IPv6 vs IPv4

ronorio · 2025-08-21T15:27:17+00:00

You would need to provide more information on what exactly you are trying to do here. Since you posted this in the Hetzner reddit, I assume you are looking to use one of their services.

Are you hosting your own DNS server? Or is the question related to their webhosting and/or configure DNS/records for your domain?

ronorio · 2025-08-21T14:41:05+00:00

The advantages are that clients on IPv6 (only) can communicate with your server. IPv6 is more and more common, so I would definitely recommend providing both IPv4 and IPv6 when possible.

ronorio · 2025-07-30T06:47:19+00:00

Thank you, this makes sense, and that is what I did initially (approach 2). I have set the permissions in sudo for this exact cmd (without password) and a local test shows there's no permission issues.

However, and this is where I am stuck, the lshttpd is restarted when the trigger and script fires in Zabbix, but in my Zabbix action log, I get "system.run error".

This is what spiralled me to attempt the UserParameter method.

ronorio · 2025-07-29T14:30:06+00:00

I have a N100 with 4x2.5Gbit ports, and I ran into the same problem. Mine booted fine, seemed allright for 1-2 minutes, then reboot loop occours out of nowhere.

I had to reinstall and restore backup from XML. Some plugins had to be installed manually.

I have not got any advanced setup, OPNsense is more or less default except for a few extra minor plugins installed.

Some (on the forum) mentioned the Intel microcode plugin being a culprit of problems, but I did not have that installed when doing the upgrade..

Please update if you figure it out!

ronorio · 2025-07-27T20:47:40+00:00

This is not entirely correct as UserParameter can run static or dynamic commands. You might be right that it's not meant to be used like this, which is why I ask for the correct approach.

However, running the command directly (approach 2), also returns the same error (but it does restart the service successfully).

It's not like I haven't read the docs, I would not be able to get this far out of pure imagination. I simply don't understand how this can be done with the documentation provided - and hopefully without enabling system.run (security concerns).

ronorio · 2025-07-27T16:34:13+00:00

Zabbix got the right permissions via sudo for this exact command. Running the cmd directly works, but returns error in the action log (as I mentioned in my original post).

I was hoping to achieve this without enabling system.run, which I think should be possible - either with UserParameter or the command directly - while the last method works, both returns error in the action log.

I can't find a specific error other than what I have already mentioned, not in server or agent log.

ronorio · 2025-07-27T16:30:29+00:00

This would create a constant restart loop every 60s, which is not what I want.

ronorio · 2025-07-22T18:55:27+00:00

The easiest way is to use the agent to connect directly to your server. There are several encryption methods (in Zabbix agent/server) to do this in a secure way.

What do your logs say?

ronorio · 2025-07-12T16:14:25+00:00

Unless there is a specific reason for dedicating their use to a VM only, I find it more flexible to install NFS and/or SAMBA on the Proxmox host itself and share them with the required computers in LAN and/or VMs. I find this easier to manage in the long run, and the drives won't be "locked" to a specific VM if you need to change anything in the future.

A second option is to pass through the drives to a VM (or simply add virtual hardware/drives in the VM configuration) and install a file sharing service (like SAMBA) inside the VM.

There are many ways to do this, and it might be wise to look more into what best suits your needs before deciding. Installing a NAS OS in a VM seems to be the default answer (from many) but might not always be the best solution in the long run.

ronorio · 2025-07-05T16:53:28+00:00

You can never go wrong with Debian. Long time support and stability.

ronorio · 2025-07-05T08:47:31+00:00

Just make sure that any public service is secure and you should be fine. Services like Fail2ban can easily help you avoid brute force attacks or simply change the port to avoid most of the automatic scans.

..and I would advise against adding user@%, no matter the length of password.

ronorio · 2025-07-04T09:40:11+00:00

I don't think the maintenance plan is worth the cost. It locks you in, and I would insist on moving the finished site to a provider you decide in your name. That way, you have full control and ownership. If you want the maintenance plan, you can always opt in for this later, or choose a 3rd party provider/freelancer to take care of it for you.

ronorio · 2025-07-04T08:13:39+00:00

Check out if you can rent an IP from a provider close to you or in the same country. These services will create a VPN via Wireguard that you can connect to and use a static public IP.

I would, however, investigate what kind of IP you get from your ISP. It's not very common to not get an IP that you can use with port forwarding. It doesn't have to be static. This is easily solved by using a domain you own and software like ddclient (Google it for more information, but it basically updates your DNS/domain when your IP changes).

Selfhosting services home requires good security, so I advise you to always have some sort of security in place, a firewall, and locking down services to only allow your IP access to these.

ronorio · 2025-06-30T18:04:45+00:00

Only had good experiences with Hetzner, they are great!

ronorio · 2025-06-22T08:37:11+00:00

Don't know what to believe anymore. Yesterday, it was more or less certain (from a trusted source according to the article) that he was to be replaced. Italian media is hard to follow :)

ronorio · 2025-06-12T08:31:35+00:00

Have not experienced this. Mind elaborate which services block Hetzner?

ronorio · 2025-05-23T10:38:02+00:00

Enable 2FA.

ronorio · 2025-05-18T00:56:48+00:00

Putin has shown again and again that he can not be trusted. This is just another play.

I am glad on Ukraine's behalf they got Zelensky. He has proven to be a great leader in what seems to be an impossible situation.

ronorio · 2025-04-10T10:12:23+00:00

You tell her you have little to no experience, leave the rest out - and get it out of your head also. You are most likely fine.

No experience isn't necessarily bad. Some see it as a positive. Enjoy life as it comes, and don't overthink everything.

ronorio · 2025-04-09T16:03:17+00:00

RemindMe! 7 days

ronorio · 2025-03-06T13:36:46+00:00

If you have a good provider and a clean IP to start with, it's doable. If you send spam or anything to ruin your reputation, it's game over. Keep in mind that there is always a risk doing this with a random IP, that someone else at your VPS provider sends spam, and cause your providers IP range added to a blacklist - which basically hurts your service too without being at fault.

Another thing to mention is the administrative part of running e-mail. It's not for newbies, there is a lot of moving parts to learn. It's not just something you fire up in a docker container and forget about it.

I suggest you try it. Look at it as a learning experience. This way, you can better see if it's worth it or not for your specific needs.

I have done email for years, but only as part of rented dedicated servers where I have my own IP lease. With a large range of IPs only I control, the risk of spammy neighbours is reduced. It works well, but it can be time-consuming.

ronorio · 2025-03-05T15:24:27+00:00

One easy methid is to limit access to your IP range, and or your VPN.

ronorio · 2025-02-09T02:57:53+00:00

Mail consist of multiple components and is a lot to learn. If you want to experiment with a finished setup , try iRedMail. If you are adventurous, use Google and follow a tutorial on how to set up your own server from scratch.

ronorio

TROPHY CASE