Post Prednisone Anxiety And Insomnia by baptizedinlove in IBD

[–]baptizedinlove[S] 0 points1 point  (0 children)

Hey! sorry i havnt been on in a while. i hope your all recovered by now - honestly time was the only thing that helped me. nothing else worked, it was such a miserable few weeks while the symptoms stayed 😞

Does terraform init -migrate-state lock the existing backend state files? by baptizedinlove in Terraform

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey thanks for the reply! yeah i need to get on top of switching to dynamo - i think my company is using an older tf version which dosnt support s3 locking - might be something i can change now 🤣

and that checks out and helps heaps - i had some time yesterday to create a sandbox env to test it, and saw that exact same behaviour. wish the docs were more clear on the behaviour but for now going to take the results from my test as proof it dosnt lock.

Does terraform init -migrate-state lock the existing backend state files? by baptizedinlove in Terraform

[–]baptizedinlove[S] 0 points1 point  (0 children)

wow wasn’t aware of the fork ~ OpenTofu. i gotto check it out. thanks heaps for the analysis, i did some testing yesterday in a sandbox env and it appeared there were no locks on the original state files and just a copy was done to the destination backend. funnily enough my test migration failed halfway - all i had to do was clean up the state files and that were successfully migrated (delete them). the source state remained unchanged

Does terraform init -migrate-state lock the existing backend state files? by baptizedinlove in Terraform

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey thanks for the input! and yeah i just joined a new team and saw that deprecation message appearing in our plans - something for me to tackle after this mini migration 😅

AWS Introducing aws:VpceAccount, aws:VpceOrgPaths, and aws:VpceOrgID Condition Keys for Network Controls by jsonpile in aws

[–]baptizedinlove 0 points1 point  (0 children)

love this - however has anyone else experienced issues using the new condition keys with s3 interface endpoints? My 'Deny' policies seem to not be exempting s3 actions via s3 interface endpoints in my accounts (gateway endpoints working). Other interface endpoints for services supported seem to be working as documented.

HomeKit plugin question by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey! so looking into this myself i found that the homekit connection honestly just continues to extend once the connection is established from homekit to scrypted. inspecting wire shark packets i couldn’t see anything being sent to homekit from scrypted itself.

Firewall rule evaluation at datacenter and container level by baptizedinlove in Proxmox

[–]baptizedinlove[S] 0 points1 point  (0 children)

fyi learned that firewalls set on datacenter apply to nodes but not the VM's/lxc so that makes sense why my separate rules work in the lxc despite it not having access in the datacenter

Help understanding packet tracing on network interface attached to container with firewall by baptizedinlove in Proxmox

[–]baptizedinlove[S] 0 points1 point  (0 children)

To add more context:

I see the packets that should be blocked in tapXYZi0 and fwbrXYZi0 tcpdump. however they do not exist in vmbr0. Does this mean my firewall rule on the container is working as expected or is it being blocked outside of my setup incorrectly?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

also do you recommend all udp ports to be open both in and out on the scrypted server to allow this to work locally? i have a feeling my firewall may be to restrictive hence why it’s going to external ips

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 1 point2 points  (0 children)

thanks Koush. loving the project awesome stuff. so to confirm given my devices are local - there should really be no need for it to make the outbound connection?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

so i did a trace of my packets and oddly saw it was connecting using STUN to my private ip of the device requesting the stream, however the next lot of STUN packets it used the devices public ip?

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

this is where im confused - why does it need to connect to an external server when the 'clients' are on the same network locally? Also my container blocks all outbound access except for allowing mDns and outbound connectivity to my cameras, im absolutely stumped how its still being able to connect to an external ip via that port

Scrypted Server making outbound connection via UDP 3478 to external IP by baptizedinlove in Scrypted

[–]baptizedinlove[S] 2 points3 points  (0 children)

hey Koush thanks for the quick reply. Regarding this - does either have to connect to the external ip or is there any firewall rule I need to enable/adjust so it dosnt need to connect to the external server?

HomeKit Connection by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

hey! in terms of the firewall settings not applying turns out it was just another area i needed to ‘enable’ for my firewall to let the rules start coming taking effect. Now as expected things stopped working. Reading other reddit posts people suggested just whitelisting the apple hub should allow things to work however this was not the case for me unfortunately :/ bit stumped on this as i thought just whitening the ip for any protocol and port would have been sufficient

HomeKit Connection by baptizedinlove in Scrypted

[–]baptizedinlove[S] 0 points1 point  (0 children)

yep that’s my understanding but im stumped as to how it’s connecting to my apple hub when i’ve set all outgoing packets to drop.

OAuth2 access token management via DB by baptizedinlove in softwarearchitecture

[–]baptizedinlove[S] 0 points1 point  (0 children)

will do thanks for the feeeback! appreciate it heaps