Klayman

it took a while as this is just a hobby, but now it works. Thanks a lot. The samba part will be the next I'll try to figure out :-)

Thank you very much, I will try this tomorrow right away and let you know if it worked. Please allow one more question: Is it also possible to bind Samba to vlan 10 on eth1 only? Thanks, Klayman

Hi, I need some help with setting up my unraid properly. I have to NICs, one dedicated for administration and one for docker containers and VMs with a few vlans (i.e. the services provided). Unfortunately there seems to be some mess in my config and I cannot access containers on a certain bridged interface. What I want to achieve: Connect to the Unraid GUI via eth0 on 192.168.42.100 only. Connect to docker containers via eth1 on vlans 1 (192.168.42.0/24) and 10 (192.168.20.0/24) and connect to VMs also via eth1 on vlans 10 and 20 (192.168.20.0/24). I can reach the backrest container on 192.168.42.10, but nothing on the other networks like br1.10 Here is the config of eth0: This is eth1: And this is the docker config: And this is the container I am trying to reach, but so far without any success :-( And here an overview of all containers: Any idea of what I did wrong here? Thanks, Klayman

Thank you for your extensive answer. I have now implemented automated ZFS Snapshots with the "ZFS Buddy Backup" plugin. So far I do only use it for snapshots as I don't have another ZFS system available yet to also send snapshots to. The snapshots serve as a first safety net for my own mistakes... For Appdata and VM metadata I use the plugin "appdata backup" and back it up to my pool. It automatically stops and starts the containers to have a consistent backup. Eventually the important parts of the pool (i.e. not movies and such), including the appdata backup folder are backed up daily with backrest to a Hetzner S3 compatible storage with 30 daily and 12 monthly snapshots. Also 10% of the data on the S3 storage are checked for integrity every sunday night. For now I am happy with it, except backing up the virtual machines. But these run databases within the guest OS (e.g. HomeAssistant) and I am not sure how to back them up. Is there a way within unraid, or does it HAVE to be initiated from the VM itself? Thanks, Klayman

ok, answer to self: I figured it out with below script, which is a simplification of this: #!/bin/bash # Define the source directory where the certificates are stored # In my case npm-1 contains the wildcard certificate for my domain source_dir="/mnt/user/appdata/Nginx-Proxy-Manager-Official/letsencrypt/live/npm-1/" src_cert="cert.pem" src_chain="chain.pem" src_key="privkey.pem" server_name="gorleben" # hostname of your server ################################################################## # Check if the source directory exists if [ ! -d "$source_dir" ]; then echo "Error: Source directory not found: $source_dir. Make sure you have the correct path set in the script." exit 1 fi # Check if the source certificate files exist if [ ! -f "$source_dir/$src_cert" ] || [ ! -f "$source_dir/$src_chain" ] || [ ! -f "$source_dir/$src_key" ]; then echo "Error: Source certificate files not found. Make sure you have the correct file names set in the script." exit 1 fi # Generate certificate file names based on server hostname. target="/boot/config/ssl/certs/${server_name}_unraid_bundle.pem" # Copy and rename the source certificate files to each target directory target_dir=$(dirname "$target") if [ ! -d "$target_dir" ]; then echo "Error: Target directory not found: $target_dir" continue fi cat "$source_dir/$src_cert" "$source_dir/$src_chain" "$source_dir/$src_key" > "$target" # Set appropriate permissions for the certificate files chmod 600 "$target" echo "Successfully copied and renamed SSL certificates to $target_dir" # Restart the Nginx web server to apply the changes echo "Reloading Nginx web server to apply SSL certificate changes..." /etc/rc.d/rc.nginx reload || { echo "Failed to reload Nginx"; exit 1; } echo "SSL certificates successfully reloaded"

Bump… anyone?

