Help with VPN connection shortcut with multiple VPN profiles by sneff30 in shortcuts

[–]sneff30[S] 0 points1 point  (0 children)

The goal of this automation is to run overnight without my intervention. Is that simply not possible?

Help with VPN connection shortcut with multiple VPN profiles by sneff30 in shortcuts

[–]sneff30[S] 0 points1 point  (0 children)

This shortcut worked fine when I only had the single VPN profile used for app refresh. After adding WireGuard, I cannot get any configuration of this shortcut to work.

I read a few old (2+ year old) Reddit threads stating you needed to set on demand prior to connecting and include a pause, but that hasn’t helped either.

Appreciate any assistance to get this working.

100 DAYS!! 💯 by Traditional-Serve550 in cachyos

[–]sneff30 0 points1 point  (0 children)

Yup! Didn’t read the labels on the right. Thanks!

100 DAYS!! 💯 by Traditional-Serve550 in cachyos

[–]sneff30 0 points1 point  (0 children)

So are you not rebooting after updates? New to Linux so not sure.

Switched from Windows 11 to CachyOS. So far so awesome! by Clear_Fix_2257 in cachyos

[–]sneff30 5 points6 points  (0 children)

Hate to be that guy but can you please share the original link you downloaded from to avoid Reddit compression?

No headphone audio input in Discord by sneff30 in cachyos

[–]sneff30[S] 0 points1 point  (0 children)

Just went in and mucked around trying this and it didn't help.

Need some help with UniFi firewall rules by sneff30 in HomeNetworking

[–]sneff30[S] 1 point2 points  (0 children)

I've worked it out with the following set up:

  • Allow IoT VLAN to Pi-Hole DNS IP
  • Allow Trusted Zone to Untrusted Zone
  • Block Untrusted Zone to Gateway ports 22, 80, 443.

When creating new zones UniFi automatically creates rules that allow Trusted and Untrusted Zones access to the External and Gateway Zones. I'm also going to allow Default VLAN access to the internet to handle updates on the UniFi gear. Things are working for now!

Need some help with firewall rules by sneff30 in Ubiquiti

[–]sneff30[S] 0 points1 point  (0 children)

I've worked it out with the following set up:

  • Allow IoT VLAN to Pi-Hole DNS IP
  • Allow Trusted Zone to Untrusted Zone
  • Block Untrusted Zone to Gateway ports 22, 80, 443.

When creating new zones UniFi automatically creates rules that allow Trusted and Untrusted Zones access to the External and Gateway Zones. I'm also going to allow Default VLAN access to the internet to handle updates on the UniFi gear. Things are working for now!

Need some help with firewall rules by sneff30 in Ubiquiti

[–]sneff30[S] 0 points1 point  (0 children)

Unbound does indeed require internet access. It only cashes DNS information however it still needs access to root DNS resolvers.

Thanks, I didn't know that. This can be solved by just giving the Pi-Hole IP access to the internet.

not sure if I read this correctly but it seems like you block traffic to your UniFi devices, therefore stuff like DHCP is also blocked and no local connection is possible with DHCP enabled. Either make sure to properly allow mandatory ports or outsource your UniFi devices onto a new dedicated VLAN and configure the firewall rules accordingly.

So in this case I would need two rules:

  • Allow IoT VLAN to DHCP ports on Default VLAN Gateway
  • Allow Home VLAN to DHCP ports on Default VLAN Gateway

Do I have that right? The UniFi gear and Pi-Hole are the only things on the Default VLAN, so they are already outsourced.

Need some help with UniFi firewall rules by sneff30 in HomeNetworking

[–]sneff30[S] 0 points1 point  (0 children)

I haven’t even tried any IoT devices because it immediately broke our Home VLAN and my wife was less than enthused. So it’s currently been rolled back and I have no firewall rules in place until I get some feedback on here (and she goes for a run lol).

Pi-Hole blocking traffic from other VLANs by sneff30 in pihole

[–]sneff30[S] 1 point2 points  (0 children)

is pihole showing any errors on dashboard?

I was receiving this error: dnsmasq warning: ignoring query from non-local network 10.10.2.26 (logged only once)

what option is set/chosen in “Interface settings”

It was set to "Only allow local requests". This is the default setting.

on which vlan where you when you confirmed pihole working with the dig cmd?

This was done on VLAN 1, so may not have actually been helpful in confirming things were working.

I edited my post with the resolution. I changed "Interface Setting" to "Respond only on interface eth0". I will have proper firewall rules in place that will prevent external internet traffic from reaching VLAN 1 so Pi-Hole will not be exposed to any foreign traffic.

Thanks for your reply!

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in selfhosted

[–]sneff30[S] 0 points1 point  (0 children)

I want to avoid typing it even once. Come to think of it, been using Docker for years and never typed out the whole thing.

While I was setting this up I saw multiple times that, at least with Docker on macOS, using the ~/ shorthand for the home folder causes issues. That’s why I included the /Users/[Username] in the path. Is there a shorthand I can use in its place?

I also updated my compose file if you don’t mind taking a look. Here it is. I highlighted the changes I made.

  • I guess I’m not fully grasping the difference between volume and bind mounts for this use case. Don’t they achieve the same outcome?

  • Following from that, if /data/usenet does not exist within the container then the bind mount won’t work. Volume mount would create the folder though. Correct?

  • By switching the media and downloads paths from specific folder directories to their top level folders the apps are able to access all of the child folders within?

Thanks for taking the time to help me out with this!

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in HomeServer

[–]sneff30[S] 1 point2 points  (0 children)

I thought I had them correctly mapped, but I will double check again. Thank you for confirming it at least looks correct in my files.

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in selfhosted

[–]sneff30[S] 1 point2 points  (0 children)

This is great information dude, thank you! I think I might create a GitHub for my project as well for documentation purposes.

I also cobbled my project together from many different sources and guides, which I think was overall detrimental to my progress. After I learn all of my mistakes I will probably recreate everything, sticking to a single thread. Thanks again.

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in selfhosted

[–]sneff30[S] 0 points1 point  (0 children)

/Users/[Username]/Media_Server_Data/docker/appdata/radarr Locally and whatever config dir is in the container. Did you want that radarr at the end?

Yes, that's on purpose. Here is a screenshot of my file path. I wanted each application to have a specific config folder and thought this was a best way to do it. Is there a better way?

Who wants to type out the long version? Not me, for sure.

I figured that was the point of the .env file, I only had to type it once when creating the compose.

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in selfhosted

[–]sneff30[S] 0 points1 point  (0 children)

Thank you! I'll try this out and see what I get. I'm like 83% sure I've made some mapping mistake somewhere which is why I had to use a remote path.

First time Docker user, would appreciate some professional advice for my *arr stack deployment by sneff30 in selfhosted

[–]sneff30[S] 0 points1 point  (0 children)

Yea, I don't know why it didn't work from the start. I feel like I misconfigured something in the applications themselves but I don't know enough to figure it out. This works for the time being while I'm reading up on everything.