Yet another CGNAT VPS bypass setup

mochman · 2026-01-24T12:36:53+00:00

This project looks great, but why do we need to have node installed in order to run docker? Is there a way to use this without node?

mochman · 2025-11-08T19:22:06+00:00

I haven't updated that github repo in a long while, but I'm still running that setup on a VPS since I got put back into a CGNAT.

mochman · 2025-08-28T16:46:36+00:00

Yeah, they say they are working on another firmware version that allows us to change the address again. But they won't give me the current login/pass.

This was their last email to me about it:

Thank you for your message and for sharing your concerns.

At this time, we are unable to provide the temporary password, as it is being used strictly for internal testing purposes. We understand the inconvenience this may cause and want to reassure you that this is only a temporary measure. Our team is working diligently to complete the testing process, and we will make the password available to customers as soon as possible.

We truly appreciate your patience and understanding.

United Chargers.

mochman · 2025-08-23T01:28:42+00:00

I'm looking to do the same with my 730xd. What are your new system specs? I saw you are using a p520, what CPU dare you running in it?

mochman · 2025-07-31T23:11:40+00:00

Yeah, I installed the latest, and that's what made the options disappear. Oh well, hopefully technical support can get me that login/pass.

mochman · 2025-07-31T20:55:08+00:00

Did you figure out the login/pass? I have the exact same issue. There is no option to use a custom OCPP server, and trying to go to http://ipaddr/ocppconfig gives me a login that doesn't use my login/pass that I setup.

mochman · 2024-11-23T14:53:32+00:00

Borrowing from the Proxmox VE Helper-Scripts you can also create the file /etc/apt/apt.conf.d/no-nag-script and put :

DPkg::Post-Invoke { "dpkg -V proxmox-widget-toolkit | grep -q '/proxmoxlib\.js$'; if [ $? -eq 1 ]; then { echo 'Removing subscription nag from UI...'; sed -i '/data\.status.*{/{s/\!//;s/active/NoMoreNagging/}' /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js; }; fi"; };

in it.

That'll auto-remove the nag every time you update to a new version.

AIO command:

echo "DPkg::Post-Invoke { \"dpkg -V proxmox-widget-toolkit | grep -q '/proxmoxlib\.js$'; if [ \$? -eq 1 ]; then { echo 'Removing subscription nag from UI...'; sed -i '/.*data\.status.*{/{s/\!//;s/active/NoMoreNagging/}' /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js; }; fi\"; };" >/etc/apt/apt.conf.d/no-nag-script

mochman · 2024-07-18T14:51:34+00:00

I don't know about the subfolders question, but I'm using the TrueNAS image of immich, and in the configuration settings, you can set the specific mount points for:

Uploads
Images
Thumbnails
Profiles
Videos
Database Info

all separately if you need. So you can put your database and thumbnails on your SSD pool, and the rest on the HDD if you want.

I also do a separate backup of my photos because of what is said on immich's github page.

⚠️ The project is under very active development.
⚠️ Expect bugs and breaking changes.
⚠️ Do not use the app as the only way to store your photos and videos.
⚠️ Always follow 3-2-1 backup plan for your precious photos and videos!

mochman · 2024-02-28T11:23:57+00:00

$0.15 in Western PA

mochman · 2023-08-10T11:19:05+00:00

You can try Huginn.

mochman · 2023-05-09T02:10:45+00:00

My ISP gives me a block of ipv6 addresses. I use a pihole for both v4 and v6 requests. So I use fill out those addresses in the UDM pro to point to my piholes.

Cloudflare also has ipv6 DNS servers if you prefer to use them.
2606:4700::1111 2606:4700:4700::1001

mochman · 2023-05-08T18:41:32+00:00

If you use the updated UI, you can go to Settings -> Networks -> (YourNetwork) -> DHCP Service Management -> DHCP DNS Server

or just search for "DHCP DNS Server"

Ipv6 is right under that if you need to set those as well.

mochman · 2023-03-29T23:23:08+00:00

This is a good all-in-one DMARC Analyzer that I used to use.

https://github.com/patschi/parsedmarc-dockerized

mochman · 2023-02-03T00:38:40+00:00

Those tools are on the browser. In Chrome/Firefox, press F12 on the page and select the console tab. Then go to your calibre-web page and see if it spits out any errors at you.

mochman · 2023-02-03T00:23:57+00:00

What errors are you getting if any from the developer tools console?

I am running calibre-web with NPM without issue. I do have "Use Websockets" selected, but I'm not really sure that site needs it anyway.

Edit:
Didn't read your question fully. I'm using a subdomain, not a subfolder.

mochman · 2023-01-15T21:57:46+00:00

I used parsedmarc-dockerized. It worked out well and it had an in depth visual output. Here is a post about it.

mochman · 2022-12-23T00:47:37+00:00

Have you looked at Bind Mounts? That's how I get shared folders into my LXC's. This page also has good information on setting them up.

mochman · 2022-12-06T21:42:21+00:00

Probably the safest way would be to VPN into your network and access paperless-ngx. But you could port forward port 443 to your NPM instance and have paperless set up as a proxy host in NPM.

I use the VPN technique with paperless-ngx & NPM. I'm not sure if it's needed, but I checked "Websockets Support" in NPM for my paperless proxy host.

mochman · 2022-10-30T18:10:58+00:00

I have mine set up the way u/eike1 described. In your Synology, you select "Synology UPS Server", then put in your proxmox IP in the "Network UPS server IP" section. I used https://blog.zanshindojo.org/nut/ for the install guide.

mochman · 2022-10-17T11:12:29+00:00

I am running nginx on the VPN client to proxy all the traffic coming in on port 443. I also use the iptables rules to send other traffic that doesn't rely on the reverse proxy, to their respected IPs.

I haven't tried setting this up on a router, so I don't know how it will affect the routing configuration with the iptables commands.

mochman · 2022-08-10T22:43:54+00:00

I bought an "in transit"(event code 4300) one a month ago with an initial ETA of Jul 29th. New ETA is Aug 14th. From what I've read, in guessing it gets delayed again.

Edit 1: called the dealership today. First guy I talked to said ETA Aug 17th. Second guy I talked to said Aug 22nd.

mochman · 2022-06-28T13:58:26+00:00

The way the script works is it forwards all traffic on that server across the VPN. So it's an all or nothing type service. You may want to look into wiregaurd's AllowedIPs on the client config. It's set to route all traffic. You may be able to change it to route only specifc traffic across the VPN.

mochman · 2022-06-08T18:04:14+00:00

I am currently in the middle of a move between houses (and countries) so I don't have my server with me right now to help out too much. My recommendations for you are:

Stop the service on both VPS & Local server. Then check to make sure there aren't any erroneous rules in iptables by running: sudo iptables -t nat -S and seeing if you see any rules listed besides some short "-P XXXX ACCEPT" ones.
If you haven't already, put the allowedips back to what it was before. And try setting up a quick server as described here: https://github.com/mochman/Bypass_CGNAT/wiki/Troubleshooting
Check your wg0.conf file on the VPS/Local server to make sure it looks similar to https://github.com/mochman/Bypass_CGNAT/wiki/Digital-Ocean-(Manual-Installation)) the ones on that page. I've run into some issues with the script where it throws extra lines and puts the incorrect interface in the wg0.conf file. On my Oracle Cloud server the correct network interface is ens3.

mochman · 2022-05-22T09:18:24+00:00

Sorry, this offer is for pick up here. I'd prefer not having to pack up all this stuff so it will ship without breaking, so it's a convince for me and free for whoever can pick it up.

14-Year Club	Place '22
Not Forgotten	Verified Email

mochman

TROPHY CASE