Ricardo Maranhao
-
Posts
39 -
Joined
-
Last visited
Content Type
Profiles
Forums
Downloads
Store
Gallery
Bug Reports
Documentation
Landing
Posts posted by Ricardo Maranhao
-
-
Hi guys, i'm using the PrivateVPN, always worked with the wireguard in unraid.
But after i had a new unraid server, i download the wireguard.conf, import into VPN settings, change the qbitorrrent network to the WG0, but when i access it shows error. When i change back to meu main custom network it works.
Any ideias what that can be?
IN MY CUSTOM NETWORK
IN THE WG0 NETWORK:
-
11 hours ago, mgutt said:
Use your hosts file and overwrite the IP address of your domain against your routers public IP, so it bypasses Cloudflare. Now check the domain through your browser.
Sorry for the noob question.
Where is the hosts file? How can i edit it?
🙂
-
3 hours ago, mgutt said:
Don't know. But the easiest fix should ve to delete the SSL certificate and obtain a new one.
Just did, deleted the old, made a new one with key in CloudFlare, deleted in NPM, upload the new one. Keeps getting the error.
After putting the new SSL, i restart NPM, this is the log:
Quote[services.d] starting services
[services.d] done.
❯ Enabling IPV6 in hosts: /etc/nginx/conf.d
❯ /etc/nginx/conf.d/include/assets.conf
❯ /etc/nginx/conf.d/include/block-exploits.conf
❯ /etc/nginx/conf.d/include/force-ssl.conf
❯ /etc/nginx/conf.d/include/ip_ranges.conf
❯ /etc/nginx/conf.d/include/letsencrypt-acme-challenge.conf
❯ /etc/nginx/conf.d/include/proxy.conf
❯ /etc/nginx/conf.d/include/ssl-ciphers.conf
❯ /etc/nginx/conf.d/include/resolvers.conf
❯ /etc/nginx/conf.d/default.conf
❯ /etc/nginx/conf.d/production.conf
❯ Enabling IPV6 in hosts: /data/nginx
❯ /data/nginx/proxy_host/3.conf
❯ /data/nginx/proxy_host/5.conf
❯ /data/nginx/proxy_host/6.conf
❯ /data/nginx/proxy_host/8.conf
❯ /data/nginx/proxy_host/4.conf
❯ /data/nginx/proxy_host/1.conf
❯ /data/nginx/proxy_host/2.conf
❯ /data/nginx/proxy_host/7.conf
[9/15/2022] [9:32:05 PM] [Migrate ] › ℹ info Current database version: none
[9/15/2022] [9:32:05 PM] [Setup ] › ℹ info Logrotate Timer initialized
[9/15/2022] [9:32:05 PM] [Setup ] › ℹ info Logrotate completed.
[9/15/2022] [9:32:05 PM] [IP Ranges] › ℹ info Fetching IP Ranges from online services...
[9/15/2022] [9:32:05 PM] [IP Ranges] › ℹ info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json
[9/15/2022] [9:32:06 PM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v4
[9/15/2022] [9:32:06 PM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v6
[9/15/2022] [9:32:06 PM] [SSL ] › ℹ info Let's Encrypt Renewal Timer initialized
[9/15/2022] [9:32:06 PM] [SSL ] › ℹ info Renewing SSL certs close to expiry...
[9/15/2022] [9:32:06 PM] [IP Ranges] › ℹ info IP Ranges Renewal Timer initialized
[9/15/2022] [9:32:06 PM] [Global ] › ℹ info Backend PID 247 listening on port 3000 ...
[9/15/2022] [9:32:07 PM] [Nginx ] › ℹ info Reloading Nginx
[9/15/2022] [9:32:07 PM] [SSL ] › ℹ info Renew Complete
`QueryBuilder#allowEager` method is deprecated. You should use `allowGraph` instead. `allowEager` method will be removed in 3.0
`QueryBuilder#eager` method is deprecated. You should use the `withGraphFetched` method instead. `eager` method will be removed in 3.0
QueryBuilder#omit is deprecated. This method will be removed in version 3.0
Model#$omit is deprected and will be removed in 3.0. -
Hi guys, i'm here again. 😅
My unraid server had a power loss.
