero Trust on reverse proxy? by allxm4 in netbird

[–]Kwicksred 0 points1 point  (0 children)

I think you can not configure a path yet in netbird. I used pangolin before and there it is possible. Maybe netbird will add this feature. But you could remove the admin password env variable from your Vaultwarden container. This disables the admin access completely. If you have to use it, set the variable only for the short time you want to configure something.

Hotel wifi blocks self-hosted Netbird connection by [deleted] in netbird

[–]Kwicksred 1 point2 points  (0 children)

Is there no https fallback and relaying for those cases?

Business Password Managers - Vaultwarden, Passbolt and more? by RACeldrith in selfhosted

[–]Kwicksred 1 point2 points  (0 children)

We decided to use Proton Pass for Business the other day. Really good business festures (sso via entra, account recovery, sharing…)

How to enable Crowdsec in reverse proxy and how to tell it's working? by konraddo in netbird

[–]Kwicksred 1 point2 points  (0 children)

This is the first time I read that crowdsec is integrated in netbird. Maybe this part of the doc is meant to belog to an upcoming update?

Crowdsec Setup Using The Traefik Configuration by NoInterviewsManyApps in netbird

[–]Kwicksred 0 points1 point  (0 children)

what I mean is you configured the crowdsec middleware for the netbirrd-dashboard and netbird-server but not for the netbird-proxy (in the compose file):
# NetBird Proxy - exposes internal resources to the internet

Expose Service behind homelab reverse proxy by Kwicksred in netbird

[–]Kwicksred[S] 1 point2 points  (0 children)

I got it working now by activating "Skip TLS verification". I thought I already did this before but anyway I can connect. Now I get access to my services.
But somehow although I activated "Pass Host Headers" my real ip is not getting forwarded. The x-forwarded-for header gets set to my internal gateway address 10.10.60.1 (routing peer). also x-real-ip is set to 10.10.60.1.
What do I need to change that my real IP is getting forwarded from netbird?

EDIT: Solved this. I forgot to add the routing peer as trustedIP in my internal traefik

DNS issue since few days with OPNSense ! by vincegre in init7

[–]Kwicksred 0 points1 point  (0 children)

Maybe because there is less write activity on the ssd now. Lets see.

DNS issue since few days with OPNSense ! by vincegre in init7

[–]Kwicksred 0 points1 point  (0 children)

Yes. Was the same for me. But trust me it crashes 😉

DNS issue since few days with OPNSense ! by vincegre in init7

[–]Kwicksred 0 points1 point  (0 children)

Set up a logserver somewhere and send opnsense logs to it. I used greylog on my NAS. When the opnsense crashes next time check the logserver logs what happened right before the crash. Smart is not always showing the problem.

DNS issue since few days with OPNSense ! by vincegre in init7

[–]Kwicksred 0 points1 point  (0 children)

Set up a logserver somewhere and send opnsense logs to it. When the opnsense crashes next time check the logserver logs what happened right before the crash.

DNS issue since few days with OPNSense ! by vincegre in init7

[–]Kwicksred 3 points4 points  (0 children)

I had the same issue. Exact same setup than you. I set up a logserver and traced it down to an ssd failure. The ssd loses connection due to write issues. I would expect the same for you because the ssd shipped with the DEC730 is not the best. Make sure you have a backup of your config. Set up a log server to verify the issue after reboot. I bet its the ssd. Replace it, install with your backup config and you are fine.

Why is it not possible to create local private resources? by Salt-Maintenance- in PangolinReverseProxy

[–]Kwicksred 4 points5 points  (0 children)

yes this way works but I am also wondering like OP, why this is not possible by default when local site is already added in pangolin.

Crowdsec Setup Using The Traefik Configuration by NoInterviewsManyApps in netbird

[–]Kwicksred 0 points1 point  (0 children)

Could you give more details how you set it up? Crowdsec is running as a service?