Aceriz

Members
 View Profile  See their activity

  • Posts

    206

  • Joined

 Content Type 

Posts posted by Aceriz

    BTRFS Cache drive Error after trying to re-allign to the 1Mib in 6.9.1. Please help

    in General Support

    Posted

    1 minute ago, JorgeB said:

    According to the syslog after booting and when you started the procedure there was only one cache device assigned, so you didn't start like the instruction, i.e., unassign one of the devices and start the array, this will erase the unassigned device, since you didn't do this it wasn't erased, and looks to me like that was what caused the problems later, not sure if or how you can recover the pool now.

    So if this is the case... which sucks because I thought I had followed the steps closely...  Would the next step be just to format both SSD's.    How would I go about doing this??

     

    then using ca appdata backup to reinstall the appdata that I had backup up Monday (this was technically before my update to 6.9.1-- would this cause issues??)...   Then once CA backup is finished doing its thing.  Delete the old Docker image  and go within Docker tab and reinstall based on my config files? as spaceinvader does in his video from a few years ago(old i know)..

    Would there be other things I need to do... ( i know I will have to probably just redo my windows VM From scratch to be safe/ easiest).

     

    Do I need to change anything in my shares before I format things??

     

    ?

    BTRFS Cache drive Error after trying to re-allign to the 1Mib in 6.9.1. Please help

    in General Support

    Posted

    Hi All hoping that someone will be able to help me out.   I was following the instructions below for updating the Cache to be at the 1Mib.   I followed the Unassign/Re-assign Method  as described below.  I have made it through steps 1-4  with it Balancing and completing balance at each of the steps.    I was then ready to go to the second drive of my Two drive Cache and am hitting problem.. 

     

    When I did the above unassign/ re-assign for the first time I chose the second of my two drives first removing it from the pool then starting array, having the balance occur then stoping and readding the second drive. (as described in the steps below i link).  After the balance completes for the second time I can see that the second drive now has 1Mib  alignment. 

     

    When I go now to remove the 1st SSD and restart the array leaving only the 2nd (newly balanced ssd) I am getting error where it says "No BTRFS  devices unmountable .  no file system.   Asking me to format the drive .  Thus it is not balancing or even able to  mount the 2nd drive... 

     

    I tried to turn off the array and select again both or just the first drive... and am getting the same error.   I am not sure what to do...  would really appreciate help   I have attached diagnostics   

     

     

     

    rizznetunraid-diagnostics-20210310-1201.zip

    Unraid OS version 6.9.1 available

    in Announcements

    Posted

    Hi All hoping that someone will be able to help me out.   I was following the instructions below for updating the Cache to be at the 1Mib.   I followed the Unassign/Re-assign Method  as described below.  I have made it through steps 1-4  with it Balancing and completing balance at each of the steps.    I am now ready to go to the second drive of my Two drive Cache and am hitting problem.. 

     

    When I did the above unassign/ re-assign for the first time I chose the second of my two drives first removing it from the pool then starting array, having the balance occur then stoping and readding the second drive.  After the balance completes for the second time I can see that the second drive now has 1Mib  alignment. 

     

    When I go now to remove the 1st SSD and restart the array leaving only the 2nd (newly balanced ssd) I am getting error where it says "No BTRFS  devices unmountable .  no file system.   Asking me to format the drive . 

     

    I tried to turn off thrizznetunraid-diagnostics-20210310-1201.zipe array and select again both or just the first drive... and am getting the same error.   I am not sure what to do...  would really appreciate help   I have attached diagnostics

     

     

    [Support] Linuxserver.io - Nextcloud

    in Docker Containers

    Posted

    Hey all hoping someone might be able to help me out.   Noticed the following error within nextcloud... Not sure where it is coming from or how to investigate.     It looks to be spreed app ?   but when I go to the app store page there isn't anything by that name installed ?   when I search for spreed "talk"  app shows up... 