After i boot, everythin is working fine. All dockers are ok, all the networks are ok, VMS ok.
But the remote acess is not working due to a SSL handshake error. But i didn't changed anything, it only went offline.
This is my emby server.
Docker is ok:
NPM is ok, like always, didn't touched anything there.
What after a power loss, could cause this?
Thanks in advanced
-
1 hour ago, mgutt said:
I meant, that you need to test the hostname "qbittorent". Try this:
curl qbittorrent
This is the IP and Port of qbittorrent? HTTP 200 means NPM is able to reach it, so it should work.
Try in the NPM host settings the internal wg0 IP of qbittorrent as target:
172.31.200.2
And maybe try to curl this IP as well.
If NPM and qbittorrent are in the same network, NPM should be able to reach qbittorrent through this IP. But as those IPs can change on container restart (depends on the starting order of the containers), you should instead use the container name as target in your host settings (container name = hostname). By that NPM asks the DNS server of "wg0" for the current IP of qbittorrent.
SOLVED!
Thanks a lot @mgutt!! You are the choosen one!!
[root@docker-0edc1cf543b4:/app]# curl qbittorrent curl: (7) Failed to connect to qbittorrent port 80: Connection refused [root@docker-0edc1cf543b4:/app]# curl qbittorrent:8081 curl: (7) Failed to connect to qbittorrent port 8081: Connection refused [root@docker-0edc1cf543b4:/app]# curl qbittorrent:8080 <!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="mobile-web-app-capable" content="yes"><meta name="viewport" content="width=device-width,initial-scale=1"><!--[if IE]><link rel="icon" href="./favicon.ico?s=1"><![endif]--><title>qBittorrent</title><meta name="description" content="The sleekest looking WEBUI for qBittorrent made with Vuejs!"><meta property="og:image" content="./icons/android-chrome-maskable-512x512.png?s=22"><meta property="og:description" content="torrent universal server for remote download."><meta property="og:title" content="WELCOME :: VUE TORRENT"><script defer="defer" type="module" src="js/chunk-vendors.4d7ded41.js"></script><script defer="defer" type="module" src="js/app.370c936b.js"></script><link href="css/chunk-vendors.e1b5c20a.css" rel="stylesheet"><link href="css/app.d515b361.css" rel="stylesheet"><link rel="icon" type="image/svg+xml" href="img/icons/favicon.svg"><link rel="icon" type="image/png" sizes="32x32" href="./icons/favicon-32x32.png?s=22"><link rel="icon" type="image/png" sizes="16x16" href="./icons/favicon-16x16.png?s=22"><link rel="manifest" href="manifest.json"><meta name="theme-color" content="#597566"><meta name="apple-mobile-web-app-capable" content="no"><meta name="apple-mobile-web-app-status-bar-style" content="default"><meta name="apple-mobile-web-app-title" content="VueTorrent"><link rel="apple-touch-icon" href="./icons/apple-touch-icon.png?s=22"><link rel="mask-icon" href="./icons/safari-pinned-tab.svg?s=22" color="#597566"><meta name="msapplication-TileImage" content="img/icons/msapplication-icon-144x144.png"><meta name="msapplication-TileColor" content="#000000"><script defer="defer" src="js/chunk-vendors-legacy.39ed746a.js" nomodule></script><script defer="defer" src="js/app-legacy.36917abe.js" nomodule></script></head><body><noscript><strong>We're sorry but VueTorrent doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>[root@docker-0edc1cf543b4:/app]#
To sumarize for person in the future with that problem:
CASE OF USE:
Use a container inside a WIREGUARD VPN TUNNEL IN DOCKER WITH A CUSTOM WG NETWORK thats is diferent from your NPM netowrk.
