Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

@MangoPenguin@lemmy.blahaj.zone cover
@MangoPenguin@lemmy.blahaj.zone avatar

MangoPenguin

@MangoPenguin@lemmy.blahaj.zone

He/Him | Gay Demi Furry Boy

Accounts:

lemmy.blahaj.zone/u/MangoPenguin

discuss.online/u/MangoPenguin

This profile is from a federated server and may be incomplete. Browse more on the original instance.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Pretty normal tbh, a lot of those thumb drives get very hot. Probably not great for its lifespan though.

Best bet is install an SSD if you have a spot for an M.2 or 2.5" drive inside.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Does it maybe mean 40% cacao content chocolate?

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

It can be done if you implement a reverse proxy in front of the services.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

With vaultwarden it's very easy, just change the port map in the docker compose file on the host side. No idea how to do it with the official server stack.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Firefox; easy to sync, easy to access, easy to search through.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I just use their servers, it's encrypted anyways and my bookmarks are all public websites, so other than some data on what I like to bookmark there's not much there.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

It's very hard to compromise a VPN, they're designed specifically to prevent that.

A random service being exposed to the entire Internet may not be secure, and could provide a way in to your network for someone.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Luckily all of the changes so far have been super easy and quick, they're very good about posting detailed info on what to change.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

You could use something like Veeam Endpoint (free), it will image while the OS is running so the underlying ZFS system shouldn't matter.

Restore immich photo backup?

I have been backing up the photos folder for my immich. Something weird happened with one of my hard drives so i had to restore. It has a folder for each year and inside there is a folder for each day. immich doesnt support the ability to drag and drop the year folder into the UI. What's the best way to get all my media back...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Add the existing base folder as an external library, and use a new folder as the main immich folder for uploads.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Permissions issue maybe? Although being able to see the files in the containers terminal seems like that wouldn't be the case.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Wasabi and iDrive E2 are 2 others I know of similar to S3 and B2.

Does anyone know of a FOSS Firewall for Windows

I currently use TinyWall Firewall, it works very well, it's small/portable, no complaints I even donated to the Dev but I would really prefer open source, also it needs to be user friendly like TinyWall so my non-tech family members can/will use it like they do with TinyWall.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

What's wrong with the built in windows firewall? It works well, has a GUI to add rules, etc.. You don't even need to touch it on a default setup for most people.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I haven't had that happen unless my gateway or DHCP server changes, but on a server wouldn't adding the rules to both public and private profiles solve that too?

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Generally to depend on a container it needs to be in the same compose project, so if you move gluetun into the one with qbittorrent it should work fine.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Intel Quicksync would do it, no need for a dedicated GPU.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yes hence no need for a dedicated GPU

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I didn't say CPU? Quicksync is Intels dedicated hardware transcoder in the iGPU.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

No good hardware acceleration for video.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Syncthing keeps folders in sync between multiple devices, it doesn't have any concept of users since it's not designed for that.

You want Nextcloud or similar 'google drive' replacement if you want to share individual files and folders with specific users easily.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Well each share can choose which devices it shows up for, so you don't really need users in that sense. But also if you run it under another user account it will have its own clean profile too.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Definitely worth using specific versions on your docker images if you're doing automatic updates.

traefik:mimolette for example should keep you on 2.x versions while still getting patches and bug fixes.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I mean same, I say it's worth using but I don't do it either haha.

Everything is backed up every night, so if something breaks to the point of data loss I just fix it after.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I wouldn't worry about a specific number of cores, as that doesn't translate at all to CPU performance. Instead look at single thread performance.

So something with a Core i5-7500 on ebay for example, should be able to get one in your price range after buying more RAM.

Why is replacement for home device controls so complicated?

I recently learned about Home Assistant here on Lemmy. It looks like a replacement for Google Home, etc. However, it requires an entire hardware installation. Proprietary products just use a simple app to manage and control devices, so can someone explain why a pretty robust dedicated device is necessary as a replacement? The...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Proprietary products just use a simple app to manage and control devices

They have a dedicated set of servers your devices and app are connecting to, that's what home assistant is essentially replacing.

It's not just app > device, it's app > server > device.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

It's very minimal in normal use, maybe like an hour or two a month at most.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Do you even need E2EE if it's a private server with no federation? It seems like transport encryption would be fine which almost everything has.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yeah most things support transport encryption, SSL for example with HTTPS.

What to be aware of before opening port 25 on a postfix Raspberry Pi?

