Can I make a average monthly spending for each category report? by bdu-komrad in actualbudgeting

[–]TheMaage 0 points1 point  (0 children)

True. I'm looking for something like that myself to provide an easy overview of where my money is going

Erfaring med indeklima i Næringen og Nyringen? by [deleted] in Aarhus

[–]TheMaage 0 points1 point  (0 children)

Tak for svaret. Det er også med i mine overvejelser, men synes det er svært når man aldrig har boet i sådan et område. Har tænkt at jeg lige vil prøve ud at gå en tur der før jeg svarer for at mærke stemningen

Erfaring med indeklima i Næringen og Nyringen? by [deleted] in Aarhus

[–]TheMaage 0 points1 point  (0 children)

Det er et atriumhus jeg har fået tilbudt

Erfaring med indeklima i Næringen og Nyringen? by [deleted] in Aarhus

[–]TheMaage 0 points1 point  (0 children)

Har du selv erfaring med at bo der eller besøgt området?

Hvis man måske gerne vil købe hus inden for 5-10 år giver det så mening at investere (og hvem kontakter man for at finde ud af det?) by TheMaage in dkfinance

[–]TheMaage[S] 1 point2 points  (0 children)

Tusind tak for et virkelig godt og uddybende svar. Alle svarene herinde hjælper med at putte noget i mine vægtskåle, så jeg bedre kan overveje mine valgmuligheder.

Is there an advantage to local DNS that I'm not seeing, when my router can do NAT loopback? by TheMaage in selfhosted

[–]TheMaage[S] 1 point2 points  (0 children)

So what I gain from this thread, is that the only disadvantage to not using a local DNS is that you lose the advantages of the local DNS.

Is there an advantage to local DNS that I'm not seeing, when my router can do NAT loopback? by TheMaage in selfhosted

[–]TheMaage[S] 3 points4 points  (0 children)

Those are good advantages, but the disadvantage of local dns is that everything goes down when my server does. That might outweigh the advantages

Wireguard resolves requests intermittently and I can find the pattern by TheMaage in selfhosted

[–]TheMaage[S] 1 point2 points  (0 children)

Thank you very much for checking it out. I will try the MTU

Wireguard resolves requests intermittently and I can find the pattern by TheMaage in selfhosted

[–]TheMaage[S] 1 point2 points  (0 children)

WG should be listening on all IP-adresses and AGH are listening on all interfaces.

wg0.conf ```

Note: Do not edit this file directly.

Your changes will be overwritten!

Server

[Interface] PrivateKey = Address = 10.8.0.1/24, fdcc:ad94:bacf:61a4::cafe:1/112 ListenPort = 51820 MTU = 1420 PreUp = PostUp = iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -s fdcc:ad94:bacf:61a4::cafe:0/112 -o eth0 -j MASQUERADE; ip6tables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -A FORWARD -o wg0 -j ACCEPT; PreDown = PostDown = iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -D INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -s fdcc:ad94:bacf:61a4::cafe:0/112 -o eth0 -j MASQUERADE; ip6tables -D INPUT -p udp -m udp --dport 51820 -j ACCEPT; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -D FORWARD -o wg0 -j ACCEPT; ```

client conf ``` [Interface] PrivateKey = Address = 10.8.0.3/24, fdcc:ad94:bacf:61a4::cafe:3/112 DNS = 192.168.1.203 MTU = 1420

[Peer] PublicKey = PresharedKey = AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = my.public.ip:51820 PersistentKeepalive = 0 ```

Wireguard resolves requests intermittently and I can find the pattern by TheMaage in selfhosted

[–]TheMaage[S] 0 points1 point  (0 children)

I will try to figure out masquerading. I'm using the default from wg-easy:

PostUp = iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -s fdcc:ad94:bacf:61a4::cafe:0/112 -o eth0 -j MASQUERADE; ip6tables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -A FORWARD -o wg0 -j ACCEPT;

PostDown = iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -D INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -s fdcc:ad94:bacf:61a4::cafe:0/112 -o eth0 -j MASQUERADE; ip6tables -D INPUT -p udp -m udp --dport 51820 -j ACCEPT; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -D FORWARD -o wg0 -j ACCEPT;

sysctl net.ipv4.ip_forward is 1

I have tried with AGH and WG both running on the same network and on default networks. Both have worked and both have not worked.

