Mikelius

I think my main issue for this one is the requirement for internet. I cannot seem to be able to start it up because bootstrap is trying to download files. I’ve already downloaded the respective Zim file into the data folder. I by default block internet access to all docket images, and leave those I don’t want external access for that way.

If you can update an offline installer, and maybe docker images for the entire project instead of requiring cloning it down, I think this project would be awesome

Probably less reliable for me as a techie. Every time I opened Jami, my firewall alerts would go off about a device on the network calling to China, Russia, and Vietnam lol. Resulted in it almost never connecting for me since my network just blocked way to many connections on it for outbound traffic.

This started happening to me a little while ago and slowly got worse and worse (re initializing devices didn’t stick and I even went as far as buying a new ZigBee stick). While it ruined a weekend, I migrated everything to Z2M. To date, not a single device has dropped from the network. Zha has definitely borked something.

I’ve tried reporting issues before with other HA things, but have always got the “not my problem” treatment from frenck, so I just went straight to migrating to Z2M instead of bothering this time lol

Funny, I was just working on my dashboard today for a new tank I’m setting up. Skimmed through this really quick, and have one question… What plugin are you using for those slick temperature cards? Apologies if you said it in the post and repeating.

Note there’s a hacs plugin for Apex (what I’m using) which can help with some cool automations there too. Unfortunately it hasn’t been touched in like a year though.

Def wouldn’t. As much as I love opnsense and recommend them, their major updates tend to break something every time for me. Then again, my overall setup is a lot more complex than the average person, so maybe that’s on me lol.

Never heard of chatto until this one… Anyone here tested it vs fluxxer and have any opinions?

My front yard takes over an hour with a push mower and the terrain is too complex for a ride mower. I’d be curious if I’d be the exception, unless the robot mowers are terrible at landscape changes like a robot vacuum would be. Including some boulders… But maybe still cheaper to hire some kid if I get that far on the lazy scale.

This is exactly how my network is setup. All devices log to my syslog server which I feed into a database with a self made python app, and Grafana goes from there. It’s been running nonstop for like 5 years without any problems, so I’d say your in the right path!

It’s also helped me catch things like:

• finding out android leaked IPs outside VPN tunnels on connect (prior to headlines claiming this)
• finding out nslookup on termux ignores the phone’s DNS settings and tries to use Google instead
• finding other devices that ignore my DNS server settings
• noticing that my work Mac will turn itself on in some weird silent passive mode in the middle of the night to try and send data to apple (sleep or powered off don’t matter) - caught this from the logs sent by my router

I’ve just use iptables rules which default block all docker containers any network access. I assign static ranges to those I permit access, though. It does occasionally throw me off when adding new services and not understanding why sometimes they don’t work right away, but I prefer it that way.

Having a smart tv doesn’t mean you must use internet to utilize it. Mine is blocked from internet connectivity but connects to my media server on the local network. If anything, I prefer this so I don’t need an extra computer sitting in the living room and can instead use the same single media server my phones and computers do.

I bought a separate laptop and set it up with an encrypted password that both my wife and I know. It contains instructions on everything from my self hosted stuff to anything else related to my personal life that she would need. It’s 100% offline to keep it safe from a network compromise. This whole thing was especially important since I wanted to make sure my family could access all photos, calendar, contacts, etc for the last decade that are stored on my server.

It takes time to transfer everything to it (all in Obsidian) since it’s a brain dump… But it actually benefits me too. I’ve had a few times where I was like “how the hell did I set that up?” and had some instructions on there the helped lol.

Definitely recommend this to others to consider.

Interesting, I’ve never had this problem and have been using the auto upload for many years. I only use it for the photo taking, though. Any time I go through a phone cleanup and delete photos and videos, I’ll look at the folders I backup to on nc and actually go through them carefully to make sure everything was uploaded.

My install comes from f-droid so not sure if that’s something to do with it (unless yours is too).

I’ve got it setup automated on all my external domains, but trying to automate it on my internal-only domain is rather tedious since not only do I NOT want to open a port for it to confirm, but I have 2 other devices/services on the network not behind my primary reverse proxy that share the same cert.

What In need to do is setup my own custom cron that hits the hosting provider to update the DNS txt entries. Then I need to have it write and restart the services that use the cert. I’ve tried to automate this once before and it did not go so smoothly so I’ve been hesitant on wasting time to try it again… But maybe it’s time to.

What would be ideal is if I could allow it to be automated just by getting a one time dns approval and storing a local private/public key to prove to them that I’m the owner of the domain or something. Not aware of this being possible though.

I’d hesitate disabling it altogether, unless you’re absolutely certain nothing will need it. One suggestion I haven’t seen mentioned is looking at the other sysctl options that might be tweaked. Check with netstat how many of those connections are stuck in established, close wait, time waiting, etc. It’s possible you just need to lower the default values of things like nf_conntrack_tcp_timeout_established, for example. https://www.kernel.org/doc/html/latest/networking/nf_conntrack-sysctl.html - naturally, research anything you think you might want to change before you do.

Gawd yes I’ve been sitting on these things for like 3 years waiting for someone smarter than me to come up with something. Thanks for the share!!

Thank you so much for sharing this, you may have just saved me a miserable future if my system were to crash.

I try to read the updates they share every month with detail, but this one must have slipped through the cracks. This feels like another thing they should have been way louder about considering the problems it could cause someone who didn’t know it flipped on without their interactive decision.

Daily on my Gentoo server, through a Cronjob every morning. It’s a custom script though, so there’s more than just doing an emerge update. It’ll send me ntfy notifications for the update results, if there are new news items, and if there are any time config merge updates to make. A few other things as well but that’s the main stuff.

Other servers, typically weekly or only manually when I ssh into them (for the ones I don’t really feel the need to update frequently).

I use to have the same thing but moved away from the tablet solution and I got myself a pi, and then setup a script to auto start (after boot and auto login) the browser in full screen “kiosk” mode on my home assistant site. I then bought this to attach to it:

https://www.amazon.com/gp/aw/d/B0153R2A9I

I also bought a case for the screen and pi to fit in for a nice visual display (although these days the thing is embedded in my wall), but it looks like the case is now unavailable so might require looking around for one.

I’m not familiar with those two… But I’ve always been hunting for the perfect replacement.

I started with Nextcloud Deck and used it extensively until they got rid of my markdown support.

So then I tried taiga and a few others before landing on Wekan. Really great software, but the terrible API, horrible mobile support, and slow outdated UI drove me away…

Now I’m on Vikunja, which ironically doesn’t support markdown text. So I basically returned to square 1 with a better UI lol. I almost stayed on Wekan because of the checklist support, but the faster speeds, nice API, and slick UI in vikunja landed me here… for now.

I’ve been using “passwords” on nextcloud for a few years now. Minimal issues with the app, moving apps, and browser extensions. Not perfect, but hey it’s self hosted and reliable.