     

    any help of where to go next greatly appreciated

     

     

     

    https://pastebin.com/zyzejp5j

      

    Error	cron	TypeError: Argument 1 passed to OC\DB\SchemaWrapper::__construct() must be an instance of OC\DB\Connection, instance of OC\DB\ConnectionAdapter given, called in /config/www/nextcloud/apps/spreed/lib/BackgroundJob/CheckReferenceIdColumn.php on line 59
/config/www/nextcloud/apps/spreed/lib/BackgroundJob/CheckReferenceIdColumn.php - line 59:

OC\DB\SchemaWrapper->__construct()

/config/www/nextcloud/lib/public/BackgroundJob/Job.php - line 80:

OCA\Talk\BackgroundJob\CheckReferenceIdColumn->run()

/config/www/nextcloud/lib/public/BackgroundJob/TimedJob.php - line 61:

OCP\BackgroundJob\Job->execute()

/config/www/nextcloud/cron.php - line 128:

OCP\BackgroundJob\TimedJob->execute()

     

    [support] Siwat's Docker Repository

    in Docker Containers

    Posted

    Hey   wondering   I have this your excellent docker all setup and working with Nextcloud :)  But am wondering when I try and enable within nextcloud the Use OnlyOffice to generate a Document preview... I keep getting an error below   

     

    Is the preview option not something supported ?   or do I have to do somethign different in the setup ?

      

    Exception: Error occurred in the document service: Error while downloading the document file to be converted.
/config/www/nextcloud/apps/onlyoffice/lib/documentservice.php - line 94:

OCA\Onlyoffice\DocumentService->ProcessConvServResponceError()

/config/www/nextcloud/apps/onlyoffice/lib/preview.php - line 266:

OCA\Onlyoffice\DocumentService->GetConvertedUri()

/config/www/nextcloud/lib/private/Preview/ProviderV1Adapter.php - line 54:

OCA\Onlyoffice\Preview->getThumbnail()

/config/www/nextcloud/lib/private/Preview/GeneratorHelper.php - line 63:

OC\Preview\ProviderV1Adapter->getThumbnail()

/config/www/nextcloud/lib/private/Preview/Generator.php - line 244:

OC\Preview\GeneratorHelper->getThumbnail()

/config/www/nextcloud/lib/private/Preview/Generator.php - line 140:

OC\Preview\Generator->getMaxPreview()

/config/www/nextcloud/lib/private/Preview/Generator.php - line 109:

OC\Preview\Generator->generatePreviews()

/config/www/nextcloud/lib/private/PreviewManager.php - line 190:

OC\Preview\Generator->getPreview()

/config/www/nextcloud/core/Controller/PreviewController.php - line 170:

OC\PreviewManager->getPreview()

/config/www/nextcloud/core/Controller/PreviewController.php - line 143:

OC\Core\Controller\PreviewController->fetchPreview()

/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 218:

OC\Core\Controller\PreviewController->getPreviewByFileId()

/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php - line 127:

OC\AppFramework\Http\Dispatcher->executeController()

/config/www/nextcloud/lib/private/AppFramework/App.php - line 157:

OC\AppFramework\Http\Dispatcher->dispatch()

/config/www/nextcloud/lib/private/Route/Router.php - line 302:

OC\AppFramework\App::main()

/config/www/nextcloud/lib/base.php - line 993:

OC\Route\Router->match()

/config/www/nextcloud/index.php - line 37:

OC::handleRequest()

     

    [Support] ClamAV

    in Docker Containers

    Posted

    On 3/2/2021 at 2:05 PM, WishmastR said:

    Thanks but I guess I'm wait for the official package to be fixed

    So I am not sure what the post arguement parameter does.   But in the official ClamAV on appstore not the one I describe above).   I note that the appstore ClamAV  has a post arguement of  " -i"  

     

    I have been doing a bunch of testing.  When I remove this. . I can see in the log folder that clam appears to be scanning somewhat properly- (can now see the specific files.  still get some of the errors but now it appears to continue to scan.

     

    It also appears to work with the reporting from squids user script...  (had run a few smaller folder tests.. am currently running a full server test of this... Will report back once finished to ensure getting correct output.from script..

     

     

    If 

    On 3/1/2021 at 8:44 PM, TQ said:

    Alpine: 3.13

    ClamAV: 0.103.1-r0

     

    I just scanned a decent chunk of files and did not see the behavior we all were seeing.

