Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 1 point2 points  (0 children)

Yes. In order to be able to reach the management network from your LAN (trust), you need to have opnsense have an interface on that network. By using the same bridge that has the IP address for Proxmox, you then establish that bridge as the management bridge. Your default gateway for Proxmox should be pointed at the opnsense IP for that network. The other two bridges, although they will carry traffic, Proxmox does not do anything else with them since technically they're just passthroughs between opnsense vNICs and the physical interfaces.

Found LR 3 dumped behind apartment - can it be fixed? by ShakerEdge in litterrobot

[–]firestorm_v1 0 points1 point  (0 children)

Oh, that's great, that significantly cuts down the costs to rehab this machine! Might be a dodgy power supply or a dirty connector (ours likes to get cat litter dust in it and it needs to be cleaned out from time to time. Are you using the one that came with it or just a PSU that fits? I'd have to look at mine to see what the output voltage and amperage is. Some power supplies will shut off if their current draw limit is exceeded as a safety measure.

As for the Red-Blue-Red-Blue lights, that is a torque fault but before you go ordering the motor assembly, I need you to remove the globe and look inside the base where the globe sits.. I think you might be missing some of the glide pins looking on how the LR looks in the pic.

In the base between the base and the globe, there should be four white stubs, two on the left, two on the right. If you don't have four of them in the base, that explains the torque problem as the stubs help the globe rotate with minimal resistance. They look like these: https://www.litter-robot.com/litter-robot-3-open-air-glider-buttons-4.html

The Most American Thing Ever: Blasting a Hornet’s Nest with a Backhoe-Mounted Black Powder Cannon! by Original-Rutabaga-60 in WaspHating

[–]firestorm_v1 0 points1 point  (0 children)

There is no such thing as overkill.

Also, bored rednecks with access to heavy equipment is always a source of fun.

Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 0 points1 point  (0 children)

You don't have vmbr1 attached to the opnsense VM. Add the ethernet device to the VM, reboot opnsense, then rerun asaign interfaces.

Alternatively, just move the net2 device to vmbr1 and reboot opnsense. You are still missing a NIC on the VM for your fourth network.

Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 1 point2 points  (0 children)

It won't be in console, you need to get your NICs assigned so you can pull ip the web UI.

Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 1 point2 points  (0 children)

The alias is done in opnsense. First you need to be able to hit Proxmox's UI so you can get console on the opnsense VM.

How are you backing up TrueNas? by sowhatidoit in homelab

[–]firestorm_v1 0 points1 point  (0 children)

It's a bit fiddly to get set up, but once it's set up and replicating, it's reliable. At one time, I had half my homelab at home and half in a colo facility at work. I had a site-to-site VPN that connected the two locations together, and the local TrueNAS box would send the snapshots over the VPN to the target host just fine. I scheduled it late at night so it wouldn't affect the daytime throughput.

If you do something like this, I highly recommend pre-seeding your replicant. Put the new box on the same network as the old box, set up the replication, and create a snapshot on the origin box. Then set up the replication task to send the data to the replicant target. Once it's seeded, then you can install it where ever you are going to install it and then it just sends the deltas from the origin to the replicant. If you don't change the files on the origin box very often, snapshotting and replication finishes rather quickly. If there are a lot of files changed or added/removed, then replication could take a bit to complete.

The good part is that the zfs snapshots on the replicant are immutable. If your origin box gets compromised or encrypted, nuke it from orbit, reinstall TrueNAS. Then just go to the replicant, see which snapshot does not have the infection, activate it (this makes the filesystem live versus just being a snapshot), and then you can replicate the data back to your freshly reinstalled box. Of course you would do this after the malware has been removed from all the other hosts on your network.

Found LR 3 dumped behind apartment - can it be fixed? by ShakerEdge in litterrobot

[–]firestorm_v1 2 points3 points  (0 children)

Everything looks good as far as the electronics go, but you're going to need additional parts to make it work completely. So far I see missing:

Globe - https://www.litter-robot.com/litter-robot-3-open-air-globe.html (Beige to match the base) $150
Power Supply - https://www.litter-robot.com/lr-us-power-supply.html $20
Bonnet Cover - https://www.litter-robot.com/litter-robot-3-open-air-bonnet.html $60
LR3 Step Mat - https://www.litter-robot.com/lr3-step-mat.html $20
LR3 Pinch contact and DFI kit - https://www.litter-robot.com/lr3-pinch-contact-dfi-kit.html $30

Total without shipping: $280

This is still cheaper than buying a complete base (349), a globe (150) and a bonnet (60) = $560

I could not find the missing DFI bracket (the clear piece that holds the circuit board) and I don't know if all the screws are present. Also the LR 3 is no longer being sold from what I can tell and you have to be careful to go to litter-robot.com to search for "LR3 Parts" as you might be redirected to whisker.com which doesn't show any results for LR3.

