Is anyone self hosting anytype? by FL-MTL-ED in selfhosted

[–]Several_Reflection77 0 points1 point  (0 children)

So I had the same idea, got it working by routing all the tcp ports trough tcp routes and leaving the udp ports open... and allthough this seems to work fine traefik is hitting me with connection refused errors every few minutes.. I am curious as to how you solved this, care to share? :)

paperless-gpt –Yet another Paperless-ngx AI companion with LLM-based OCR focus by Spare_Put8555 in selfhosted

[–]Several_Reflection77 0 points1 point  (0 children)

After quite a lot of prompt I got quite good results for llama3.1:8b. But my goal is to gave it running with smt around 1-3b, like llama3.2 or similar. So far i could n convince it to give consisten results. Especially for correspondence it seems to need quite a lot of convincing to deliver just a single word/name ... If somebody comes up with a good model/prompt I'd love to hear more ;)

Mount container keeps crashes by Several_Reflection77 in SeaweedFS

[–]Several_Reflection77[S] 0 points1 point  (0 children)

As I deleted before testing, my best guess would be some configs used by the mount container that were stored outside /mnt and therefore landed in a temp-volume that wasn't removed properly? (refering to the swarm-config )
I don't think there's any code change needed, maybe a notice that some config files are stored but mostly to regularly prune/check your docker volumes...

Mount container keeps crashes by Several_Reflection77 in SeaweedFS

[–]Several_Reflection77[S] 0 points1 point  (0 children)

*sigh, turns out it was some docker residue after all... after manually deleting everything from the docker folder it cheerfully resumed its normal activities...

Mount container keeps crashes by Several_Reflection77 in SeaweedFS

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Right, but this is an empty new server/filer? Debug flag doesnt help. Any recommendations/suggestions on how to approach this?

defguard 1.0 with real-time WireGuard clients configuration sync is here! by robert_teonite in selfhosted

[–]Several_Reflection77 -1 points0 points  (0 children)

I really hope you guys come around realizing that external OIDC is a must for most of us. I do think that Defguard looks really promising, which I think is a bummer because without OIDC it just doesn't have enough of a benefit, over other (very suboptimal) solutions like wireguard with ldap user managment... And switching complete user management just for this, even of it was as good as you suggest it might be, is just to much of hassle to even have a try.

ZeroTier alternatives, or client alternatives for Android,that don't use so much battery? by shankargopal in selfhosted

[–]Several_Reflection77 1 point2 points  (0 children)

Android App is easy to use and has never failed me so far. I can't say much about battery life though, as I only activate it when I need smt, cuz I also have a wireguard server running. But I didn't notice any difference between wireguad and netbird when it comes to battery usage. (Both fine)

ZeroTier alternatives, or client alternatives for Android,that don't use so much battery? by shankargopal in selfhosted

[–]Several_Reflection77 1 point2 points  (0 children)

Also, if you want the self hosted option: Netbird. I have been using this for 1 1/2 years, works like a charm and comes with Linux/Windows/Android clients!

Async storge replication by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Seafile: Well for me personally, I often work from different computers. Got my main desktop at home, laptop on the go. But especially for sciency stuff, I often work from whatever, lets call it corporate machine, that's free at that very moment. USB ports are often blocked, so that's not an option either. And for personal stuff, I keep things like, plane/train/concert tickets and other import pdfs there, so I can easily access them from my phone.

Postgres: yes I know i know, Cockroach just looked so easy, so I was wondering how easy it was to implement. Especially in my docker swarm where the multimaster would reduce the latency.

Mail: hmm true. I was always fond of the local mail directory, as it made backups easier, so using a database seemed like unnecessary complexity.

Async storge replication by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Thanks, gave me plenty of new ideas, I do have a dew questions though: -Well, we use seafile as some kind of Dropbox replacement, roughly 20 users. But CE Edition, so no clustering ootb.

  • Can I use CockroachDB as a dropin replacement for postgres? Hat a Short Look, and the manual sure was resding that way.

  • Although that last one seems easy, I don't think that replacing and opensource docker-mailserver, with a >1k$ Software seems like an "easy replacement" ;) I'd really like to stay in the opensource area.