    Perhaps TQ  can you clarify what the post arguement of -i   does ?  is this important for the function.... what It appears to do from what I am seeing is change what is shown in the logs? ? 

    [Support] Linuxserver.io - Nextcloud

    in Docker Containers

    Posted · Edited by Aceriz

    On 3/3/2021 at 11:47 AM, skois said:

    for now i just disabled the app, as i only have couple of users, but they are using only webui, not client apps.

    Also because the app blocks ".lock" files i had some problem syncing some files from my repo which i was doing some Helm Charts (they included a Chart.lock). 
    I'll soon use a truenas as a storage device, so with snapshots i wont have any problems with ransom.

    Hey so I see that you said you got the fix from the developer working... mind if I ask how you applied the patch?

     

     

    I have tried uninstalling the app in nextcloud app page.  restarting the containter and then reinstalling the app.. (but I think it is just pulling the old 1.9.0 version.. not the one with the patch that has been committed.

     

    Thanks

     

    [Support] binhex - Sonarr

    in Docker Containers

    Posted

    Hey so trying to just clarify I have setup with Delugevpn  fully up and working.   I have the sonarr and radarr and jackett   previously set to proxy through delugevpn. 

     

    so in https://github.com/binhex/documentation/blob/master/docker/faq/vpn.md   25/26.    am I now having to add the step 24 to also have the proxy working ?   

     

    just trying to clarify what is the next steps ... as I had gone into sonnar and radarr and updated to ignore local address  as per 25/26  but this did not appear to work...  so before I went on to 24  wanted to clarify things... 

     

    [Support] Linuxserver.io - Nextcloud

    in Docker Containers

    Posted

    7 hours ago, skois said:

    Its from the ransomware protection app, i have simillar errors, There is a open issue on github

     

    I had created that issue,  but as per the developer he had expressed that it might be an issue with the nextcloud primary install.. so thought this might be an appropriate area to inquire as well.   If you are able to  figure out a solution please let me know

    [Support] Linuxserver.io - Nextcloud

    in Docker Containers

    Posted

    Hello  All hoping that someone might be able to help me out with.   Thank you so much in advance.  

    I recently did a complete fresh re-install of the Nextcloud docker.   With removal of nextcloud from docker tab, and removal of appdata folder using krusader.    I have been able to completely reinstall and is all appeared to be working.  

     

    I got to re-installing the apps I use specifically getting to the Ransomware proection app. (just updated to NC 21).  

     

    Unfortunately at reinstalling this app (which I had been using before prior to doing my complete wipe and redo)..  I am now getting the below error which comes about ever 1 minute while the app is enabled..   I had already asked the developer of app he suggested I come here (https://discord.com/channels/354974912613449730/506925392603512839/816299887062679582). . 

     

    Below is the two errors that repeat every minute..  Any help figuring this out would be great... 

    Quote

     

