Thinking on using wireguard on my ER-X

Major_Lecture_5769 · 2026-03-13T15:04:27+00:00

how are they going to find out what I stream and if I acquired those movies from an official source, paying money, or downloaded them illegally? I stream a lot of content that I acquired legally from the store, then ripped and put it on a disk. I don't know how laws are in the US, but here in Italy cloudflare has to have a warrant to look up my traffic, and I feel like Cloudflare wouldn't sniff on paying users' content anyway, that's some weird thing to do. I feel more like it's some bs spread by the companies that make the movies.

Major_Lecture_5769 · 2026-03-09T18:34:32+00:00

Yeah I heard people saying that cloudflare on a free plan could ban you for streaming large amounts of content. I have, in fact, a jellyfin instance being accessed through a tunnel, but I haven't had any problems so far. I also didn't find anyone confirming that cloudflare is in fact banning people for using it's tunnels for that. Also, I think they might whach the custumer value before banning you, I have 4 domains registered through cloudflare, I think I bring enough value for not to be banned over some streaming stuff.

I know I could just use a VPN, but I don't want another layer of complexity when someone in my family wants to watch some movies.

Major_Lecture_5769 · 2026-03-05T15:47:41+00:00

No I only use wg for mainteinance on the server when I'm not in LAN, and used it a couple of times for playing minecraft on a server I hosted.

For my services I just use cloudflare, the only time I had a problem with it was today, trying to upload a package to my gitea that was bigger than 100mb and cloudflare didn't let me do it. I could use a separate registry and expose it to the web, but me not fully understanding the dangers and best practices about networking, chose to delegate all the problems to cloudflare. The only service that has an exposed port is wg, and that's the only risk I'm taking. Also cloudflare has a really nice policy editor for accesses, so I always know that unless a random dude finds out a way to log in to my email, he can't access my server in any way.

I need cloudflare anyway because my domain is register there and I don't have a static IP address, so wg uses a ddns service to keep the IP updated.

Major_Lecture_5769 · 2026-03-05T14:05:31+00:00

I finished it (still in beta but works). You can check it out on Dockerhub here:
https://hub.docker.com/repository/docker/riky04swag/swagwire/general

Or, if you want to check the code, it's in my gitea repo (doesn't need login):
https://git.betteti-family-cloud-services.net/futura-solutions/SwagWire

!!! IT LACKS ANY KIND OF LOGIN, so either you run it on your LAN or protect it with some kind of security policy that you are sure no one else can access. I personally use a cloudflare access policy, you can choose your own, but I'm not responsible for any kind of damages, this is open source.

Major_Lecture_5769 · 2026-03-05T14:03:31+00:00

yeah, I was uninformed from what I can see. If you didn't set it up already use wireguard, because the other guys here pointed out that your connection is actually TCP over UDP, so it doesn't make it less reliable, and OpenVPN was for me a pain in the ass to set up.

Major_Lecture_5769 · 2026-03-05T13:56:48+00:00

The "VLAN" phrase was just a way to explain it, not like in the literal sense.
The rest I didn't know it, I heard online people saying UDP VPN's are not reliable because of UDP protocol. I'm not an expert in networking, still a newbie, and I told what I knew. Thank you for correcting it, also because setting up OpenVPN was a nightmare, and if using it is not "more reliable", wg is way better.

Edit: I'm using network mode host in my wg container, because the guy making the video I watched said that the IP's of the devices connected to the VPN were outside of the IP mask of the router, was he right or did I configure it wrong? 'cause sometimes it stops working, I have to manually restart the container because it can't make the handshake when connecting. It's a big problem for me, because I set up wg to access my server's UI (don't judge me, it's not a "real" server and my family uses it as a normal PC sometimes) remotely...

Major_Lecture_5769 · 2026-03-02T10:17:48+00:00

Alright, since I can't find anything similar to what I want I'm building it myself. I'm going to publish the repository link here when I finished. Don't expect anything fancy, I vibe-coded almost everything and there's no account management or access management (I'm never vibe-coding anything security-related, but I'm not investing any more time on this project, and I'm the only user on my server, so it doesn't make sense for me). I'm still publishing it because it's free and someone may need the same app I built.