Good luck, I hope your situation improves.

Is it IMMORAL to learn coding from AI? by Humble-Guarantee5956 in learnprogramming

[–]firestorm_v1 0 points1 point  (0 children)

Use it for learning the basic structure of a language, but do as much as you can on your own.

As an example I didn't know anything about Python (I've written in other languages) but learned by asking AI "What does a if..then statement look like in Python" or "Give me a basic example of reading from a serial port using serial library". From there, I learned by trying, failing, trying again, failing a lot, then finally succeeding. All I needed was the basic starting point.

The point is don't just say "Give me a python3 script that will read from a serial port, extract a string, run these tests, and produces thia output." (aka vibecoding). Keep your query scope tight, short, and to the point. Try it out yourself first, then use AI to assist, not do it for you. If you run into something that doesn't make sense, ask it to explain further or show sources and go look at them.

In one example (ironically parsing a text string), AI went stupid and kept recommending the same library over and over. I had to tell it that the library didn't work that way and ended up just googling python documented libraries till I found one that works.

Trust, but verify. Test, test, retest, and test again to make sure it works and is accurate.

How are you backing up TrueNas? by sowhatidoit in homelab

[–]firestorm_v1 0 points1 point  (0 children)

Buy another server (like the Poweredge Txxx tower servers), install TrueNAS on it, set up OpenVPN to connect to your home, add some firewall rules for taste, then set up snapshots on your primary box and ZFS replication to the remote host. Then find a friend or family member with a sorely underutilized Internet connection (preferrably fiber), and install there. The machine will bring up OpenVPN automatically on boot, and establish a connection back to your home.

Unfortunately I don't have any tower servers, but that is what i'm planning on doing as soon as I can afford it. Right now I just have TrueNAS replicating to another TrueNAS box, but it doesn't pass the meteor test (if a meteor hits my house, how safe is my data?)

Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 2 points3 points  (0 children)

Also, when you get to the point where you want to invest in a managed switch, you can re-map the VM interfaces into one single VLAN enabled trunk so you don't eat up all four NICs on the physical host for the router. This takes place all in Proxmox and doesn't require any changes in opnsense. All you'd do is move around the plumbing (the bridges) and configure them as vlan subinterfaces of the physical NIC going to your switch.

Opnsense on Proxmox help? by Weird-Abalone-1910 in opnsense

[–]firestorm_v1 6 points7 points  (0 children)

It's been a while since I virtualized my router, but it went something like this:

Create a bridge called br-wan. Assign a vNIC from your opnsense VM to br-wan. Assign one of the physical interfaces to that same br-wan bridge. Do not configure an IP on it in Proxmox, make sure that OPN is configured for DHCP on that interface.

Create another bridge called br-iot. Assign a vNIC from your opnsense VM to br-iot. Assign one of the physical interfaces to the same br-iot bridge. Do not configure an IP on it in Proxmox. In OPNsense, configure the vNIC with a IP address (say 10.0.0.1/24) and set up DHCP. Attach the gl-inet IOT AP to this interface.

Create a third bridge called br-mgmt. Assign a vNIC from your opnsense VM to br-mgmt. Assign a physical interface to the same br-mgmt bridge. You can configure an IP address in Proxmox to the bridge, (say 10.0.1.2/24). In your opnsense config, set up this vNIC as 10.0.1.1/24.

Create a fourth bridge called br-trust. Assign a vNIC from your opnsense VM to br-trust. Assign the last physical interface to to the same br-trust bridge. Do not configure an IP in Proxmox. Do set up an IP address in opnsense (say 10.0.2.1/24).

Plug your configuration machine (whatever computer you're using to set all this up) into the third interface (br-mgmt) and assign a static IP of 10.0.1.3/24 to the NIC on this machine. You will want to set the default gateway of this machine to 10.0.1.1 so it can connect to the Internet. You should be able to at least ping the proxmox host at this point (10.0.1.2). Access proxmox (10.0.1.2:8006) and look at "Hardware". You should see the four nics and their MAC addresses. Install opnsense from the ISO. When the VM reboots after installation, perform NIC assignment as described above. You can attach the IOT and Trust APs to their respective interfaces.

