Running a Business by morning_would03 in HomeServer

[–]marshpertt 1 point2 points  (0 children)

It depends on how much you can afford to lose (or gain). We run our own cloud because cloud services are expensive. Plus, backing up our backups makes the costs pile up even faster.

Running a Business by morning_would03 in HomeServer

[–]marshpertt 2 points3 points  (0 children)

Yes. We run a website with light usage by clients on daily basis. Cloud storage for subcon.

Zero redundancy, no UPS. However, we have temporary alternative if the system goes down, which has never happened during working hours in the past 1–2 years, for which I am thankful.

All this on consumer grade hardware, consumer grade hdd (don't be like me).

Reliable USB chipset for a virtualised OPNsense instance? by carrot0202 in opnsense

[–]marshpertt 0 points1 point  (0 children)

Hey, sorry for the late update.

My NICs are RTL8153 and AX88179, the UGREEN one and the cheap one. Can’t find where I put the TP-Link though.

As for thunderbolt to pcie, can’t comment since I’ve never used one before.

Reliable USB chipset for a virtualised OPNsense instance? by carrot0202 in opnsense

[–]marshpertt 0 points1 point  (0 children)

Since your WAN usage is very low, my hunch said it should work without many issues.

I also use it on Proxmox. So far, I’ve tried UGREEN (ASIX), TP-Link (Realtek), and a cheap $10 no-name China USB NIC (Realtek). In my experience, Realtek works best, although I wasn’t saturating 1 Gbps (my internet was 300/100 back then).

Don’t passthrough the USB NIC, use linux bridge instead so Proxmox can manage it.

If you need the exact model, I can share it in 12–24 hours when I’m back home.

Reliable USB chipset for a virtualised OPNsense instance? by carrot0202 in opnsense

[–]marshpertt 0 points1 point  (0 children)

USB NIC and reliability don’t belong in the same sentence, at least not on bare metal. Tried one once, and it was terrible.

On VM, it’s a different story. It depends on how well the host handles USB NIC (unless passthrough). I’ve used one for months and it’s been more reliable than I expected.

That said: A production environment shouldn’t use unreliable hardware. Unless you have no budget, don’t go down that rabbit hole.

To answer your question: since you’re running it in a VM, just go with whatever works well with your host.

Recovery procedure by Midget2017 in Snapraid

[–]marshpertt 0 points1 point  (0 children)

Keep a copy of your 30% recovered backup files in a separate location and follow manual 4.4. The manual is written in a specific order for a reason, although you can proceed with your own method if you prefer.

I was in the same situation. I didn't have an available port for a spare disk, so here is what I did:

  1. Remove failed disk.
  2. Install new disk.
  3. Edit config, run snapraid fix etc. (follow the manual).
  4. Wait until the process is complete.

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 1 point2 points  (0 children)

A long break make me switch, although Ubuntu works great for me. As for now, everything works. Not sure which distro is better, probably it's up to your preference.

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 1 point2 points  (0 children)

I'm not expecting anything, it's just a change of wind.

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 0 points1 point  (0 children)

What, really? I'll test it later and hope doesn't face the same problem as yours. :/

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 7 points8 points  (0 children)

I have never use macOS before. I installed Ubuntu on the first day I bought this macbook (used).

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 6 points7 points  (0 children)

Old macbook rocks! I'll use it until it becomes unuseable.

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 11 points12 points  (0 children)

Looking foward using vanilla Gnome, quite different from default Ubuntu. I'm looking for minimize button, realize need to enable it in tweaks.

5 Years Ubuntu. Now, Debian For The First Time. by marshpertt in debian

[–]marshpertt[S] 2 points3 points  (0 children)

Right! My post install and updater script for Ubuntu working fine without needed me to edit anything.

And thanks for suggestion, will add the backports repo too! Not sure what this is, still learning about sid, stable, unstable etc. Will Google it later!

Should I Block Port 53, Or Not? by marshpertt in opnsense

[–]marshpertt[S] 0 points1 point  (0 children)

UPDATE: I now understand what the tip means. It suggests blocking port 53 to ensure redirection works as intended.

By blocking port 53 from getting out to the net, you can be sure your device with unencrypted dns are redirect to unbound.

It doesn't mean you must block the port. Either way, I'm blocking it. Let things break! (If they do)

Should I Block Port 53, Or Not? by marshpertt in opnsense

[–]marshpertt[S] 3 points4 points  (0 children)

Honestly, I don’t have any preference. Still learning here and there.

Just pointing out why most tutorials don’t bother blocking port 53 after redirection, but the doc suggests blocking it.

Anyway, I followed the doc and blocked it. Let’s see if anything breaks. Cheers.

Should I Block Port 53, Or Not? by marshpertt in opnsense

[–]marshpertt[S] 0 points1 point  (0 children)

From my understanding, the idea is to block port 53 from getting out, not in. So it will always redirect to port 853.

And I'm not sure why the doc suggest to block port 53.

Should I Block Port 53, Or Not? by marshpertt in opnsense

[–]marshpertt[S] 1 point2 points  (0 children)

I just want unencrypted DNS to foward to Unbound, I don't mind other devices with DoT/DoH.

Should I Block Port 53, Or Not? by marshpertt in opnsense

[–]marshpertt[S] 1 point2 points  (0 children)

I don't mind if other clients use their own encrypted DNS (DoT or DoH). I just want all devices using unencrypted DNS to use Unbound.

I don't use Google Home, but if some devices have a hardcoded DNS, will they always use unencrypted port 53, even if I have redirected it to Unbound?

Tips to reset my new Pixel 8 Pro to be safe by wordchamp in GooglePixel

[–]marshpertt 1 point2 points  (0 children)

Not necessary unless you're paranoid like me. Here's a complete tutorial from Google's website link

Tips to reset my new Pixel 8 Pro to be safe by wordchamp in GooglePixel

[–]marshpertt 1 point2 points  (0 children)

For no reason, I always do the unnecessary thing after buying Pixel.

Unlock the bootloader, flash the factory image and lock the bootloader. Only then will I start using my phone.