funkless_eck

@funkless_eck@sh.itjust.works

This profile is from a federated server and may be incomplete. Browse more on the original instance.

I want to get started with *arr apps - here are all the things I don't understand about (reverse-/)proxies and networking in order to get it set up.

Please can someone show off how smart and sexy they are by answering these questions. I don’t mind if you just link me to a video or guide explaining it (like I’m 5?) instead of typing it out - but please don’t just send me stuff that says something like “To forward to ports correctly, simply forward the correct ports -...

funkless_eck, (edited )

that’s a helpful explanation of subnets thank you

In the paradigm of

111.222.3.4:5/22

if “3” is subnet and “5” is port - what are the names of “4”, “222”, “111”, and “22”?

And is there ever a 000.111.222.3.4:5/22 or another add on?

funkless_eck,

yes, wlan vs eth, right? And then in some providers, tun for the vpn?

funkless_eck,

Check the error logs and see what’s wrong with it instead. How is it crashing? Did you check stdout and stderr (use docker attach or check the compose logs)?

“Crash” is the wrong word. The app is running, it says “Connected” for about 15-20 seconds, then it says “Internet blocked” for about 20 seconds, then it says “Reconnecting” for 30-90 seconds, repeat indefinitely.

Using the CLI for logging, it says something along the lines of “Timeout… Hyper time out”

You should look a bit into how the internet, DNS and IP addresses work on the public internet and private networks.

Do you have any recommendations on how to learn this?

Also, thank you for explaining that “configuring a domain name” is adding an A record. I’ve added TXT records and similar for Google analytics and I’ve added mail records to set up my own domain’s email before - but this is helpful, thanks.

funkless_eck,

Traefik

I will look into this, thank you.

funkless_eck,

I know two people who grew up in a kibbutz. One says it was the best time, one says it was the worst time. You can likely do the same for any form of government or economy.

funkless_eck,

that’s part of the issue! If you actually look at the trash guides you’ll see most of the guides just say “There is no special set up required.” and the rest of the page is blank.

That page you linked to shows how arrange your directory structure for hard links (but not how to mount the drive to match /mnt/ or, with exception of a single screenshot, how to configure the software to hardlink)

all of which were things that took me several hours to google, experiment and understand.

funkless_eck, (edited )

I do really appreciate your help - but unfortunately things like “just configure your VPN to allow local traffic” isn’t that helpful when my VPN is just me typing “mullvad connect” into a command line. There isn’t anything obvious to configure, and the moment you start looking into it, it’s insanely complicated.

edit: OK, so with some googling this morning I found “allow local traffic” is set with “mullvad lan set allow” (which is in the help doc, but again - zero explanation, it just lists the command amongst other commands)

edir2: apparently I need to run mullvad inside gluetun, so that’s the next thing

edit3: gluetun installed… step 1: “Required environment variables: VPN_SERVICE_PROVIDER=mullvad” that’s it - no other text. Does that go in docker .env or does it go in the compose.yml or is it set by the command line and where does it go in those files?Who knows?

Apparently gluetun is running on port 8000 - point browser to it “unable to connect” so either I fucked something in installing it or there’s no GUI browser interface - which is it? no idea.

edit4: .env has “VPN_CLIENT=‘openvpn’” - is that the same or different to “_SERVICE_PROVIDER”? should the client be gluetun and the service provider be mullvad? Or neither? Or both? or vice versa? No one knows.

edit 5: After more looking around I glimpsed that line in the last edit in a .yml file so im guessing that means “environment variable” is different to .env - still no idea what VPN_CLIENT should be.

edit 6: no, apparently thats all wrong. It should go in override.yml instead…

Generated private key, downloaded json, extracted the keys put them into the yml (why do these lines get hyphens at the start but nothing else does in the yml? hope i didn’t fuck it up!)

edit 7: did all that, took over an hour, docker restart gluetun no errors and whatsmyipaddress.com shows me where I actually am so its not working. Another complete waste of time with no idea what went wrong or how to fix it


<span style="color:#323232;">
</span><span style="color:#323232;">
</span><span style="color:#323232;">Also, "to use Jellyfin ... Just add content" in this case means "just" configuring ombi to talk to radarr to talk to qbittorrent to download a file to be "moved" with hardlinks which you previously configured. 
</span><span style="color:#323232;">
</span><span style="color:#323232;">Then I also can't "just start" jellyfin because the VPN blocks ssh connections as mentioned. 
</span><span style="color:#323232;">
</span>
funkless_eck,

it’s a raspberry pi running raspbian bookworm

what’s the difference between wireguard and mullvad. Is mullvad just another shell for wireguard?