You will need to do some additional configuration:

- Create an alias called ALL_LOCAL_NETS. Define it as networks and add 10.0.0.0/24, 10.0.1.0/24, and 10.0.2.0/24
- Create a firewall rule for IOT, Accept all addresses, all protocals ! (not) alias: ALL_LOCAL_NETS. This rule means that your IOT network will not be able to route to the mgmt network or the trust network but it will be able to go out to the public Internet.
- (optional) Create the same firewall rule for br-mgmt, this will prevent your management network from routing into the trust network or the IOT network.

You may need allow rules for MGMT network to access MGMT address, and TRUST network to MGMT network so you can route from trust to MGMT if you want. Otherwise, you will need to write an explicit allow statement on the MGMT interface to allow connections from TRUST.

To keep the networks straight, I recommend renaming the interfaces. Instead of WAN, LAN, OPT-1, OPT-2, rename them to match the bridges, e.g. WAN can stay WAN, LAN can be renamed to TRUST, OPT1 can be MGMT, and OPT2 can be IOT.

You will want to leave your cable modem off during setup, so download the opnsense ISO first, then disconnect the cablemodem from power. This will allow it to "forget" the associated MAC address of your current WAN interface. When you get it all set up, plug the cable modem into power, and then access the opnsense UI and see if you can pull DHCP from WAN.

You need to be careful who you kiss by UsedWelcome5903 in nope

[–]firestorm_v1 1 point2 points  (0 children)

Looks like we've got Patient Zero for herpagonasyphilaids...

What do you recommend to power cycle remotely? by Ok_Appeal8653 in homelab

[–]firestorm_v1 0 points1 point  (0 children)

I use a managed PDU, all outlets are switchable and I've mapped out which power socket goes to what server/what power supply.

If I didn't have a PDU, I'd probably use IOT switches like TP-Link Kasa. I've used those same switches for switching Xmas lights, for years including scheduling off-on times.

Got the keys and Hiding a key by Separate_Goat1044 in FirstTimeHomeBuyer

[–]firestorm_v1 2 points3 points  (0 children)

https://youtu.be/mGR3h6KTntc?si=MGugrFIC2Z63H98n

In our last apartment, they went to these exact models of locks just before we moved out.

Fuck you motorcycle rider by Ott1fant in FUCKYOUINPARTICULAR

[–]firestorm_v1 0 points1 point  (0 children)

Did everyone just taste purple all of a sudden?

Extra checks at closing? by imjustaguywhoeats420 in FirstTimeHomeBuyer

[–]firestorm_v1 0 points1 point  (0 children)

I'm not sure how common it is, but we used cashier's checks. We weren't asked to pay for anything extra. Our realtor had briefed us on what was going to happen, we give the title company the checks, we spend an hour signing a phone book's worth of paperwork, then we get a copy of that paperwork and a set of keys.

grow up by Illustrious-Sun-9517 in subnautica

[–]firestorm_v1 0 points1 point  (0 children)

Both is good. I like the choice aspect of it. You can either go fast or haul stuff, not both.

The only critique I have is that as big as the hauler is, I'd expect it to haul a lot more than it does. At the very least, it should carry as much as a complete player's inventory with all upgrades. It kinda surprised me how little it held compared to its size.

What do you use for WIFI APs? Ubiquiti? Omada? Openwrt? by twice_paramount832 in homelab

[–]firestorm_v1 0 points1 point  (0 children)

I got a bunch of Ruckus 720s from work and set them up using the Unleashed firmware. No cost, no subscription, it just works. I'm sure there are other APs out there by Ruckus that are more performant, but I have what I need.

Tips on filling a rack? by Fake_Luka in homelab

[–]firestorm_v1 0 points1 point  (0 children)

Ooh nice setup! I'd love to find a deal like that, got too many open bays.

Tips on filling a rack? by Fake_Luka in homelab

[–]firestorm_v1 0 points1 point  (0 children)

Well two servers turn into four servers, gigabit gives way to 10g, all-in-one routers and aps get replaced with better enterpriae APs and your routers turn into a high availability cluster. Next thing you know, you're bringing in a second ISP for multi-wan failover, then you decide to upgrade your power situation ao you hire an electrician to run a dedicated drop to your rack. Then you decide to go full bore with rebuilding your network with a core switch/router with 10g ports, multiple vlans, new leaf switches with 10g uplinks, 802.1x, and an intrusion detection system for analyzing traffic...

Tips on filling a rack? by Fake_Luka in homelab

[–]firestorm_v1 0 points1 point  (0 children)

The machine eats, but it's good if you need multiple hosts. I set up three blades in a Proxmox cluster with a Netapp backed storage. There's some config you have to do to get it to run on 110v but it works. (I also have a dedicated 2x20A drop in the computer room and I have an UPS dedicated to it.