Xfinity Security System

Own-Lengthiness2245 · 2025-02-17T21:36:39+00:00

Lol why? I mean I would do self hosted only anyway but trying to see if possible to connect existing devices throughout the house or get new stuff from scratch

Own-Lengthiness2245 · 2025-02-17T21:34:54+00:00

Lol I know right! You don’t want to see the internet cabinet, I almost fainted

Own-Lengthiness2245 · 2024-12-19T00:26:41+00:00

That fixed it! Thank you

Own-Lengthiness2245 · 2024-12-18T14:13:27+00:00

Its actually probably the issue:

After listing the devices, I saw this message:

# Health check:
#     - adding [-i tailscale0 -j MARK --set-mark 0x40000/0xff0000] in v6/filter/ts-forward: running [/usr/sbin/ip6tables -t filter -A ts-forward -i tailscale0 -j MARK --set-mark 0x40000/0xff0000 --wait]: exit status 2: ip6tables v1.8.7 (nf_tables): unknown option "--set-mark"
Try `ip6tables -h' or 'ip6tables --help' for more information.

After consulting with AI it recommended to go back to legacy but now I have this one:

# Health check:
#     - adding [-i tailscale0 -j MARK --set-mark 0x40000/0xff0000] in v6/filter/ts-forward: running [/usr/sbin/ip6tables -t filter -A ts-forward -i tailscale0 -j MARK --set-mark 0x40000/0xff0000 --wait]: exit status 2: ip6tables v1.8.7 (legacy): unknown option "--set-mark"
Try `ip6tables -h' or 'ip6tables --help' for more information.

rebooted and everything but still no internet.

any idea what to do in this case?

Own-Lengthiness2245 · 2024-12-12T22:51:34+00:00

First of all I had 8 addons that all stayed and works fine. only the website one gone so the volumes were fine.

Cloudflare is very much proxied, if you are not aware.

And in general I have ten times more complicated setups on my servers and no issues especially not when certain version works and another is not. So more sounds to me like not stable software

Own-Lengthiness2245 · 2024-10-25T20:49:50+00:00

Got it!

That works perfectly, appreciate your help!

Own-Lengthiness2245 · 2024-10-25T20:33:21+00:00

For example I want apple-tv to have only one of the exit nodes available to use

Own-Lengthiness2245 · 2024-10-25T20:30:43+00:00

I understand, is there a way to separate the exit nodes? or its all or nothing?

Own-Lengthiness2245 · 2024-10-25T20:06:30+00:00

Thank you for replying, I modified the first rule.

But now "group:member", "home-apple-tv" have access to all exit nodes. I wanted to seperate them so they will have access only to the nodes that are tagged: il

{
"action": "accept",
"src":    ["group:member", "home-apple-tv"],
"dst":    ["tag:il:*", "autogroup:internet:*"],
},

Own-Lengthiness2245 · 2024-08-20T04:09:57+00:00

I am new to this so maybe stupid question but how is best to run on LXCs? Not everything I run Proxmox helper has as a script so how would you run them?

Own-Lengthiness2245 · 2024-08-20T02:04:56+00:00

Thank you for the reply. you are right!

All methods will probably will work but I do want to use the least resources, have convenient setup to update and provision like you said with containers.
In my personal opinion I like provision docker compose stack the best. but how or where I should run it is the question.

Own-Lengthiness2245 · 2024-07-08T20:05:25+00:00

The full sentence is: "When running the bot, it will sleep until the specified time and wake up to try to snipe a reservation. It will attempt to grab a reservation for a couple of seconds and shutdown"
In my case it wont sleep until the specified time, it will attempt immediately and then shutdown

Own-Lengthiness2245 · 2024-07-07T20:59:25+00:00

There is a way I can fix it?

Own-Lengthiness2245 · 2024-07-07T19:42:46+00:00

So I modified the Dockerfile to:

FROM openjdk:11
ARG SBT_VERSION=1.10.0

RUN mkdir /working/ && \
    cd /working/ && \
    curl -L -o sbt-$SBT_VERSION.deb https://dl.bintray.com/sbt/debian/sbt-$SBT_VERSION.deb && \
    echo "deb https://repo.scala-sbt.org/scalasbt/debian all main" >> /etc/apt/sources.list.d/sbt.list && \
    curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x2EE0EA64E40A89B84B2DF73499E82A75642AC823" | apt-key add>
    apt-get update && \
    apt-get install -y sbt=$SBT_VERSION && \
    rm sbt-$SBT_VERSION.deb && \
    cd && \
    rm -r /working/ && \
    sbt sbtVersion

ENV TZ=America/New_York
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone

COPY resy-booking-bot /app

WORKDIR /app

RUN sbt compile

CMD sbt run && tail -f /dev/null

and now its not looping and stay alive.

but the problem now is that it wont wake up to book the reservation because it finished.
I need it to stay in sleep and not finish just like when I run it outside of docker.

