Everything posted by flybrys
-
Docker Post Arguments don't work when Tailscale enabled
I have been using && docker network connect proxynet traefik in the docker "Post Arguments" field to connect my traefik container to an additional docker network after it is booted. It has been working great since forever. Since enabling tailscale on the container, I notice the docker run command sets this as an environment variable for the container With tailscale disabled this is the output from the update container screen: docker run -d --name='traefik' --net='br0.11' --ip='172.16.11.223' --ip6='REDACTED::223' --pids-limit 2048 -e TZ="Australia/Sydney" -e HOST_OS="Unraid" -e HOST_HOSTNAME="Cerebro" -e HOST_CONTAINERNAME="traefik" -e 'TCP_PORT_443'='44301' -e 'TCP_PORT_80'='8001' -e 'TCP_PORT_8080'='8183' -e 'CF_DNS_API_TOKEN'='REDACTED' -e 'traefik.http.routers.api.insecure'='true' -l net.unraid.docker.managed=dockerman -l net.unraid.docker.webui='http://[IP]:[PORT:8080]/' -l 'traefik.http.routers.api.entryPoints'='https' -l 'traefik.http.routers.api.service'='api@internal' -l 'traefik.enable'='false' -v '/mnt/user/appdata/traefik':'/etc/traefik':'rw' -v '/var/run/docker.sock':'/var/run/docker.sock':'rw' 'traefik:latest' && docker network connect proxynet traefik And with tailscale enabled: docker run -d --name='traefik' --entrypoint='/opt/unraid/tailscale' --net='br0.11' --ip='172.16.11.223' --ip6='REDACTED::223' --pids-limit 2048 -e TZ="Australia/Sydney" -e HOST_OS="Unraid" -e HOST_HOSTNAME="Cerebro" -e HOST_CONTAINERNAME="traefik" -e 'TCP_PORT_443'='44301' -e 'TCP_PORT_80'='8001' -e 'TCP_PORT_8080'='8183' -e 'CF_DNS_API_TOKEN'='REDACTED' -e 'traefik.http.routers.api.insecure'='true' -e TAILSCALE_HOSTNAME='traefik' -e TAILSCALE_USE_SSH='false' -e TAILSCALE_USERSPACE_NETWORKING='true' -e TAILSCALE_STATE_DIR='/etc/traefik/.tailscale_state' -e ORG_POSTARGS='&& docker network connect proxynet traefik' -e ORG_ENTRYPOINT="/entrypoint.sh" -e ORG_CMD="traefik" -l net.unraid.docker.managed=dockerman -l net.unraid.docker.webui='http://[IP]:[PORT:8080]/' -l 'traefik.http.routers.api.entryPoints'='https' -l 'traefik.http.routers.api.service'='api@internal' -l 'traefik.enable'='false' -l net.unraid.docker.tailscale.webui='http://[noserve]:8080/' -l net.unraid.docker.tailscale.hostname='traefik' -v '/mnt/user/appdata/traefik':'/etc/traefik':'rw' -v '/var/run/docker.sock':'/var/run/docker.sock':'rw' -v '/usr/local/share/docker/tailscale_container_hook':'/opt/unraid/tailscale' 'traefik:latest' You can see that it changes the post arguments to an environment variable with: -e ORG_POSTARGS='&& docker network connect proxynet traefik'
-
[Support] alturismo - Repos
My understanding of the OnDeck is that its a list of shows that are in progress. So for example, last week my wife and I started watching House. Its an old show and resided on the array. The first time we started watching it, it played from the array. However with the plexcache script running overnight, it moved the next 10 episodes (I configured 10) of House to the cache pool. So the next day when we watched it, it played straight from the cache. After a few days, the script will see that On Deck is showing that some episodes have been watched, and the script moves those back to the array and moves the same amount of next episodes back to the cache pool. There will always be 10 episodes available until we finish the show. It is also handy, because we watch multiple shows, and so do the friends I have invited to my plex account. The script can see all the shows they are watching, and copies the next 10 episodes of each show to the cache pool. So it doesn't have to do it live and doesn't need to spin up the drive at all when playback is requested. The only problem I have with it, is that my son watching kids shows randomly, the script can't handle that.
-
[Support] alturismo - Repos
Not sure if it has been mentioned, I tried searching. I'm currently using this script https://github.com/bexem/PlexCache The advantage is it scans Plex for On Deck media for all users and moves a selected amount of episodes to the cache pool. I run it nightly and it keeps up to date. The problem I have is it is clunky and it doesn't seem to be developed anymore. I'm hoping to keep certain shows on the cache permanently (as my son plays random episodes of his shows and PlexCache can't deal with that). I was looking for another solution and found yours. Do you think you could add the functions of this script to your plugin?
-
[Script] Unassigned Devices Share Re-Mounter (SMB and NFS)
This is perfect timing for me also. Just found my off-site backup wasn't working for weeks as the remote server network went down for a few hours and it never remounted. I notice it attempts to mount regardless if the share is already mounted or not. Would it be possible to do some checks to see if it is already mounted before sending the mount command again? The reason for this is my syslog now has Remote Share xxx is already mounted every 5 minutes Thanks again for your work!
-
Disable local Inter-VLAN Traffic
Hi all, I have my Unraid server on my secure network and running some docker images using a docker custom bridge network on br0. I also have a VM on my insecure network VLAN, using br0.11 In my router I have a deny all rule from insecure to secure, however the insecure VM can access web servers on the docker containers running on the secure network. I did a tcpdump and found that traffic is flowing directly through a vnet0 interface rather than via my firewall. I assume this is by design, but I'd prefer to have control over all inter-vlan comms in one place via my firewall. For example if my VM is compromised, I don't want an attacker to have access to services running on my secure network. Is there a way to disable this? Is it as simple as turning off "enable bridging" in network settings? I don't want to try this as I am unsure if this messes up the bridging in docker. Thanks for any assistance! Bry