    {"reqId":"MTxiAMraajXQ8KWpfa5C","level":3,"time":"2021-03-02T05:39:54+00:00","remoteAddr":"XXX?.XXX.XX.XXX","user"mynextcloud:"mynextcloud","app":"PHP","method":"GET","url":"/ocs/v2.php/search/providers/settings/search?term=ransom&from=%2Fsettings%2Fapps","message":{"Exception":"Error","Message":"include(): Failed opening 'ransomware_protection/personal.php' for inclusion (include_path='/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Crypt_Blowfish:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Date:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Exception:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Idna:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Imap_Client:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_ListHeaders:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Mail:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Mime:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Nls:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Secret:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Smtp:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Socket_Client:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Stream:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Stream_Filter:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Stream_Wrapper:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Support:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Text_Filter:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Text_Flowed:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Translation:/config/www/nextcloud/apps/mail/vendor/pear-pear.horde.org/Horde_Util:/config/www/nextcloud/3rdparty/pear/archive_tar:/config/www/nextcloud/3rdparty/pear/console_getopt:/config/www/nextcloud/3rdparty/pear/pear-core-minimal/src:/config/www/nextcloud/3rdparty/pear/pear_exception:/config/www/nextcloud/apps') at /config/www/nextcloud/lib/private/legacy/OC_App.php#660","Code":0,"Trace":[{"file":"/config/www/nextcloud/lib/private/legacy/OC_App.php","line":660,"function":"onError","class":"OC\Log\ErrorHandler","type":"::"},{"file":"/config/www/nextcloud/lib/private/legacy/OC_App.php","line":660,"function":"include"},{"file":"/config/www/nextcloud/lib/private/Settings/Manager.php","line":258,"function":"getForms","class":"OC_App","type":"::"},{"file":"/config/www/nextcloud/apps/settings/lib/Search/SectionSearch.php","line":99,"function":"getPersonalSections","class":"OC\Settings\Manager","type":"->"},{"file":"/config/www/nextcloud/lib/private/Search/SearchComposer.php","line":162,"function":"search","class":"OCA\Settings\Search\SectionSearch","type":"->"},{"file":"/config/www/nextcloud/core/Controller/UnifiedSearchController.php","line":110,"function":"search","class":"OC\Search\SearchComposer","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":218,"function":"search","class":"OC\Core\Controller\UnifiedSearchController","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":127,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/App.php","line":157,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/config/www/nextcloud/lib/private/Route/Router.php","line":302,"function":"main","class":"OC\AppFramework\App","type":"::"},{"file":"/config/www/nextcloud/ocs/v1.php","line":63,"function":"match","class":"OC\Route\Router","type":"->"},{"file":"/config/www/nextcloud/ocs/v2.php","line":24,"args":["/config/www/nextcloud/ocs/v1.php"],"function":"require_once"}],"File":"/config/www/nextcloud/lib/private/Log/ErrorHandler.php","Line":92,"CustomMessage":"--"},"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36","version":"21.0.0.18","id":"603dcfc106e67"}

     

     

     

     

    second error

    {"reqId":"MTxiAMraajXQ8KWpfa5C","level":3,"time":"2021-03-02T05:39:54+00:00","remoteAddr":"xxx.xxx.xxx.xxx","user":mynextcloud"","app":"PHP","method":"GET","url":"/ocs/v2.php/search/providers/settings/search?term=ransom&from=%2Fsettings%2Fapps","message":{"Exception":"Error","Message":"include(ransomware_protection/personal.php): failed to open stream: No such file or directory at /config/www/nextcloud/lib/private/legacy/OC_App.php#660","Code":0,"Trace":[{"file":"/config/www/nextcloud/lib/private/legacy/OC_App.php","line":660,"function":"onError","class":"OC\Log\ErrorHandler","type":"::"},{"file":"/config/www/nextcloud/lib/private/legacy/OC_App.php","line":660,"function":"include"},{"file":"/config/www/nextcloud/lib/private/Settings/Manager.php","line":258,"function":"getForms","class":"OC_App","type":"::"},{"file":"/config/www/nextcloud/apps/settings/lib/Search/SectionSearch.php","line":99,"function":"getPersonalSections","class":"OC\Settings\Manager","type":"->"},{"file":"/config/www/nextcloud/lib/private/Search/SearchComposer.php","line":162,"function":"search","class":"OCA\Settings\Search\SectionSearch","type":"->"},{"file":"/config/www/nextcloud/core/Controller/UnifiedSearchController.php","line":110,"function":"search","class":"OC\Search\SearchComposer","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":218,"function":"search","class":"OC\Core\Controller\UnifiedSearchController","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":127,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/config/www/nextcloud/lib/private/AppFramework/App.php","line":157,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->"},{"file":"/config/www/nextcloud/lib/private/Route/Router.php","line":302,"function":"main","class":"OC\AppFramework\App","type":"::"},{"file":"/config/www/nextcloud/ocs/v1.php","line":63,"function":"match","class":"OC\Route\Router","type":"->"},{"file":"/config/www/nextcloud/ocs/v2.php","line":24,"args":["/config/www/nextcloud/ocs/v1.php"],"function":"require_once"}],"File":"/config/www/nextcloud/lib/private/Log/ErrorHandler.php","Line":92,"CustomMessage":"--"},"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36","version":"21.0.0.18","id":"603dcfc106fbc"}

    I am running the linuxserver version of nextcloud docker on Unraid system 6.8.3 With setup cloudflare and SWAG for reverse proxy
    Happy to provide additional information to help figure this out :)

     

    Happy to provide more info just unclear what else will be helpful.... 