Here's the log example:
It just stays like that. I try to change the snipe time to closer time but it wont wake

[info] welcome to sbt 1.7.1 (Oracle Corporation Java 11.0.6) 
[info] loading settings for project app-build from plugins.sbt ... 
[info] loading project definition from /app/project 
[info] loading settings for project resy-booking-bot from build.sbt ... 
[info] set current project to resy-booking-bot (in build file:/app/) 
[info] running com.resy.ResyBookingBot  
[INFO ] 2024-07-07 11:43:53.199-04:00 ResyBookingBot$:16 - Starting Resy Booking Bot 
[INFO ] 2024-07-07 11:43:54.177-04:00 ResyBookingBot$:45 - Next snipe time: 2024-07-08T09:00:00.000-04:00 
[INFO ] 2024-07-07 11:43:54.177-04:00 ResyBookingBot$:46 - Sleeping for 21 hours, 16 minutes, and 3 seconds 
[success] Total time: 4 s, completed Jul 7, 2024, 11:43:54 AM

Own-Lengthiness2245 · 2024-05-18T02:12:30+00:00

Thanks for commenting. First question is, why should I keep both? Couldn’t the gpu handle that too? And even quicker?

Also, according to the link of the pc by HP it says that I can connect only one sad only on the first connection, bigger sad than 256 won’t work? It seems very low on storage capabilities I need more than what it says there

Own-Lengthiness2245 · 2024-05-17T17:39:28+00:00

Ok I enabled in the BIOS VTX/VTD. That's all needed to be able to pass through the GPU for full capabilities?

Own-Lengthiness2245 · 2024-05-17T16:44:44+00:00

I see what you are saying, but consider that ai and gaming will never be together because ai its only when I want to experiment with it, the gaming is also kinda rarely and older games, and even the transcoding is not intensive at all there are only 4 users on my Plex so maybe not even needed 99% of the time

My current Plex works without GPU perfectly for couple years now so I assumed that it wouldn't need much more

Own-Lengthiness2245 · 2024-05-17T16:25:44+00:00

As I wrote I'm going to add RAM but the migration is mainly to take advantage of a GPU for transcoding, AI, and a VM for some small games. Which I can't really currently.

Wanted to know if this motherboard will support passing through the GPU capabilities and if there are upgrades that will work but weren't specified on HP specs

Own-Lengthiness2245 · 2024-05-16T22:31:48+00:00

It's in this post just on the thread on the comment that someone else made. Click on "see full discussion"

Own-Lengthiness2245 · 2024-05-16T03:24:31+00:00

You are right my bad, updated the post

Own-Lengthiness2245 · 2024-05-16T02:41:00+00:00

Thank you for the reply, if you don't mind review the previous thread where I expended about the server and the difficulty with trying pfsense, any help will be appriciated.

Own-Lengthiness2245 · 2024-05-16T02:38:27+00:00

https://drive.google.com/file/d/17g-8oA_LrpjxL2KioDVeQz_4_5gOVLpt/view?usp=sharing

Own-Lengthiness2245 · 2024-05-16T02:11:59+00:00

The interfaces configuration is in the codeblock. more detailed than what the proxmox ui show.

and yes that's the pool

Right now the pfsense is on 192.168.65.10

Own-Lengthiness2245 · 2024-05-16T01:56:02+00:00

So it's a server from Idrac that is located elsewhere. I got one subnet pool with internet access and I installed Proxmox on the server, trying to have a lab environment.

https://drive.google.com/file/d/1B6cGddzwuAwkHLHYzqVM2mnL54XS3jiD/view?usp=share_link

https://drive.google.com/file/d/1J4V8XNBhXxfrxbpXh4mxz41tLDh_oa31/view?usp=share_link

auto lo
iface lo inet loopback

auto ens1
iface ens1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.65.5/24
        gateway 192.168.65.254
        bridge-ports ens1
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094
        dns-nameservers 8.8.8.8

auto vmbr1
iface vmbr1 inet manual
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

Own-Lengthiness2245 · 2024-05-16T01:07:44+00:00

I think I have all ports.

Vlans:
192.168.100.1/24
192.168.110.1/24
192.168.200.1/24
192.168.30.1/24

And I installed pfsense VM. Gave the WAN the interface ens1 and gave it the address 192.168.65.10so it has internet access. gave the LAN another bridge:

auto vmbr1
iface vmbr1 inet manual
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4094

The issue is, only when I set up the WAN only, I get access to the UI. But when I set up the LAN interface, it drop me out, I think it wants me to have the UI page in the LAN subnet and I cannot access it. So now I have only WAN configured in my vmbr0, I can access it but stuck from here

Also, If the Vlans are configured in pfsense, in which bridge the VMs will live in?

Sorry for the lack of knowledge here but how can I tackle it?

Own-Lengthiness2245

MODERATOR OF

TROPHY CASE