1. Connect the NPM docker to the custom wg network as a second network:
docker network connect wg0 Nginx-Proxy-Manager-Official2. See the network is connected:
docker network inspect <network_name> for example: docker network inspect wg0
3. See if the docker container from NPM is connected, and the other container is there:
[ { "Name": "wg0", "Id": "fd1589ad816d6df8920bba867b7e5369b988abe4e845430abf81613739098e9f", "Created": "2022-06-17T07:39:30.659947081-03:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": {}, "Config": [ { "Subnet": "172.31.200.0/24" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": { "0edc1cf543b477594e7a4b1f83b3eb6a06d9f78c467b8289ec1fe86825bd22b4": { "Name": "Nginx-Proxy-Manager-Official", "EndpointID": "8cbef963f8f24e72bcadedd8b05b1e60b6aa4978e7a3060278afb41b8c1219cb", "MacAddress": "", "IPv4Address": "172.31.200.4/24", "IPv6Address": "" }, "e530259583366654dd0b33404dba652acd15fda16ee213e9750244eff8c1f358": { "Name": "qbittorrent", "EndpointID": "e0020699fe027f83dfbf20ab96f09fc1f87b20d2b3d17f532fa608391fc5de2d", "MacAddress": ", "IPv4Address": "172.31.200.2/24", "IPv6Address": "" } }, "Options": {}, "Labels": {} } ]4. DON'T try to connect using the hostname and external port:
[root@docker-0edc1cf543b4:/app]# curl qbittorrent:8081 curl: (7) Failed to connect to qbittorrent port 8081: Connection refused5. If you going to use the hostname, USE THE INTERNAL DOCKER PORT:
[root@docker-0edc1cf543b4:/app]# curl qbittorrent:8080 <!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="mobile-web-app-capable" content="yes"><meta name="viewport" content="width=device-width,initial-scale=1"><!--[if IE]><link rel="icon" href="./favicon.ico?s=1"><![endif]--><title>qBittorrent</title><meta name="description" content="The sleekest looking WEBUI for qBittorrent made with Vuejs!"><meta property="og:image" content="./icons/android-chrome-maskable-512x512.png?s=22"><meta property="og:description" content="torrent universal server for remote download."><meta property="og:title" content="WELCOME :: VUE TORRENT"><script defer="defer" type="module" src="js/chunk-vendors.4d7ded41.js"></script><script defer="defer" type="module" src="js/app.370c936b.js"></script><link href="css/chunk-vendors.e1b5c20a.css" rel="stylesheet"><link href="css/app.d515b361.css" rel="stylesheet"><link rel="icon" type="image/svg+xml" href="img/icons/favicon.svg"><link rel="icon" type="image/png" sizes="32x32" href="./icons/favicon-32x32.png?s=22"><link rel="icon" type="image/png" sizes="16x16" href="./icons/favicon-16x16.png?s=22"><link rel="manifest" href="manifest.json"><meta name="theme-color" content="#597566"><meta name="apple-mobile-web-app-capable" content="no"><meta name="apple-mobile-web-app-status-bar-style" content="default"><meta name="apple-mobile-web-app-title" content="VueTorrent"><link rel="apple-touch-icon" href="./icons/apple-touch-icon.png?s=22"><link rel="mask-icon" href="./icons/safari-pinned-tab.svg?s=22" color="#597566"><meta name="msapplication-TileImage" content="img/icons/msapplication-icon-144x144.png"><meta name="msapplication-TileColor" content="#000000"><script defer="defer" src="js/chunk-vendors-legacy.39ed746a.js" nomodule></script><script defer="defer" src="js/app-legacy.36917abe.js" nomodule></script></head><body><noscript><strong>We're sorry but VueTorrent doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
6. You can use the external ip WITH the external port:
[root@docker-0edc1cf543b4:/app]# curl 192.168.1.30:8081 <!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="mobile-web-app-capable" content="yes"><meta name="viewport" content="width=device-width,initial-scale=1"><!--[if IE]><link rel="icon" href="./favicon.ico?s=1"><![endif]--><title>qBittorrent</title><meta name="description" content="The sleekest looking WEBUI for qBittorrent made with Vuejs!"><meta property="og:image" content="./icons/android-chrome-maskable-512x512.png?s=22"><meta property="og:description" content="torrent universal server for remote download."><meta property="og:title" content="WELCOME :: VUE TORRENT"><script defer="defer" type="module" src="js/chunk-vendors.4d7ded41.js"></script><script defer="defer" type="module" src="js/app.370c936b.js"></script><link href="css/chunk-vendors.e1b5c20a.css" rel="stylesheet"><link href="css/app.d515b361.css" rel="stylesheet"><link rel="icon" type="image/svg+xml" href="img/icons/favicon.svg"><link rel="icon" type="image/png" sizes="32x32" href="./icons/favicon-32x32.png?s=22"><link rel="icon" type="image/png" sizes="16x16" href="./icons/favicon-16x16.png?s=22"><link rel="manifest" href="manifest.json"><meta name="theme-color" content="#597566"><meta name="apple-mobile-web-app-capable" content="no"><meta name="apple-mobile-web-app-status-bar-style" content="default"><meta name="apple-mobile-web-app-title" content="VueTorrent"><link rel="apple-touch-icon" href="./icons/apple-touch-icon.png?s=22"><link rel="mask-icon" href="./icons/safari-pinned-tab.svg?s=22" color="#597566"><meta name="msapplication-TileImage" content="img/icons/msapplication-icon-144x144.png"><meta name="msapplication-TileColor" content="#000000"><script defer="defer" src="js/chunk-vendors-legacy.39ed746a.js" nomodule></script><script defer="defer" src="js/app-legacy.36917abe.js" nomodule></script></head><body><noscript><strong>We're sorry but VueTorrent doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
Hope these help someone!
Thanks again for @mgutt!
-
1
-
-
5 hours ago, mgutt said:
What didn't work? NPM is in the list?!
Try to ping qbittorrent through NPMs console. Should work.
It keeps getting the error:
Error 502
Bad gateway
When i acess via my domain using cloudflare. The others contaneirs that are in the same network as main works perfect. But the qbittorrent container that is the in the wg0 keets me getting error 502.
I added the NPM into the same wg0 network as a second network, it is listed there but nothing changed.
Here is what show me when i ping the qbittorrent container from NPM:
# su _ _ _ ____ __ __ | \ | | __ _(_)_ __ __ _| _ \ _ __ _____ ___ _| \/ | __ _ _ __ __ _ __ _ ___ _ __ | \| |/ _` | | '_ \\ \/ / |_) | '__/ _ \ \/ / | | | |\/| |/ _` | '_ \ / _` |/ _` |/ _ \ '__| | |\ | (_| | | | | |> <| __/| | | (_) > <| |_| | | | | (_| | | | | (_| | (_| | __/ | |_| \_|\__, |_|_| |_/_/\_\_| |_| \___/_/\_\\__, |_| |_|\__,_|_| |_|\__,_|\__, |\___|_| |___/ |___/ |___/ Version 2.9.18 (cce73be) 2022-03-31 05:46:34 UTC, OpenResty 1.19.9.1, debian 10 (buster), Certbot certbot 1.25.0 Base: debian:buster-slim, linux/amd64 Certbot: nginxproxymanager/nginx-full:latest, linux/amd64 Node: nginxproxymanager/nginx-full:certbot, linux/amd64 [root@docker-0edc1cf543b4:/app]# curl -sSL -D - http://192.168.1.30:8081 -o /dev/null HTTP/1.1 200 OK cache-control: no-store connection: keep-alive content-length: 2136 content-type: text/html date: Sun, 19 Jun 2022 11:09:35 GMT x-content-type-options: nosniff x-xss-protection: 1; mode=block -
13 minutes ago, mgutt said:
So NPM uses a different network? Then you could try to add the custom network as a second network to NPM:
docker network connect wg0 Nginx-Proxy-Manager-Official
I added NPM to wg0 as a second network but it didn't worked, the log:
root@Matrix:~# docker network inspect wg0 [ { "Name": "wg0", "Id": "fd1589ad816d6df8920bba867b7e5369b988abe4e845430abf81613739098e9f", "Created": "2022-06-17T07:39:30.659947081-03:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": {}, "Config": [ { "Subnet": "172.31.200.0/24" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": { "07361606c2cb4742581aeabcdc22ae9a30853201e5fe8fbadbb0c5bc869f32d7": { "Name": "Firefox", "EndpointID": "1c743ba9593a2fdb5e805a5acc22db69c3e2683cedeae906199396a22cf64114", "MacAddress": "", "IPv4Address": "172.31.200.3/24", "IPv6Address": "" }, "0edc1cf543b477594e7a4b1f83b3eb6a06d9f78c467b8289ec1fe86825bd22b4": { "Name": "Nginx-Proxy-Manager-Official", "EndpointID": "8cbef963f8f24e72bcadedd8b05b1e60b6aa4978e7a3060278afb41b8c1219cb", "MacAddress": "", "IPv4Address": "172.31.200.4/24", "IPv6Address": "" }, "e530259583366654dd0b33404dba652acd15fda16ee213e9750244eff8c1f358": { "Name": "qbittorrent", "EndpointID": "e0020699fe027f83dfbf20ab96f09fc1f87b20d2b3d17f532fa608391fc5de2d", "MacAddress": ", "IPv4Address": "172.31.200.2/24", "IPv6Address": "" } }, "Options": {}, "Labels": {} } ] -
My NPM can't connect with the qbitorrent.
NPM is in a custom docker netwok (infamous). The qbitorrent is in a wireguard docker network (wg0).
So when i try to acess my domain (cloudflare + npm) the qbitorrent doesn't acess.
The error is:
Error 502
Bad gateway
All the other contaneir that are in the same network can acess. Is there anything i can do? I need the torrent in the wg0 network, to use my PrivateVPN account with the wireguard killswitch if the vpn goes down. It's a lot safer to download.
-
Hello my friends again,
I started to use the VPN MANAGER feature in UNRAID 6.10.
Set to VPN tunneled access for docker, and created the wg0 network. Than i set ONLY the qbittorrent docker to use that network so all my downloads would be done thru my VPN (privateVPN).
But without touching in anything other than that, my CLOUDFLARE started giving me ERROR 525 (handshake error). So i can't connect to radarr, sonarr, emby via my domain. But the QBITTORRENT that is set under the new wg0 network is the one that i can acess, with limitations (the login form don't submit).
Any ideias?
-
10 minutes ago, Zelda2000 said:
6.10.1 and 6.10.2 boot only for me at first launch after upgrade. Next launches don't boot with no detection of usb with message "cannot mount /dev/sda1 - PRESS ENTER TO REBOOT"
With 6.9.2 i have no problem. So 6.10.1 or 6.10.2 dont fix the problem for me.
What should i do ? Recreate the USB support and delete all partitions, recreate GPT, create FAT32 partition and finally use the tool for recreate the USB support from backup with 6.10.2 in UEFI mode ?
Easiest thing is to download the zip for the 6.9.2 release from the Unraid download page and then extract all the bz* type files overwriting the ones on the flash. Copy the changes.txt as well
-
Do you run frigate inside home assistant in a VM?
-
1 minute ago, meep said:
I managed to cobble together a quick tutorial. Let me know if that's clear, if you have any further questions that I could address in the article.
https://mediaserver8.blogspot.com/2022/05/mapping-additional-and-network-drives.html
You are the man!! Thanks a lot!!!
-
13 minutes ago, meep said:
Yes, inside your vm, you can mount any unRAID share just like you would from a regular PC. It behaves just like a network volume. This is a good solution.
I run blueiris in a Windows VM for my security cameras. I have an unassigned disk passed through to the VM for recording storage / scratch The VM sees this as a locally mounted HD. I also have a an unRAID share mounted in the VM as a network drive. Here, BlueIris moves ‘motion’ tagged clips nightly. Works really well.
Do you know any tutorial on how to do that?