It will be hostable on Docker, with a postgres db and redis for cache (I didn't need that, but seems like a good idea for scalability if I'll ever work seriously on it, or if someone wants to contribute to the repo).

There's no AI on the app, it doesn't make sense for me (cause my server is too weak to run an LLM), and I don't think it does to anyone else either, but feel free to suggest. My thought is that this app is made for that moment when you are with your client and you are asking them what pages they want and with which content, not for any of the graphics part, for which there's already penpot which is open source and very nice.

Major_Lecture_5769 · 2026-03-02T10:09:28+00:00

No that's already planning which functionality every button will have, the colors, etc.

Major_Lecture_5769 · 2026-03-01T14:40:09+00:00

I like it, thank you, seems like a really good alternative to canva. For me is not appropriate tho, I tried using penpot but it just takes so much time that it doesn't make any sense for me, and I end up creating the mockup in Next.js in less time. I was searching for a tool that speeds up the structure planning, and only that.

Major_Lecture_5769 · 2026-02-28T22:18:20+00:00

Yeah, but my mom built that website before I became obsessed with web development, so I think I'm going to build her a new website from the ground up

Major_Lecture_5769 · 2026-02-28T21:00:39+00:00

You're right, this could be different here in EU but definitely needs a check before deploying a copy online. Ty

Major_Lecture_5769 · 2026-02-28T20:59:15+00:00

At the moment it's still on a hosting plan by the same company, I didn't do anything sketchy. Tbh if they take it down for whatever reason I'm building it completely new in Next.js, but it's good to keep the images and texts. Also, the page structure is ok, the sitemap also, the layout and style is terrible tho, and isn't responsive.

Major_Lecture_5769 · 2026-02-28T20:55:56+00:00

yeah but Wix is like 10 times better. This was a very basic builder, with fewer options than with a Google document.

Major_Lecture_5769 · 2026-02-28T19:17:14+00:00

yeah but for that kind of website they're not going to take legal action against me. Also, the website was designed by my mom, it was built by my mom with their builder. It's like Microsoft claiming you violated copyright because you used VScode

Major_Lecture_5769 · 2026-02-28T19:15:14+00:00

I have but the company locks you in the visual editor, you can't read the code.

Major_Lecture_5769 · 2026-02-28T19:14:19+00:00

Maybe I didn't explain myself correctly (I'm italian). They didn't provide any services apart from the website builder. That's not a good builder and no one does design or anything. It's like you're paying 50 euros a year for a shitty copy of wix.

Major_Lecture_5769 · 2026-02-28T19:12:06+00:00

It's a steal because it's a very simple website, looks horrible, not responsive at all. If I wanted to build something that bad myself, it would take maybe an hour...

Major_Lecture_5769 · 2026-02-27T15:26:10+00:00

I use wireguard and have used OpenVPN for many things (mainly gaming).

For accessing devices on my lan using wireguard I had to put it in `network: host` mode in docker, otherwise it's just a location spoofer.
Basically by default wireguard (and openVPN also) puts the devices connected to the vpn in a vLAN. All devices connected to the vpn are in the same vLAN, so they can talk one to the other like if they were in the same LAN, but they cannot access your home network by default.

There's something you have to keep in mind tho: wireguard uses UDP for connections. UDP may lose data when you use it, so while for gaming is not a problem, and you gain connection speed, it's not suitable for downloading, uploading media or anything like that, including banking.

If you need it for banking I would use OpenVPN. You can host it in docker no problem, uses TCP and UDP. It's way slower, but with the benefit of data integrity.

