• 0 Posts
  • 99 Comments
Joined 2 years ago
cake
Cake day: December 14th, 2023

help-circle


  • Imo that’s perfectly fine and not idiotic if you have a static IP, no ISP blocked ports / don’t care about using alt ports, and don’t mind people who find your domain knowing your IP.

    I did basically that when I had a fiber line but then I added a local haproxy in front to handle additional subdomains. I feel like people gravitate towards recommending that because it works regardless of the answers to the other questions, even their security tolerance if recommending access only over VPN.

    I have CGNAT now so reverse proxy in the cloud is my only option, but at least I’m free to reconfigure my LAN or uproot everything and plant it on any other LAN and it’ll all be fine.


  • This is 99% my setup, just with a traefik container attached to my wifeguard container.

    Can recommend especially because I can move apartments any time, not care about CGNAT (my current situation which I predicted would be the case), and easily switch to any backup by sticking my boxes on any network with DHCP that can reach the Internet (like a 4G hotspot or a nanobeam pointed at a public wifi down the road) in a pinch without reconfiguring anything.






  • Immich is pretty good for this if you take pictures at each location. It has a global map that shows all your photos with a heatmap-style display and a drawer that shows a grid of the photos within your viewport as you can and zoom around. It doesn’t seem like you can view a specific album on the map currently but you can at least filter the map to favorites or a date range.



  • I use a .dev and it just works with letsencrypt. I don’t do anything special with wildcards, I just let traefik request a cert for every subdomain I use and it works. I use the tls challenge which works on port 443, so I don’t think HSTS or port 80 matters, but I still forwarded port 80 it so I can serve an http->https redirect since stuff like curl and probably other tools might not know about HSTS.


  • Gotcha thanks for the info! It looks like I would be fine with ocis or opencloud, but since my main use case and pain points are with document editing which is collabora, it probably wouldn’t change much besides simplifying the docker setup (I had to make a gross pile of nginx config stuff pieced together from many forum help posts to get the nextcloud fpm container to work smoothly). But it already works so unless it breaks there’s little incentive for me to change.


  • Ah I see, I guess at least that would help with the main UI, but I’m already using collabora through the collabora code server in next cloud so it sounds like I’ll probably have the same document editing experience with OCIS/opencloud. I used to use onlyoffice but after I tried out their mobile app, it started blocking me from editing documents using the next cloud app (which seemed to use the only office web UI) so I was forced to switch unless I started paying for onlyoffice.


  • What are the apps that you would miss? I basically only use my NC as a Google drive and docs replacement, so all it has to do is store docx files and let me edit them on desktop or mobile without being glitchy and I’ve really wanted to consider OCIS or similar.

    That second requirement for me seems hard because of how complex office suites are, but NC is driving me to my wit’s end with how slow and error prone it is, and how glitchy the NC office UI is (like glitches when selecting text or randomly scrolling you to the beginning).


  • After I check the usual torrent sites, if I can’t find it on Usenet then I try finding random sketchy streaming sites (just by duckduckgoing title + year + stream) because usually you can youtube-dl them with a little fiddling, then my last resort is a DHT indexer like btdig. That’s more risk with viruses but if you’re paying attention it’s not that hard to avoid, but DHT indexes have lots of ancient stuff so be prepared to wait for seeds if you find it.

    Sometimes I also find what I’m looking for on like page 7 of duckduckgo results at archive.org

    Edit: also check soulseek - it’s primarily for music but you can share any file. I share my entire movies collection and get a constant stream of people downloading from me daily so it seems people search for and seem to also share TV and movies so it’s worth a check.





  • Hmm, well it doesn’t seem to be any problem with the docker compose then as best as I can tell. I picked a random ext4 flash drive and replicated your setup with the UID and GID set and it seems to work fine:

    # /etc/fstab
    /dev/sda1       /home/<me>/mount/ext_hdd_01  ext4    defaults 0 2
    
    ~/mount % ls -an
    total 12
    drwxr-xr-x  3 1000 1000 4096 Mar 27 16:22 .
    drwx------ 86 1000 1000 4096 Mar 27 16:31 ..
    drwxrwxrwx  3    0    0 4096 Mar 27 16:26 ext_hdd_01
    
    ~/mount/ext_hdd_01 % ls -an
    total 6521728
    drwxrwxrwx 3    0    0       4096 Mar 27 16:26 .
    drwxr-xr-x 3 1000 1000       4096 Mar 27 16:22 ..
    -rw-r--r-- 1 1000 1000 6678214224 May  5  2024 PXL_20240504_233345242.mp4
    drwxrwxrwx 2    0    0      16384 May  5  2024 lost+found
    -rwxr--r-- 1 1000 1000          5 Mar 27 16:27 test.txt
    
    # ~/samba/docker-compose.yml
    services:
      samba:
        image: dockurr/samba
        container_name: samba
        environment:
          NAME: "Data"
          USER: "user"
          PASS: "pass"
          UID: "1000"
          GID: "1000"
        ports:
          - 445:445
        volumes:
          - /home/<me>/mount:/storage
        restart: always
    

    I was able to play the PXL.mp4 video from my desktop and write back the test.txt file

    Have you checked the logs with docker logs -f samba to see if there’s anything there?

    Also you could try to access the HD from within the container, using docker exec -it samba bash and then cd into /storage and see what happens.


  • I would suggest adding “UID” and “GID” environment variables to the container, and set them to the numeric values for user and group numbers that show in place of your name when you use “ls -an” inside of the “mount” folder (they will probably be the same number).

    For example, if inside your mount folder you see:

    ls -an
    total 12
    drwx------ 2 1001 1001 4096 Mar 27 13:54 .
    drwxr-xr-x 3 1000 1000 4096 Mar 27 13:51 ..
    -rwx------ 1 1001 1001    0 Mar 27 13:54 hello.txt
    -rwx------ 1 1001 1001    4 Mar 27 13:54 test.txt
    

    Then set UID: 1001 and GID: 1001

    I get the same error as you when I copy your docker-compose and try to access a folder owned by my user. When I add the UID and GID of my user id to the docker-compose (1001 for me), the error goes away.