    [Support] ClamAV

    in Docker Containers

    Posted

    On 2/29/2020 at 6:08 PM, tazire said:

    No i never did after. Just couldnt get it working right. I didnt give it an awful lot of thought after the initial effort though. 

    In case you never figured this out I was able to using an alternate version of ClamAV  the "mk0x/docker-clamav:alpine"     found on the docker hub...  Then within nextcloud  set the AV to the following  settings in the image. .   (both had to be on the proxynet  to work ...  

    image.png

    [Support] ClamAV

    in Docker Containers

    Posted

    So I think I might have figured out where the problem is coming from and a possible solution...  again I am not that great at the backend stuff But was able to get a working copy of the CLAMav :)

     

    So again not sure what the difference is... but rather than pulling the CLAMav that is from TQ's   community application,  I went onto the docker hub search in the apps tap  finding TQ  your https://hub.docker.com/r/tquinnelly/clamav-alpine/     

     

    I pulled this one down setting it up with alll of the same permissions and settings as is found within your community applications but without the post arguement of "  -i"   not sure what it does?? (your input would be helpful).

     

    I then am able to run a scan using this newly downloaded docker.   and it outputs active  details into the log of what it is scanning.. 

    there in an initial error of "CRITICAL: fmap() failed"    then it says out of memory error and directs at the docker image.... 

     

    this version however continues to scan (outputting the files it is scanning into the log file).  So I can see it is progressing

     

    I have tested quickly changing Squids user script to direct at this docker (testing with a smaller /scan directory)... and it is able to produce the notifications, start the scan and report the outcomes... 

     

     

    So TQ it would be great to find out perhaps is the CRITICAL: fmap() failed  being due to scanning of the docker.img  ??    also again not sure what the "-i"   post arguement is supposted to do... still relatively new to things so trying to look into this.  

     

    Again this was my attempt at a solution... 

    [Support] ClamAV

    in Docker Containers

    Posted

    3 hours ago, TQ said:

    Sorry guys, life's priorities always win.

     

    Just updated the "Latest" tagged image (which the Unraid version is working from)

     

    Alpine: 3.13

    ClamAV: 0.103.1-r0

     

    I just scanned a decent chunk of files and did not see the behavior we all were seeing.

      

    
2021-03-01T03:45:47+0000 ClamAV process starting

Updating ClamAV scan DB
ClamAV update process started at Mon Mar  1 03:45:47 2021
daily database available for download (remote version: 26094)
Testing database: '/var/lib/clamav/tmp.e75353b543/clamav-ded1d73233782def9a1cb364ec3fb77b.tmp-daily.cvd' ...
Database test passed.
daily.cvd updated (version: 26094, sigs: 3955353, f-level: 63, builder: raynman)
main database available for download (remote version: 59)
Testing database: '/var/lib/clamav/tmp.e75353b543/clamav-462eb68c40e1e0c4badfd63fb77fc22d.tmp-main.cvd' ...
Database test passed.
main.cvd updated (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
bytecode database available for download (remote version: 332)
Testing database: '/var/lib/clamav/tmp.e75353b543/clamav-27c26d1f3ba016bc7ba80a8909c019f2.tmp-bytecode.cvd' ...
Database test passed.
bytecode.cvd updated (version: 332, sigs: 93, f-level: 63, builder: awillia2)
WARNING: Clamd was NOT notified: Can't connect to clamd through /run/clamav/clamd.sock: No such file or directory


Freshclam updated the DB


ClamAV 0.103.1/26094/Sun Feb 28 12:14:26 2021

Scanning /scan


----------- SCAN SUMMARY -----------
Known viruses: 8505015
Engine version: 0.103.1
Scanned directories: 2867
Scanned files: 35955
Infected files: 0
Data scanned: 44733.52 MB
Data read: 34502.84 MB (ratio 1.30:1)
Time: 6768.326 sec (112 m 48 s)
Start Date: 2021:03:01 03:46:10
End Date:   2021:03:01 05:38:58

2021-03-01T05:38:58+0000 ClamAV scanning finished

     

    Pull the latest and cross your fingers.