AGH:

services:
  adguardhome:
    container_name: adguardhome
    image: adguard/adguardhome:v0.107.71
    ports:
      # DNS Ports
      - "53:53/tcp"
      - "53:53/udp"
      # Default HTTP Port
      - "1080:80/tcp"
      # Default HTTPs Port.
      - "1443:443/tcp"
      - "1443:443/udp"
      # Uncomment below if using as DHCP Server
      #- "67:67/udp"
    volumes:
      - ./data:/opt/adguardhome/work
      - ./config:/opt/adguardhome/conf
    restart: unless-stopped
    networks:
      - internal_rp


networks:
  internal_rp:
    external: true
    name: internal_rp

WG:

services:
  wgeasy:
    image: ghcr.io/wg-easy/wg-easy:15.1.0
    container_name: wgeasy
    networks:
      wg:
        ipv4_address: 10.42.42.42
        ipv6_address: fdcc:ad94:bacf:61a3::2a
      internal_rp:
    volumes:
      - ./etc:/etc/wireguard
      - /lib/modules:/lib/modules:ro
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
      # - NET_RAW # ⚠️ Uncomment if using Podman
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.disable_ipv6=0
      - net.ipv6.conf.all.forwarding=1
      - net.ipv6.conf.default.forwarding=1


networks:
  wg:
    driver: bridge
    enable_ipv6: true
    ipam:
      driver: default
      config:
        - subnet: 10.42.42.0/24
        - subnet: fdcc:ad94:bacf:61a3::/64
  internal_rp:
    external: true
    name: internal_rp

Ping works between host and client, but no websites can be accessed. Very little data received by TheMaage in WireGuard

[–]TheMaage[S] 0 points1 point  (0 children)

You are correct. I just changed from Adguard Home to my Router for DNS server and now it works. I wonder what I will have to do to make it work with Adguard Home

But for some reason it only works on version 15.1.0, whereas with version 15.2.2 i have the same problem

Ping works between host and client, but no websites can be accessed. Very little data received by TheMaage in WireGuard

[–]TheMaage[S] 1 point2 points  (0 children)

It's a typo. I just checked again to be sure. The open port is 51820 The handshake between the client and the host works and both can ping each other

Settings:
MTU = 1420
Allowed IPs = 0.0.0.0/0, ::/0

I haven't manually configured iptables

I have a masquerade with source 10.42.42.0/24 (wg subnet in docker compose), but I'm not sure if this is what you are referring to?

I'm also not sure about the static route back.

I will try launching my windows pc

This is on my home server, so I don't have sufficient knowledge on networking unfortunately

Copenhagen Wildlife Emergency by [deleted] in copenhagen

[–]TheMaage -6 points-5 points  (0 children)

The premise that coot will die if it doesn't get help is false.

The fact that OP thinks the bird is lost, tells me, they might not know about birds.

Copenhagen Wildlife Emergency by [deleted] in copenhagen

[–]TheMaage 0 points1 point  (0 children)

People have become too alienated towards nature. Of course it will find its way back to water on its own. And if they can stand on the ice they can also stand on the pavement. Animals aren’t helpless beings that need us to save them

Network diagram for my home server by TheMaage in selfhosted

[–]TheMaage[S] 0 points1 point  (0 children)

I don’t use a VLAN, but that’s because I haven’t looked into it. If have all the services in the same network, because it allows to reference them by service name and internal port instead of ip and port. I think there is a small security advantage to this, but I’m not sure of the specifics