-
3 minutes ago, meep said:
Qcow2 images don’t auto-shrink when data is removed, afaik.
i found this on the inter web describing how trimming is possible if the vm is set up just right. I’ve never tried it in unRAID, but it should work. There may be other solutions as well;
Maybe can i do like docker and set a folder inside a VM to a share in the array?
-
I had the same thing. On the 6.10.0 my server didn't boot. In the 6.10.1 it booted... it has samething to do with the partition of the flash drive.
For what i read in the readme, there are no diferences between the .0 and .1 only the boot from partition.
QuoteVersion 6.10.1 2022-05-21
Management:
startup: fix regression: support USB flash boot from other than partition 1
Instal the 6.10.0 and relax.
-
Hello, my cache NVME keeps getting hot (57º degress celsius) all the time, even when the utilization is low (10%).
All the others temps from the hd, ssd, cpu e gpu are normal.
Any ideias what it could be?
-
1 hour ago, Alyred said:
Question 3 (might be more of a Linux question): When I do a "move" command, it appears that it's leaving empty folders behind in the old location that I have to remove manually. Is this normal? It seems I'm probably just missing a command line switch.
Stick to using the gui with krusader e dynamix for the better and easier approach.
-
1 hour ago, Alyred said:
Question 2: To completely refresh a docker app and install it new, it appears I need to manually remove the docker's files under the appdata share. I uninstalled the Plex docker but it left those files behind.
It's always better to delete the appdata manually after remove the conteiner. You can use krusader or the new dynamix file manager to delete the folder.
-
1 hour ago, Alyred said:
First, I created a share for all of my Plex media, but didn't allocate them between drives very well due to mis-counting the . Currently, disk1 and disk2 have a /plex folder, but disk3 does not - everything was allocated to disk1 and disk2 via the plex share. If I create a folder on disk3 named /plex via cli under /mnt/disk3, will I need to adjust my plex share, or should it pick it up and see disk3's /plex folder automatically as part of the "collection" of folders inlcuded in the share? I'm still learning how the btrfs file system works here.
If you want to the share plex saves files to the disk3, you have to set it up in the share configuration.
In the included disk you choose all the disk that will storage files from this share.
-
I run in my unraid server a VM of Home Assistant with the FRIGATE NVR addon.
I have 3 cameras in frigate, recording 1 day of all MOTION + 5 days of PERSON detection.
But the size of the VM always rise, i have to expand it a lot... but the frigate auto delete the old videos that have passed the date limit of my configuration. Once the frigate has saved the video, even after it delete it, the alocation size is not downsized?
-
Just now, itimpi said:
There is the manual backup option available if you click on the drive on the ‘main tab. Automated backups can be done via the My Servers or CA Backup plugins (the latter also does appdata).
Is there any other thing that i should backup as well? Or these only two are enought?
Maybe the domains for the VMS?
The system one with the docker and libvert for the docker containers?
-
Hi guys, pretty new (3 months) of having a unraid server.
For what i've seen that must have folder/files are:
- appdata
- Flash drive config folder
For the appdata i'm using the Backup/Restore Appdata and sending it the my other PC thru a remote share.
For the flash drive config folder, what can i do to backup it?
Is there any other file/folder that is a MUST HAVE to backup to insure safety to my unraid server?
Thanks guys!
-
2 hours ago, itimpi said:
Yes, although you should ideally also do the same with the changes.txt file.
Thanks @itimpi! When i put only the BZ* files it didn't worked. But when i sent the changes.txt as well, all worked like a charm!
-
2 minutes ago, itimpi said:
Easiest thing is to download the zip for the 6.10.1 release from the Unraid download page and then extract all the bz* type files overwriting the ones on the flash.
Only those ones? (picture attached)
How to Run Node.JS code in a private docker container in my server?
in Docker Engine
Posted
Hi, i did some coding and in my personal machine i don't have docker, and don't want to install it.
How can i run these code in docker in my unraid server? I only see how to add containers that are in the CA. I can't upload it there, since is a private code.