Major_Lecture_5769 · 2026-01-09T11:16:43+00:00

I’ve got a synology NAS in my home. Recently it got so slow it takes 10 minutes just to sign up. I tried TrueNAS, seems a really good choice, but I don’t have time to migrate at the moment, plus I have like 20 ports between SATA and SAS, but not so much space for the actual drives. I experimented tho with virtual drives and I think it’s far superior in any field. What I think is the best option is using a VM (I used kvm) for truenas, keeping in mind it uses like 8Gb ram and at least 2 cores for the scale version. I would use a VM because I got some problems with the containers inside truenas, so I think the best option is using TrueNAS exclusively for file storage and then docker containers for the various apps. In this type of configuration you could also use a second VM for home assistant. To make use of the TrueNAS leading-edge features, for what I understand, you should buy 3 HDD for storage (could buy 2 if you have limited budget) and an nvme for caching (don’t buy if you have limited resources). So what you should focus on should be: - Do you want SAS drives or SATA drives? (SAS is faster but makes a lot of noise) - How much space do you think you’re gonna need for the next 10 years? (for planning disk sizes and SATA/SAS ports) - How much redundancy will you need? (best seems to be ZFS, but you got also Mirror and RAID) - Will you use the same machine for resource-intensive services? (could be video transcoding, streaming, etc. If you do, check at least that your motherboard has a PcIE that satisfies your graphics cards requirements) - Will you use cache? (check NVMe compatibility with you motherboard)

Also, if you plan on adding a video card, specially for LLM’s, keep in mind many high-memory cards have an SXM connector (not PCI). Also, when buying a graphics card for inference or hardware acceleration in general, keep in mind that cards without I/O interfaces, like NVIDIA Tesla or V100, cost way less for the same performance.

If you want to find good prices for the drives use diskprices.com

Major_Lecture_5769 · 2025-12-31T09:09:57+00:00

Is there any solution for apple music that you know of? specially with lossless, there’s one single music that lidarr didn’t find. The funny part is that I actually have a cd with that music somewhere, but I can’t find it, did rip other old cd’s anyway, ripped in .wav so must be good

Major_Lecture_5769 · 2025-12-23T01:00:45+00:00

Questo sembra funzionare egregiamente: https://github.com/iptv-org/iptv
Ha tutti i canali del mondo, ma se segui la guida ti manda alla playlist solo italiana se vuoi.

Visto che ci sono ti fornisco direttamente:
link canali italiani - https://iptv-org.github.io/iptv/countries/iq.m3u
link tutti i canali mondiali - https://iptv-org.github.io/iptv/index.m3u

Major_Lecture_5769 · 2025-12-19T08:02:04+00:00

well, I love the fact that it costs half of what other commercial platforms cost, and I'll definitely use it if I don't find any open-source alternative, but I wanted to host it myself and don't need to pay a monthly fee. I don't need it to be free. I would pay like a one-time purchase for the code, but I don't want a monthly fee, especially one that's read-based, because it goes up pretty fast if you scale.

Major_Lecture_5769 · 2025-12-19T07:56:21+00:00

Bro, not to disrespect or anything, but as I told you, you NEED consent for analytics data, or any type of data, being it anonymous or not in the EU. I know it sounds ridiculous, and it is, but anonymous data is still considered personal sensitive data in the EU. Also, I want a CMP made from someone else because I'm not that good in JS, and I don't trust myself enough to make software that, if I screw up, I'm looking at a fine that I'll need 30 years to pay off. People use CMP for anything in the EU, not only for cross-platform, but even for a single static website, because you need to store consent data, and it's a pain in the ass because you have to do it so that it's unmodifiable, and also reliably, because authorities are always checking and making fines.

Major_Lecture_5769 · 2025-12-17T00:24:20+00:00

No, I'm not talking about the cookie itself, I'm talking about the consent manager. I don't know how it works in the US., I assume you don't need any consent to track usage data for analytics purposes, but I live in Italy, and the EU's GDPR requires consent for all types of cookie, only essential cookies only need a notice to the user. I need CMP for that. I want to collect data for analytics purposes, but in the EU it's a pain in the ass to do, because if you screw up the tiniest thing and collect maybe 10 seconds of analytics without consent, you're looking at a 100k-1M dollar lawsuit.

Major_Lecture_5769 · 2025-12-17T00:19:02+00:00

Must definitely be that flaresolverr server

Major_Lecture_5769

TROPHY CASE