I have a raspberry pi running postfix. I Realised unless I open port 25 I absolutely cannot receive emails (I have 587 open and can send but not receive them). However I heard there are scaries online which someone could potentially send emails from your server without consent. I believe as well my ISP doesn't block port 25. Is...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

If you own your domain name, then you can use any email service and still have control over it and move around if needed.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Just go to /var/lib/docker/volumes and copy the data out of the relevant volume. No need to mount anything.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Who is out there running compose down -v when they want to keep their data lol

Not a fan of this change, using volumes is what makes docker truly portable between systems. It's not the responsibility of Immich if people are running the wrong commands when managing their system.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

RAID 5 or 6 maybe with 6 drives?

First before doing anything, do you have reliable tested backups in place for the data on the drives?

Hardware RAID is pretty difficult to work with, if the RAID controllers are the same model with the same firmware moving the drives should in theory work.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yep, Proxmox has a built in backup solution which I use paired with proxmox backup server, I also run backups with restic on each VM/CT of the important stuff like config files.

I test restores every now and then, just by either restoring a full VM/CT, or doing a restic restore and checking over some files.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I need my (Android, ofc) phone to be on in case of family calls / messages, so I can’t use “Do Not Disturb”

Add them to your contacts that are allowed to bypass do not disturb?

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Is it because USB doesn't expose proper UUIDs or something?

MangoPenguin , (edited )
@MangoPenguin@lemmy.blahaj.zone avatar

So first things first, let’s rename database to immich-database, redis to immich-redis

Docker compose does this for you, so a service named database becomes immich-database if your compose project is named "immich" by placing it inside a folder by that name. You would have ended up with immich-immich-database

Same goes for your volumes.

most importantly, let’s give it a port that’s not the default postgres port that everyone wants to use. Easy right? Nope.

Since the postgres container is on that specific compose project network, the port is not shared and won't interfere with any other compose projects, so there's no need to change it away from the default. The main thing is each compose project is isolated by itself.

Also get rid of the ports: map for the database, it's already part of the same compose network and does not need a port exposed to the outside.

so I went in and added the IP as the DB_URL to the .env

Don't use IPs to refer to docker containers as they change, instead use the container name so database for example. (Just don't prefix it with the project name, so don't use immich-database for example).

Essentially just undo your changes and it should all work as expected, and will be entirely isolated so won't interfere with any other containers or compose projects you run.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Correct yes, each compose project is isolated on its own network as well.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yeah you definitely want each 'thing' in its own compose file. Take a look at Portainer or Dockge to easily manage multiple compose files.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

That's wild, how do they not have the server budget to show you the website, but do have some to show you a queue signup? Surely those take about the same amount of resources!

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Firefox can open and edit PDFs, just uninstall the Adobe junk.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Firefox can open/edit PDFs too.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Firefox can open/edit PDFs too, so you could get rid of Foxit since it's obnoxious as well.

Selfhosted Wireless Cameras

I currently have a couple of (amazon) Blink cameras. I would like similar cameras but that are self hosted. Yes these basically are however the HW-Sync module sucks its slow. I've tried other chinese brands which are slower. I was about to buy the Eufy Homebase setup it seemed perfect easy low power cameras. However their "self...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yes

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Do you have a nameserver set under System > DNS?

Is there much performance difference in ad blocking options?

I'm currently using the blocklists included with unbound in opnsense on a mini PC and I have used pihole on a pi which now operates my 3d printers instead. I haven't tried any of the other network wide options. Has anyone made any blog posts or similar detailing performance testing of different options?...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

All DNS blocking is going to be very fast, essentially no real added time.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Yup it's absolutely horrible all around.

Ingenious ways to measure power draw

So I wanted to get myself a Kill-a-watt. Being who I am, I wanted information regarding its accuracy, especially at low power draws. I found a comparison with a industry grade equipment (Fluke is about the best out there in handheld electrical meters). It’s not encouraging, so I thought about a more proper meter, but it’s...

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

I mean if you want that kind of accuracy getting a Fluke setup is probably the way to go. The kill-a-watt is not bad for being $30 or so.

MangoPenguin ,
@MangoPenguin@lemmy.blahaj.zone avatar

Anything well supported by Valetudo, they have a nice list. I bought a Roborock S5 for $35 on ebay that needed the gearbox for the brush cleaned out, and it works well.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • incremental_games
  • meta
  • All magazines
    •