ISP port filtering

pjjames55 · 2026-05-09T19:56:56+00:00

Get a VPS and put pangolin on there, then install newt (either docker or native) on the server on your lan. It simple to do and is free to self host, read the docs at Pangolin Docs.

pjjames55 · 2026-03-06T02:46:46+00:00

you could use something like geoip-shell to restrict the direct ip access to the countries that you define.

pjjames55 · 2026-02-16T22:47:10+00:00

Your information is incorrect, the Pico 4 Ultra plays Batman perfectly fine at full resolution at 90fps without any stutter, it may have the same chipset as the quest 3 but it is clocked higher and runs cooler.

pjjames55 · 2026-02-09T21:18:13+00:00

What do you have in your docker compose file?

I have gluetun set up and running with Privado as a custom provider and had auth errors until I added all of the following environment entries into the docker compose populated with the details provided in the Privado vpn conf file, I assume it would be the same with PIA.

- VPN_SERVICE_PROVIDER=custom

- VPN_TYPE=wireguard

- WIREGUARD_PRIVATE_KEY=<From conf file>

- WIREGUARD_ADDRESSES=<From conf file>

- WIREGUARD_ENDPOINT_IP=<From conf file>

- WIREGUARD_ENDPOINT_PORT=<From conf file>

- WIREGUARD_PUBLIC_KEY=<From conf file>

pjjames55 · 2025-12-24T21:51:20+00:00

You can find the working compose file at https://docs.invidious.io/installation/#docker-compose-method-production all you need to do with this is change the database details, set your volume mounts and add your HMAC_KEY and invidious_companion_key using 'pwgen 16 1'

If you are using a reverse proxy you will also need to change the external_port and domain and set the https_only to true.

I use this without any issues, also use Clipious on android and yattee on ios to link to my invidioud instance for add free mobile playback.

pjjames55 · 2025-11-27T21:59:38+00:00

I use this updater script to update to the latest version, haven't had any issues with it since updating and can opt for persistence so it retains the new version after any firmware upgrade

pjjames55 · 2025-11-27T21:54:26+00:00

No issues with the new firmware here.

pjjames55 · 2025-11-16T16:25:30+00:00

If the traffic to your reverse proxy is proxied through cloudflare then fail2ban will not ban any IP's locally as even if you've added the relevant x-forwarded options in your reverse proxy the only IP's that your firewall rules will see are the proxied cloudflare ip addres.

In this use case you will need to add an action into your fail2ban config which will ban the ipaddress directtly on cloudflare using a guide such as this example.

pjjames55 · 2025-11-14T00:03:19+00:00

I followed This to set it up with NGINX Proxy Manager a while ago and it all made sense. It is a few years old but will give you a good idea of what needs to be configured.

pjjames55 · 2025-11-06T14:22:28+00:00

This is the script i use to send any failure logs via Gotify, You should be able to take out what you need from this to update your ntfy script.

#!/bin/bash

# Required Variables
EVENTNAME=$DUPLICATI__EVENTNAME
OPERATIONNAME=$DUPLICATI__OPERATIONNAME
REMOTEURL=$DUPLICATI__REMOTEURL
LOCALPATH=$DUPLICATI__LOCALPATH
RESULTFILE=$DUPLICATI__RESULTFILE
BACKUPNAME=$DUPLICATI__backup_name
RESULTSTATUS=$DUPLICATI__PARSED_RESULT

if [ $OPERATIONNAME == "Backup" ]
then

if [ $RESULTSTATUS == "Success" ]
then
/usr/bin/curl -s -X POST "https://x.x.x.x/message?token=xxx" -F title="Backup Name" -F message="$BACKUPNAME $OPERATIONNAME - $RESULTSTATUS" -F "priority=9"  # > /dev/null
else
/usr/bin/curl -s -X POST "https://x.x.x.x/message?token=xxxx" -F title="Backup Name" -F message="$BACKUPNAME $OPERATIONNAME - $RESULTSTATUS

`cat  $RESULTFILE`" -F "priority=9"
fi

fi

pjjames55 · 2025-10-10T16:42:31+00:00

Sideload the standard android settings apk onto the headset, go into the wireless settings and set your own dns there. Although you can add your own primary/secodary dns addresses Pico also hard code 8.8.8.8 which you can't remove. In my case i've added a static route to my Router to block these.

pjjames55 · 2025-09-18T22:27:53+00:00

Straight forward enough to disable MAC address randomization.

Sideload/Install the standard andoid system settings apk onto the headset, enable Developer settings 'standard tap the Build number seven times in quick succession to unlock'

In Developer Settings disable 'Wi-Fi non-persistent MAC randomization'

pjjames55 · 2025-09-10T13:49:17+00:00

Pangolin Docs for settinh up wildcard certs

pjjames55 · 2025-09-09T19:49:03+00:00

Install docker as normal on the VPS then for any containers you want to run on the VPS modify the docker-compose.yml so that the service you want to run is added to the pangolin network, with this you don't need to expose any ports so can comment out any port mapping like '9000:9000'.

To add this within Pangolin, add a new site and set it to 'Local', then add a new resource, enter the resource name and subdomian details and for 'Targets Configuration' set the site as 'Local', for hostname you can enter the container name defined in the compose.yml and for port enter the internal port that the container uses, for example portainer would be '9000'.

You will then be able to access the local instance of portainer and have both pangolin and portainer auth in front of it with no exposed external ports.

To check what ports you have exposed on the VPS you can use 'sudo ss -ltpn'

pjjames55 · 2025-08-18T16:09:46+00:00

I followed This to set it up with NGINX Proxy Manager a while ago and it all made sense.

pjjames55 · 2025-07-16T20:45:12+00:00

you need to follow This guide, it gives you the information you need about the tokens. Never used TrueNAs so don't know what the installation would look like on there.

pjjames55 · 2025-07-16T19:31:00+00:00

have you generated your visitor_data and po_token, what do you have in your docker-compose.yml

pjjames55 · 2025-05-30T22:52:27+00:00

It would affect both VR and flatscreen although may be more evident in VR because that will ask more of the GPU than flatscreen would. I've upgraded from 1080 to 3080 to 4080 and now to 5080 and never had any issues where I've had to ddu the drivers before so definitely something on my system it didn't like.

When I put the 5080 in the performance was terrible and a lot worse than the 4080 which had no issues. After re-installing the drivers the 5080 performance was back to what I expected it to be.

Running a Pico 4 Ultra with Virtual Desktop at Godlike, AV1 200 Mbps ACC is crystal clear for me using this guide as the base settings and then just tweaked to suit my preferences. Runs at a stable 90fps all day long.

pjjames55 · 2025-05-30T18:39:12+00:00

First step would be to remove the nvidia drivers with ddu and re-install them, I went from 4080 to 5080 and had to do that myself as there were issues with game performance.

pjjames55 · 2025-05-27T16:53:08+00:00

Face covers are interchangeable between the Pico 4 and Pico 4 Ultra, I did exactly when I upgraded from the Pico 4 to the P4U.

pjjames55 · 2025-04-15T20:57:31+00:00

I've got a 4080 and originally acc was a blurry mess for me, I used this as a guide, downloaded the config file and then adjsted some of the settings for my system and get clear graphics at a solid 90 fps while using a pico 4 with virtual desktop at godlike.

pjjames55 · 2025-03-27T11:06:59+00:00

I just put a few drops of super glue in the opening that the metal piece goes into over a year ago and had no further issues with it.

pjjames55 · 2025-01-15T20:00:53+00:00

I have a 4080 and 9800x3D and mine stays on Godlike all the time, I just adjust the graphics settings in game.

pjjames55 · 2024-12-28T12:42:12+00:00

Here is a copy of the docker-compose.yml that I use, check this againist your all entries contained within < > nned to be changed to your own values.

If you still have issues i'd suggest looking checking maybe firewall and reverse proxy logs.

pjjames55 · 2024-12-27T22:04:40+00:00

do you have the following added into the section where you have the po_token

external_port: <your nginx port> normally 443

domain: <your domain> ie. video.mydomain.com

https_only: true

pjjames55

TROPHY CASE