     

     

    So I just tried  deleting the entire CLAMav docker removing the app data folder, and re installing 

    But continue to get the following error ....   

    3 hours ago, TQ said:

    Pull the latest and cross your fing

    Did you change anything in the Docker edit page when pulling down the image?  change the /scan 

     

     

     

     

     

    2021-03-02T04:10:19+0000 ClamAV process starting

    Updating ClamAV scan DB
    ClamAV update process started at Tue Mar 2 04:10:19 2021
    daily.cvd database is up to date (version: 26095, sigs: 3956535, f-level: 63, builder: raynman)
    main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr)
    bytecode.cvd database is up to date (version: 332, sigs: 93, f-level: 63, builder: awillia2)


    Freshclam updated the DB


    ClamAV 0.103.1/26095/Mon Mar 1 12:10:16 2021

    Scanning /scan

    LibClamAV Warning: fmap: failed to get MD5
    LibClamAV Error: CRITICAL: fmap() failed

    [Support] ClamAV

    in Docker Containers

    Posted

    5 minutes ago, wgstarks said:

    The worst thing about this bug is that I still get notifications that the scan completed successfully and no infections were found even though the scan is failing.

    I am also getting this error... any update that you find greatly appreciate sharing 

     

    Need help with Fail2ban - setup

    in Lounge

    Posted

    6 minutes ago, LoneTraveler said:

    Hi, 

     

    Unfortunately not, however I do prefer the simplicity of NPM. If Fail2ban is ever implemented, it would top of an already excellent program. 

    I would second this.. 

     

    Do you know at all if NPM  is setup with GeoIP and how to go about enabling this?

     

    Need help with Fail2ban - setup

    in Lounge

    Posted

    On 8/27/2020 at 12:53 PM, LoneTraveler said:

    Hi, 

     

    I have the below Dockers running and everything seems to be going well. I checked in on my Cloudflare dashboard and was surprised/shocked at the amount of attempts to access my site there have been. USA, Germany, Brazil, all sorts, from all places.

     

    Now I don't know how many of these are genuine or are some sort of "bot" for backend systems scouring the Internet, however regardless, I want to ensure that I do all that I can to protect my server. I have utilised all of Cloudflares services to help, such as geoIP blocking, but I want to cover all bases. 

     

    I only have three ports open, 80, 443 and one for my WireGuard VPN. 80 and 443 are running behind NginxProxyManager and there is nothing in my unRAID logs to cause me any concern, at present. I wanted to use Fail2Ban that was incorporated into Linuxserver/Letsencrypt however I have (as of yesterday) made the move over to NginxProxyManager and they do not include it unfortunately. 

     

    I am still very much the unRAID novice, and have looked around for something to meet my needs however I have come up short. Is there anyone whom could point me in the right direction please? 

     

    Many thanks. 

     

     

    20200827_164205.jpg

     

     

    P.S.

    I'm currently watching the film "Snowden" and I want to unplug my server from the Internet. 🤣

    Had you been able to figure out how to get FAIL2BAN working with Nginx Proxy manager.. ?   I am considering the move over but didn't want to as I have it working with SWAG... 

    [Support] Djoss - Nginx Proxy Manager

    in Docker Containers

    Posted

    Hi all hoping someone might be able to help me out.    After much digging I haven't been able to find an answer as of yet.. 

     

    I am looking at switching over from SWAG  to the Nginx Proxy manager.(NPM)   But am wondering is there is a way to configure Fail2Ban. (forgive me if this is a stupid idea-- But am I able to leave SWAG installed and running and just map over the error log files and proxy_host log from NPM? ?  if so which ones would I need to map to have the "nginx-http-auth, and nginx-badbots, nginx-botsearch, and nginx-deny"  running properly with the NPM. 

     

    Secondly,  wondering if anyone can advise steps needed to setup GeoIP2 within NPM? 

