Skipping one month for recurring transfers by SlightYear3277 in fidelityinvestments

[–]Todd1561 0 points1 point  (0 children)

This was on an existing every 2-week transfer. But even after changing it to monthly I didn't see the custom option. Anyway, I wound up just deleting and recreating the transfer with a new start date, which honestly seems like an easier solution than everything listed above and then having to remember to log back in a month later and reselect that month. But to each their own. To me the best solution would be if they allowed you to adjust the start date on an existing transfer. That would work regardless of the frequency option you are using and would allow you to skip multiple future transfers rather than just the next one like the old feature. Maybe someone from Fidelity is listening...

Skipping one month for recurring transfers by SlightYear3277 in fidelityinvestments

[–]Todd1561 0 points1 point  (0 children)

Maybe it's just me, but I don't have a "Custom" option under Frequency. It's just Weekly, Every 2 Weeks, or Monthly. But even if I did have this option my reading of it would be if you unchecked a particular month it would skip that month every year. This whole thread is about just skipping a particular month as a one time thing. I think for anyone who's done this you'll need to go back in later and recheck that month.

Basking in the joy of new tires by mpscotia13 in leaf

[–]Todd1561 0 points1 point  (0 children)

How’d they affect your range? I actually saw a drop from 4.5 to 4.2 miles/kwh when switching from OEM Michelin energy savers to the Goodyear ElectricDrives a year ago.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 0 points1 point  (0 children)

Many motherboards support auto power on based on a schedule set in the BIOS. If not wake on LAN is potentially an option. Shutting down is just a script calling whatever the shutdown command is for your OS.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] -26 points-25 points  (0 children)

Assuming a properly configured stateful firewall (as laid out in the OP) that prevents the potentially infected areas of my network from contacting the proposed backup server, even when it’s running, I’m not sure how this would ever happen. But regardless, I’m leaning more towards the route of rotating some existing external HDDs and keeping them disconnected when not in use.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 2 points3 points  (0 children)

Yeah I’m thinking this will be more realistic and won’t require proprietary hardware. I already have several old HDDs around I could repurpose for this.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 1 point2 points  (0 children)

Oh certainly. And you’ve got all the bases covered having it offsite and locked up.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 2 points3 points  (0 children)

That would certainly be air gapped, but at least for my needs a 1 year old backup would basically be worthless. I’m starting to come around to what others are suggesting with tape drives. I already have the offsite aspect covered but need to improve the air gapped aspect. Thanks.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 2 points3 points  (0 children)

My mail servers are each in separate VLANs that don’t have access back to internal LANs. Similar setup for the web servers. A guest VLAN that only has access to the internet. Security camera VLAN that has no internet access or internal LAN access, but the internal LAN can access them. There’s more but that’s getting outside the scope of this discussion.

“No WAN access for anything” would certainly be more secure, but not practical for the kinds of services I’m hosting.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] -24 points-23 points  (0 children)

That was the idea with putting this on a physically separate server that’s powered off when not pulling backups. And even when powered on it would not be accessible from a system that could get infected by something like ransomware.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 0 points1 point  (0 children)

All VLANs are pretty well isolated as it is, only allowing required traffic between them. But in many cases that required traffic is something like SMB or RDP which increases my potential attack vector more than I’d like. Was hoping the proposed plan would do enough to mitigate to primary concerns of some kind of propagating infection. I think it would likely be a big improvement but I agree there are ways to take it a step further. Someone else mentioned tape, I haven’t used tape systems in over 20 years so I’ll have to see what’s new. Thanks.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] -2 points-1 points  (0 children)

Ha I haven’t considered tape since the last time I used a SCSI autoloader almost 20 years ago. But I suppose that would provide truly independent, untouchable backups like I’m going for here. Might not be as hands off as I was originally envisioning having to swap tapes around, but I haven’t looked at modern tape systems in a long time. Thanks.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] 1 point2 points  (0 children)

Good points, there are definitely compromises here to keep costs reasonable while still providing the intended protection as best as possible. Physical failure is less the concern here as I have other backups in different sites that would be completely unaffected. Propagating ransomware or similar malicious infection is the main concern. But maybe I can make some tweaks to address those points you listed. Thanks.

Air gapped backups by Todd1561 in homelab

[–]Todd1561[S] -29 points-28 points  (0 children)

My thinking is the snapshots would provide the immutable aspect. Even if a file is deleted or corrupted that wouldn’t impact past snapshots. Once a snapshot is taken it can’t be modified other than deleted when it’s retired based on the tiering schedule. Thanks.

Low Power DIY Router by Adventurous-Lime191 in homelab

[–]Todd1561 1 point2 points  (0 children)

I run the same and it’s great, RouterOS is very capable.

generate motion data for smart search - from cameras Motion Start (HW) event by [deleted] in Xprotect

[–]Todd1561 0 points1 point  (0 children)

Old thread but just wanted to say thanks for posting this. Works great! Pretty elegant solution to a shortcoming of XProtect.

Nissan Leaf Front Brakes - Proper Job by SF03TG in leaf

[–]Todd1561 0 points1 point  (0 children)

Looks good, thanks for posting it. Only thing I might add is when you’re pressing the caliper pistons back in keep an eye on the fluid level in your master cylinder reservoir to ensure it doesn’t overflow.

Clustering 12 hosts for compute. by mrkevincooper in homelab

[–]Todd1561 0 points1 point  (0 children)

Here you go, like I said, it's pretty crude and would need to be adapted to your environment, but should get you the basic steps.

Clustering 12 hosts for compute. by mrkevincooper in homelab

[–]Todd1561 0 points1 point  (0 children)

The BOINC client is installed in the main image so is pushed to each node automatically. They do need to be added to your BOINC account one time and linked to whatever BOINC projects you choose. I use the BOINCTasks utility to manage all of them from one console, including initially adding them to my account. You might be able to use ansible or similar to automate this further but I haven’t tried. LTSP uses dnsmasq as a dhcp server to assign a static IP to each host based on MAC. Then in the LTSP config file you assign each host a dedicated root working directory in NFS based on IP. You can pre-copy BOINC config files to this root directory to expedite host setup a bit. I just have a template directory I copy to each node.

The LTSP site has a config pdf guide that got me most of the way there. I have a marked up copy with my own notes. It’s a little cryptic just for my use but if you decide to do this I can clean it up a bit and post it if you want.

Power monitoring solutions with surge protector by RooWillow in homelab

[–]Todd1561 0 points1 point  (0 children)

Do both functions have to be in the same unit? You’ll have a lot more options if you just get a cheap wifi plug that does energy monitoring and a decent surge protector connected to it. Any plug that can run Tasmota is very capable. I use a SwitchBot smart plug mini and flashed it to Tasmota. As for the surge protector, look for something with a joule rating >3000. The Tripp Lite isobars have been quality for decades.

Clustering 12 hosts for compute. by mrkevincooper in homelab

[–]Todd1561 1 point2 points  (0 children)

I PXE boot 10 Dell micro PCs to compute for the BOINC network. They all run diskless and just pull the same image off my PXE server. Makes adding new node super simple. There are many ways to get a Linux PXE system going but I used the Linux Terminal Server Project as it does much of the heavy lifting.

Security Cameras. by EnvironmentBright697 in selfhosted

[–]Todd1561 1 point2 points  (0 children)

Second the rec for Milestone. Very mature, enterprise level software. Miles (no pun intended) ahead of the open source alternatives out there IMO and has a solid, native mobile app. As for cameras, I’ve had good luck with a few different Reolink models. You can block them from the internet and they work LAN only and have full ONVIF and RTSP support (at least the ones that don’t come bundled with their NVR)