funkless_eck,

very little network experience but I’m using Ubuntu to ssh into raspbian on a pi4. All of which is new to me, I can get sonarr radarr qbittorrent all working on it (i think - not willing to test without vpn), but it’s the VPN / Jellyfin stuff that’s really kicking my butt.

but if I’m turning off the VPN to watch something, doesn’t that make expose me because of all the seeding etc through qbittorrent?

funkless_eck, (edited )

Forgive my ignorance, but doesn’t the mullvad need to run through gluetun, or at least in its own docker container to be secure?

Or to put it another way, whats the benefit/cost of installing it via dpkg as opposed to running it in a container, as opposed to running it in in gluetun (in a container)?

i thought everything was supposed to run in a container if it’s touching the web

funkless_eck,

I have an ATT router in pass-through to an Eero mesh which I control through an app on my phone. there doesn’t seem to be anything about installing a VPN on a router I can find online except for specialist routers

funkless_eck, (edited )

unfortunately I am now still stuck on step 1, (installing mullvad) see my issues here:

sh.itjust.works/comment/7983968

funkless_eck,

Thank you - that is helpful.

So the Gluetun part is really only for if I want to get into my jellyfin when away from home?

funkless_eck,

I have an NVIDIA shield, but cf my other issues (now mostly fixed hopefully by EOD today) that connections in and out of the pi were either being blocked by VPN or totally exposed without VPN

funkless_eck, (edited )

but I can’t just have one device connected to the VPN. I have to be able to tell it what to download (from a device) and then watch it (from a device)

edit: also, from your link there

“Did you adapt the rules to your setup (IP, port etc)? What if you add a counter to the rules? Can you see them trigger on incoming packets with nft list ruleset?”

No, I have not adapted and counted the rules to trigger on incoming packets with an nft list ruleset because I have no idea what that means

From the link inside that link

“the following rules should be applied.

table inet excludeTraffic { chain allowIncoming { type filter hook input priority -100; policy accept; tcp dport 2010 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; } chain allowOutgoing { type route hook output priority -100; policy accept; tcp sport 2010 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; } }”

no idea what any of this means, nor what to do with it, what to change, or where to put it.

I can’t be a complete idiot for thinking this seems overwhelmingly technical. Like surely you can’t believe you can show that to the average person on the street and they’d be like “ohhh just table inet exclude traffic! of course!”

and “exclude traffic” sounds like the opposite of what I want - which is to include my ssh traffic.

funkless_eck, (edited )

It is a little frustrating that you advised me to ask AI to tell me what to do, I posted the answer verbatim and you said it’s not necessary. Is that because you know the real answer but don’t want to tell me, because the AI is wrong, or something else?

the issue isn’t plex v jellyfin ease of use, its mullvad or privoxxy on gluetun through docker via compose …ease of use.

funkless_eck,

you’ve got a lot of answers, but as someone who started playing around with Linux recently I would say it’s probably better to start familiarizing yourself with some command line operations in windows now.

Do some things like, use the terminal to search for and open programs you need, delete files, even write some basic text documents.

yes, you’ll have to do some googling to work out how to do these things (and why it didn’t work) - and now you’re on the path to linux!

Maybe you’ll even find a way to install a command line browser to look up the answers.

funkless_eck,

you say “pizza” like “pee-jarred?”

I think you mean just /ts/ not /dz/

funkless_eck,
  • Not in chronological order
  • None of the philosophy quotes are real
  • This joke is printed on t-shirts that only managers of knock off pizza shops wear
funkless_eck,

He was a pediatrician, it’s a totally different thing

funkless_eck,

why doesn’t my version have a launch button like the gif, btw? Genuine question. I have to launch it separately from SUPER+A every time

funkless_eck,

someone hasn’t read The Importance of Being Earnest.

funkless_eck,

oh I thought you were saying - because the meme is about regulating technology- that those things should be regulated.

funkless_eck,

Sure but also, ive then been driving the thing for nearly 20 years by that point, there are other considerations: safety developments / code, electronics, interior materials, rust, cabling/tubing that it might just be better / more comfortable / nicer to replace.

funkless_eck,

The real sneaky is to have a WIN+CTRL+D second desktop with a couple of innocuous windows open and WIN+CTRL+RIGHT arrow to switch to it.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #