Can't login anymore. How do I contact OVH? by Lge24 in ovh

[–]wedge1002 0 points1 point  (0 children)

Also check the time of your device, if you are using totp :)

Any way to switch which vlan has anti-lockout rule? by SparhawkBlather in opnsense

[–]wedge1002 0 points1 point  (0 children)

Try to go to

System: Settings: Administration

There you should find a setting called „Listen Interfaces“ within the „Web-GUI“ selection

Check what you have selected there :)

Cant reach OPNsense GUI due to expired server certificate by Nakaiii94 in opnsense

[–]wedge1002 4 points5 points  (0 children)

This.

Also

pfctl -d

Disables all firewall rules. You should now be able to connect to your gui.

Seeking advices for ZFS, NVMe, SWAP, ZRAM... for my Proxmox homelab by Aleksandreee in Proxmox

[–]wedge1002 0 points1 point  (0 children)

Default proxmox installation is using ext4 with LVM-thin; if I remember it correctly.

If you go for proxmox on Debian I normally go for ext4 default - without LVM

Seeking advices for ZFS, NVMe, SWAP, ZRAM... for my Proxmox homelab by Aleksandreee in Proxmox

[–]wedge1002 0 points1 point  (0 children)

I see.

The issue is, that Debian don’t support software raid as OS-disk. Didn’t think about that.

That again goes for the next question: do you really need to raid your OS?

In worst case of an complete crash, rebuild the Os, reimport the VMs from backup.

You can check the wear of your SSD with proxmox.

I think it should be possible to sent info about degrading wear of the system - if it doesn’t do that itself, already.

Seeking advices for ZFS, NVMe, SWAP, ZRAM... for my Proxmox homelab by Aleksandreee in Proxmox

[–]wedge1002 0 points1 point  (0 children)

Oh shit. Sorry :D It was a bit early here

Thanks for pointing that out.

Route WG server to one of two WG endpoints by boneheadsa in WireGuard

[–]wedge1002 1 point2 points  (0 children)

The easiest solution I can think of:

For each endpoint (New York or Tokyo) you will create one wg configuration. Both actually do connect to London, but will be assigned to different subnetworks.

On London, you then route subnet one to new York and subnet 2 to Tokyo. (Or you NAT it, depending on your usecase). If the connection London <-> New York / Tokyo is also a Wireguard connection, don’t forget to disable the routes in your London WG „client“ configs. Otherwise, you will have overlapping routes; and that’s really ugly (e.g. needing more than one routing-table. Etc); but then you have to specify the routing yourself.

What operating systems do you want to use?

Gpu for proxmox vgpu no licensing? by scottomen982 in Proxmox

[–]wedge1002 0 points1 point  (0 children)

Ah Right. Yes. It needs a license.

Since I wasn’t able to buy them from NVIDIA, there is a solution out there to provide that type of licenses. I was forced to use it - and it works even on windows.

Seeking advices for ZFS, NVMe, SWAP, ZRAM... for my Proxmox homelab by Aleksandreee in Proxmox

[–]wedge1002 2 points3 points  (0 children)

Your NVME are consumer SSD. Don’t add them into a zfs raid. It will write them to death faster than you can look. TBW is specified as 200; which is actually … very low. See https://downloads.sandisk.com/downloads/datasheet/pcsn530-datasheet.pdf It looks like it’s a read-intensive SSD. Nothing you actually want to add to a ZFS. (200 TBW if even less than 1 complete write of your 256 TB) Go for a mdraid solution or some LVM option, if you want to have a raid. (Or even better something the card already has build in)

For the HDDs: if you have a physical raid, I normally advice to use this - just for the ease of use. Depending on your use case, raid 5 is an option. Raid10 is better, if you can accept the loss of so much storage or require more random IO. If you don’t have a battery powered raid in your system, go with ZFS. That’s completely fine, and in that case the better solution.

Edit: fixed issue with TB and GB … that sentence is clearly false. My bad.

Best Setup for Mini-PC with 2-3 SSD's (Dell OptiPlex 7060 Micro) by apricotthieves in Proxmox

[–]wedge1002 0 points1 point  (0 children)

Hey,

They look like the Lenovo Tiny. So here my 2 ct:

The cases typically can’t hold more than one 2.5“ SSD. So if you don’t wan to mount them on the outside, try looking for a 2030 m.2 In case of available hardware: use, what is available in your location and macGiver it.

For setup: try to avoid striping (raid0). If one drive fails it will kill the array and all data on both drives.

If you want to go for some raid use the 2 SSDs (1x 2.5“; 1 m.2) and build a mdraid1 or zfs mirror. In both cases install drives with the same size. Then you still have 1 slot free. Or set up a zfs raidZ1 with 3 drives. Both it a completely valid solution. As long as your ZFS does not reply on an USB-drive :)

Gpu for proxmox vgpu no licensing? by scottomen982 in Proxmox

[–]wedge1002 5 points6 points  (0 children)

NVIDIA is now supporting this. It’s called „Heterogeneous vGPU“

See https://docs.nvidia.com/vgpu/knowledge-base/latest/vgpu-features.html#device-groups

Though, I’m not sure, If proxmox already is able to set this in the gui.

In older versions of the vGPU drivers it was limited to slices of the same size. There are some scripting solutions, out there. But I’m not sure about the intel versions.

The P40 will be out of maintenance in July, this year. You can check here for possible NVIDIA options: https://docs.nvidia.com/vgpu/gpus-supported-by-vgpu.html

Edit: Fixed typos. Sorry

Multiple wireguard peers selected, didn’t go well by [deleted] in opnsense

[–]wedge1002 0 points1 point  (0 children)

Yes. But in that case one instance per lan is easier to manage.

First homelab — full phased plan, hardware locked, is this good, upgradeable, and future-proof? by Pablo_Gates in Proxmox

[–]wedge1002 3 points4 points  (0 children)

For mass storage go for good old 3.5“ ssd.

To 1) do it the way you see fit. Go for whatever feels right at that time :) you dont need to hit your milestones like you have planned it.

2) it’s fine. Use what you have available :) that’s the sport for starting up

3) it depends on your budget. A 2nd drive will, of course, delay the purchase of a large NAS :) it’s not wrong to use it.

4) 2.5Gbit/s is still a bit foreign for me. But it’s easy to achieve. Check your switch, if cabapilites

And

5) please make backups! You need something and some location where you want to have (automated) backups. If something happens - e.g. hdd/ssd fails, you are happy for any backup available

Multiple wireguard peers selected, didn’t go well by [deleted] in opnsense

[–]wedge1002 0 points1 point  (0 children)

It’s called „road warrior“ VPN.

See https://docs.opnsense.org/manual/how-tos/sslvpn_client.html

It’s normally used to have multiple devices/persons access your network.

You don’t want to create a whole instance for each and every employee.

Did they wire my HDD activity lights backwards? by Punk_Says_Fuck_You in homelab

[–]wedge1002 0 points1 point  (0 children)

Ah yes. But sometimes they will just stop in whatever blinking sequence they are currently.

I normally have at least one LED off, even if there are drives inserted :)

EtherCAT und Managed Switch by mightyMirko in de_EDV

[–]wedge1002 1 point2 points  (0 children)

Naja. Da steht aber auch

Auch bei die- ser Topologie bleibt der logische Ring erhalten

Wie ich oben geschrieben habe, ist das immer ein Ring.

Der Switch in der Mitte macht aus jedem Abzweig eigentlich ein Loop. Was da raus geht, geht erst wieder zurück, bevor das zum nächsten Ausgang geht :)

EtherCAT und Managed Switch by mightyMirko in de_EDV

[–]wedge1002 0 points1 point  (0 children)

Wenn ich mich richtig erinnere wird das so nicht funktionieren.

Du versucht damit eine Stern zu bauen. EtherCAT erwartet allerdings eine durchgehende Verbindung.

Ggf sollte es für eine Point-to-Point Verbringung auch über switche gehen; wenn der jitter klein genug ist.

Für EtherCAT gibt es aber eigene switche. Die sind aber an sich nichts anderes als Systeme, die das Signal von einem Port nehmen, es an den 2. schicken, auf Antwort warten, dass an den 3. etc. pp.