     

       Reason for looking to switch is that I like the UI of Nginx Proxy manager.  I enjoy that it appears to be a very easy and intuitive interface for setup of future reverse proxy.   But want to have the backend security I was able to setup with Fail2ban and GEOIP2 within SWAG.  

     

    additionally i like that within Nginx Proxy Manager.. I could setup easily an Custom  Origin Cloudflare Cert and key for Origin end to end security (which I haven't been able to figure out an easy way to do within SWAG.(so if someone knew how to do that that would possible work as well..  

     

    Thanks in advance for support !!

    [Support] Linuxserver.io - SWAG - Secure Web Application Gateway (Nginx/PHP/Certbot/Fail2ban)

    in Docker Containers

    Posted

    HI all  thanks in advance for help.   thought this question might be better suited here under SWAG as the issue is with the FAiL2BAN setup of ...    So explanation of my situation.   I am working on setting up FAIL2BAN for Bitdefender as well as EMBY (had been doing nextcloud but realized it has built in one so don't have to now).    I have everything working in terms of the reverse proxy using spaceinvaders wonderful videos for support doing this.

     

    With the SWAG FAIL2BAN  I have edited the jail.local to have the following additional under the default 4 jails.   

    [bitwarden]
enabled = true
port = http,https
filter = bitwarden2
action = iptables-allports[name=bitwarden]
logpath = /log/bitwarden.log
ignoreip = 192.168.0.0/24
maxretry = 3
bantime = 14400
findtime = 14400


[bitwarden-admin]


enabled = true
port     = http,https
filter     = bitwarden-admin
action     = iptables-allports[name=bitwarden]
logpath = /log/bitwarden.log
ignoreip = 192.168.0.0/24
maxretry = 2
bantime = 14400
findtime = 14400


[emby]

enabled  = true
port     = http,https
filter   = emby
logpath  = /logs/emby/embyserver.txt
ignoreip = 192.168.0.0/24
maxretry = 3
bantime = 14400
findtime = 14400

     

    Within the filter.d  folder I have  created the following three config files 

    EMBY 

    # Fail2Ban filter for emby
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf


[Definition]
failregex = AUTH-ERROR: <HOST> - Invalid user
	HTTP Response 401 to <HOST>.

     

    Bitwarden2 

    # Fail2Ban filter for Bitwarden
# Detecting failed login attempts
# Logged in bwdata/logs/identity/Identity/log.txt

[INCLUDES]
before = common.conf

[Definition]
failregex = ^.*Username or password is incorrect\. Try again\. IP: <ADDR>\. Username:.*$
ignoreregex =

     

    Bitwarden-admin 

    [INCLUDES]
before = common.conf

[Definition]
failregex = ^.*Invalid admin token\. IP: <ADDR>\.*$
ignoreregex =

     

     

    When I go to test the fail2ban (by going onto my cell network) and attempting to connect to the reverse proxy emby or bitwarden with incorrect login past the "maxretry"    It does not activate...   HOWEVER... When I go to reset the SWAG container,  then the blocking occurs.. (Confirmed by using the terminal tools  "docker exec -it swag fail2ban-client status"   and   "docker exec -it swag fail2ban-client status <jail name>"      While doing the testing    the Jails are all shown as active...  .  any thoughts on why this is ?  

    [support] Vaultwarden (formerly Bitwarden_rs)

    in Docker Containers

    Posted

    9 hours ago, Roxedus said:

    the admin panel needs another regex to catch failed attempts 

     

    Okay so I have been able to setup another regex... but it is having a weird  response.... 

     

    When I try logging into the reversed proxy multiple times past the "maxretry"  amounts  I don't get banned...  but when i Reset the SWAG container then the bans take effect...   I am not sure why or even where to go from here...  any thoughts would be great

    [support] Vaultwarden (formerly Bitwarden_rs)

    in Docker Containers

    Posted

    15 minutes ago, bclinton said:

    bitwarden.bclinton.duckdns.org

    I do not claim to be an expert at all... but based on your site.. it  looks like a subdomain  i am not sure if having the extra "."  in between bitwarden.bclinton   makes a difference....  try setting up with just a single subdomain  like "bcclintonbitwarden "

     

    again not an expert at all with this.. rather just a trouble shooting step to consider...