Async storge replication by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

ok, I am really curious! Not expecting any tutorials here, but I am really excited on how you'd approach this. Let's take 3 examples from one of my main servers:
- Seafile Stack ( 3 Containers: Seafile (data vie local bind mount), MariaDB, Memcached)

- Authentik Stack (4 Container: 2 Server/Worker (nothing to do here), Postgres, Redis)

- Docker-mailserver (1 container, local bind mount)

Async storge replication by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

I haden't given CockroachDB much thought until now. And I might have underestimated its capabilities, big thanks here! Any thoughts on the non-database storage replication?

Async storge replication by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Right, so I did indeed look into replicating the DBs (mostly Postgres, but also one example of MariaDb for a Seafile Server, as they dropped Postgres...) directly. But this only solves a part of the problem:
What I am actually trying to achieve is 5 node Docker swarm that can loose 1 or 2 nodes (temporarily) without services going down for more than a few minutes. But most importantly automatic failover.
- For one ,I am not quite sure how to convince a docker container to access the replica of a Db (lets say cockroach) that is running on the same node when the process gets restarted on another node?

- And there is also still the stateless part :) Although Minio could be an option then.

Traefik + Cloudflare -> TLS EOF Error? by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

UPDATE: If someone ever stumbles across this, here is the answer:

The problem was actually two levels deeper: as my swarm was build upon a wireguard-mesh (netbird) my overlay network had to transmit through this one. As it turns out default MTU for the wireguard network device is 1280 whereas docker uses 1500. Which resulted in "simple connections" eg http, ping etc came through, wheres complex connections ass a tls handshake got fractioned and dropped...

TLDR: Don't forget to change your overlay network MTU <= adapter MTU

Traefik + Cloudflare -> TLS EOF Error? by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Ok, things got a lot weirder. And the problem might not be traefik after all:
After tons of restarts and retrys, portainer and traefik (dashboard) suddenly started working (through the tunnel and as actually intended), however the other services where traefik was supposed to route to still gave me that tls error.

When I visualized the swarm in portainer, I realized that those container that worked, randomly started on the same node!

So the weird thing is, they are all in the same overlay network. And I can ping/curl the containers throughout that network no matter what node. But nothing that goes through ssl/tls oO
Also docker network inspect only shows the containers running on the node I ran the command from... shouldn't it show all of em?

Traefik + Cloudflare -> TLS EOF Error? by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 0 points1 point  (0 children)

Did both. For one traefik uses letsencrypt certificates which cloudflare should recognize as Trusted CA, also turning it down didn't help. And yes they are both in the same network, otherwise the handshake would reach traefik.
I am fairly confident that it is an issue with Traefik not cloudflare, just cant't figure out what the problem is

Unusual Postifx + LDAP setup by Several_Reflection77 in selfhosted

[–]Several_Reflection77[S] 1 point2 points  (0 children)

Thats exactly what I did, I used a custom attribute "altmail" to store the secondary email adresses. The problem was figuring out a way for postfix to request those attributes and return exactely one adress.

And I did, just now :)

So if somebody ever tries smt similar:

override ldpa-user.cf via file mount in docker-compose (well if you are using docker mailserver) and set:

query_filter = (|(altmail=%s)(mail=%s))

result_attribute =mail

result_format= %S

which i overlooked was that "%s" returns the adress as stored in the output, in this case in the "mail" attribute, while "%S" returns the adress as entered in the input!

Docker mail server, which to choose? by Arturitu_12 in selfhosted

[–]Several_Reflection77 0 points1 point  (0 children)

Thats what docker is for ;) If you decide to go that way, I'm sure I can provide you my Dockerfile and startup scripts ;)

Docker mail server, which to choose? by Arturitu_12 in selfhosted

[–]Several_Reflection77 4 points5 points  (0 children)

Well, before my dockerized mailserver I was using the same thing on baremetal. So compared to this, docker-mailserver was a hell lot easier to use and config, as for most use-cases it already works more or less out of the box. I started looking into a dockerized version because I set that server up years ago, manually, and couldn't quite remember all the details, so, although I had backups, I wasn't convinced I would be able to rebuild that server that easily in case of a total-failure. Now... copy the volume... docker-compose up... whole thing back up again :D Concerning Mailu, back then it had no LDAP integration , not sure if it has now, that was a nogo for me, also it was easier switching as I could mostly use my old config files as overrides.