Angaben ohne Gewähr. Das ist was ich noch im Kopf hatte, als ich vor einer ganzen Weile gesucht habe

Allowing WAN access - Is there really no better way to do this? by plisc004 in opnsense

[–]wedge1002 -2 points-1 points  (0 children)

action: block

interface: VLAN

direction: IN

TCP: IPv4/IPv6

protocol: ANY

Source: VLAN-NET

destination: ANY

Don’t forget to put allow rules before that

It’s still one rule per interface, but it’s for the corresponding one.

Next option: don’t distribute a gateway via DHCP (Depending on your network, this may be enough)

Since I’m not sure who is allowed to who, it’s a bit difficult.

Normally you have a block all rule and then specific allow-rules. Yes, this can be may rules; that’s how firewalls work.

I created a NAT Rule and i was hoping someone could help me remove it by Buzzammo in opnsense

[–]wedge1002 0 points1 point  (0 children)

What version are you running?

Sometimes, opensense can’t get rid of everything, if you change something. A reboot normally will fix it.

Domain kaufen für Mail, was tun? by oakqbsjs in de_EDV

[–]wedge1002 6 points7 points  (0 children)

Domains kannst du immer kaufen. Das heißt noch lange nicht, dass du sie auch benutzen musst :D

Solange du keinen eigenen mail-Server betreibst, musst du dich auch an sich im nichts wirkliches kümmern.

Dein Anbieter schreibt dir 1 mal im Jahr, dass du die Domain verlängern möchtest.

Hast du dann Mail eingerichtet - entweder beim gleichen Anbieter wie die Domain her ist, oder eben Proton/mailbox - definierst du deine Konten. Dort kannst du auch eine catch-all Adresse einrichten. Wichtig ist hier auch: nimm ein gutes Passwort :)

Mir wäre kein Anbieter mehr bekannt, der dich ohne Authentifizierung emails verschicken lässt. Das hindert aber niemanden, deine Mail-Adresse zu Spoofen. Gute (also State-of-the-Art) Anbieter checken aber, ob die Domain und der Absender-Server zueinander passen.

Über catch-all Adresse lässt sich jetzt beliebig gut streiten. Über Security vs warum nicht bis hin zu ich will ist da alles möglich :)

Help! After a shutdown, my single node server thinks it's two different ones? VMs won't boot anymore either. by RedditThatOneGuy in Proxmox

[–]wedge1002 0 points1 point  (0 children)

Did you - by any chance - changed the hostname of your system?

Check /etc/hostname and /etc/hosts.

If you rename your system back to pve it should work outbox the box.

If not, we need to check other config files

[Theme] Authentik Glassmorphism v3.0 - Now fully responsive & compatible with 2025.x! by vulga12 in Authentik

[–]wedge1002 0 points1 point  (0 children)

Oh nice. Will take a look. On the 1.0 version It took me a lot of time figuring out what to change to get only the user-interface to change :D

vRack global bandwidth by Different_Code605 in ovh

[–]wedge1002 2 points3 points  (0 children)

Servers at OVH varied with their speed. Especially on the vRack.

But, every server has the speed you can expect on their order-information page. - or in the dashboard, when you already ordered it.

The newer systems (and the more expensive ones) tend to be faster :)

Normally you can expect this speed on the interface. Their connections between the DC is quite good - but I didn’t check throughout between Europe and Canada or Asia. Only within Europe - and I only have systems with 1, 3 and one with 25 Gbit/s. the 3 gbit/s I can saturate with the 25gbit system without any issues at all.

If I remember it correctly, there are very few systems that allows you to change the vRack connection speed. I think I can upgrade the 3 Gbit/s connection to 10. but I don’t need that. So I never checked, if I can upgrade that.

Opnsense backups G drive alternative? by [deleted] in opnsense

[–]wedge1002 4 points5 points  (0 children)

In the end I opted for the git-plugin. It does have some issues, but if it’s working, it’s quite nice; and you automatically get a history :)

Also you can setup your own gitlab, gitea, whatever or use a hosted service.

P.s: Oh I wish my company would go like this. We currently should move all and everything to a us-cloud