Hi, my unraid server becomes more and more how I like it to be, thus I soon have to set up some backups. The data stored on my unraid are personal files like documents and stuff, large amount of photos and a few media files. On top I run a docker container with paperless, which contains a large amount of important documents, as well as a virtual machine with HomeAssistant. I don't have a lot of changes, most are coming from paperless, editing a bunch of photos once in a while and obviously bazillions of events and measurements within homeassistant. My curent thoughts on this are: 24 hourly and 7 daily ZFS snapshots for file history (i.e. against personally induced f... ups) ZFS send 7 daily and 4 weekly snapshots to a small backup server in another part of my house (which is fireproof) rsync (or rclone?) a weekly backup to a cloud storage There are still a few questions though: Does this make sense after all? How do I back up things like the paperless container and the HomeAssistant VM due to the built in databases? Which backups should I run as full backups, and which as incremental ones? How do you do it, what are your concepts and why? What tools are you using? regards, Klayman

thanks. I have changd it to overlay 2. Turns out configurations and stuff is still available from the templates and appdata, so I'll try this first and then move to an image later if I encounter further issues. I have also removed the ZFS datasets from docker before "re-enabling" it with overlay. Learning a lot these days ;-)

Sure. I mean I can find them in appdata (cert, chain, fullchain, key), but I do not know where to put them in the unraid config folder. My idea was to copy the certificate and the key to /boot/config/ssl/cert, so that the unraid nginx will use them. I have a valid wildcard certificate with CN *.mydomain.tld and SAN *.mydomain.tld and mydomain.tld (of course I do also have the private key).

Hi, while playing around with the system (like changing configs of containers back and forth) something I don't understand is increasing (see picture below). I have five containers running, but there is this huge number of images(?) under the docker dataset. Can anybody tell me what it is, what it is needed for and how I can remove it if reasonable? I run unraid 7.1.4 with a pool of four nvme drives, mounted at /mnt/nvme. The pool also contains other datasets for e.g. personal shares, VMs, etc. Thanks :-) Klayman

Thank you. Unfortunately this only works while the array is up and running. I have an encrypted ZFS pool which requires a password to be entered manually, thus nginx would not run after a reboot. I would rather like to copy the wildcard certificate from appdata to the cert store of Unraid. Best, Klayman

Hello, I have nginx-proxy-manager up and running and configured to obtain a wildcard certificate from letsencrypt via dns challende. Under /mnt/user/appdata/Nginx-Proxy-Manager-Official/letsencrypt/live/npm-1 I can find what appears to be symlinks, pointing to lrwxrwxrwx 1 root root 29 Jun 19 22:02 cert.pem -> ../../archive/npm-1/cert1.pem lrwxrwxrwx 1 root root 30 Jun 19 22:02 chain.pem -> ../../archive/npm-1/chain1.pem lrwxrwxrwx 1 root root 34 Jun 19 22:02 fullchain.pem -> ../../archive/npm-1/fullchain1.pem lrwxrwxrwx 1 root root 32 Jun 19 22:02 privkey.pem -> ../../archive/npm-1/privkey1.pem which of these files do I have to copy where exactly, so that unraid uses them for it's frontend? Thanks, Klayman

Thanks, that did the trick. Is it also possible that the containers request their IP from an external DHCP?

Hi, I am wondering why I cannot select /24 for my docker containers. I have a class C network 192.168.42.0/24 for the unraid server itself on eth0. Then I have added two IPv4 only VLANs 10 and 20 with no address assignment for unraid. Docker is set to macvlan with host access to custom networks Disabled. Under IPv4 custom network on interface br0.10 (i.e. for VLAN 10) I can now enter a subnet (here 192.168.10.0) but I can only select /25 from the dropdown. Same for br0.20. Anybody know where this comes from? I'd like to allocate the containers a higher IP address than 127, thus the subnet mask must be /24. Also I am not sure how this might affect other parts of networking which is completely on /24... Best, Klayman

Answer to self: Yes, there is. It's called email-OAuth2-proxy and can be found here: blacktirion/email-oauth2-proxy-docker: Dockerized Version of simonrob/email-oauth2-proxy It allows to connect printers and scanners via smtp to services like Exchange365 which only allow OAuth V2 auhentication. Important aspect: The proxy will present an URL through which to authenticate. To do so, the following steps are necessary as the original proxy is not designed to run as a container: Create emailproxy.config and start container Open container console Kill running process: ps aux | grep emailproxy.py kill -9 7 Run interactive: python emailproxy.py --no-gui --config-file /config/emailproxy.config --debug --external-auth Run SMTP request against container IP and port Complete login to provided link and provide interactive mode with localhost redirect link (for me the first of the 2 links showed worked. Also maximizing the console seems to solve some issues with line breaks in the link) Paste the redirect link with the authorization code from your browser back into the console, the proxy will create a token etc and write it to the config file Restart container. For Microsoft365: When you edit the config file, make sure you replace the word "common" in permission_url and token_url contain with your Microsoft/Azure tenant id. Best, Klayman